Other Computer Engineering Commons^™

Cognitive Resilience At The Edge: Hyperdimensional Computing Versus Deep Learning For Hardware-Degraded Rf Classification, Adrian B. Cisneros, Jeong Yang

Military Cyber Affairs

Autonomous Collaborative Combat Aircraft (CCA) operating in contested electromagnetic environments must classify Radio Frequency (RF) signals on edge silicon that degrades over the mission lifetime due to thermal stress, radiation, and manufacturing variation. Deep neural networks dominate RF classification on pristine hardware, but their weights are precise and interdependent, causing catastrophic accuracy collapse as the underlying chip ages. We investigate whether Hyperdimensional Computing (HDC), a brain-inspired paradigm that distributes information across thousands of dimensions, can provide a reliability floor where Deep Learning fails. Using the RadioML 2016.10A dataset filtered to five digital modulations relevant to drone command-and-control links, we trained …

Hands-On Ransomware: An Experiential Wannacry Case Study For Undergraduate Cybersecurity Education, Eli Creek Richmond, Thomas R. Devine

Military Cyber Affairs

Ransomware represents one of the most disruptive threats in the cyber landscape, yet hands-on malware analysis remains rare in undergraduate cybersecurity curricula. This paper presents the design, implementation, and evaluation of an experiential learning module centered on the WannaCry ransomware case study, deployed in a senior-level course at West Virginia University. Students performed static and dynamic analysis using industry-standard tools. Pre- and post-module assessments demonstrated measurable gains in self-reported competency across seven technical dimensions. The module's competencies align directly with DoD Cyber Workforce Framework Work Role 212, Cyber Defense Forensics Analyst, supporting education-to-workforce pipeline development.

Breaking The Build: Detecting Software Supply Chain Vulnerabilities In Ci/Cd Pipelines, Mercedes R. Wahl, Dr. Benjamin Yankson

Military Cyber Affairs

This study examines whether integrating structured DevSec- Ops security controls into CI/CD pipelines can reduce software supply chain risk by preventing vulnerable components from progressing through the software development lifecycle. Software supply chain attacks frequently originate from weaknesses or compromises within dependencies, build environments, and trusted development stages, making early detection essential. A controlled sandbox experiment compared two pipeline configurations: a baseline CI/CD pipeline with no automated security enforcement and a secure DevSecOps pipeline integrating automated vulnerability scanning, SBOM generation, and artifact integrity verification. A known vulnerable dependency, the Python requests package (version 2.19.0) associated with CVE-2018-18074, was intentionally introduced …

Mitigating Common Vulnerabilities And Exposures In Cobol-Based Critical Systems Using The Strangler-Fig Pattern, Lauren E. Caruso, Vincent J. Compeau, Assefaw H. Gebremedhin

Military Cyber Affairs

COBOL-based legacy systems continue to underpin critical infrastructure in banking and government sectors despite their age and associated cybersecurity risks. Originally developed through a Department of Defense–sponsored initiative to standardize business computing, COBOL remains widely used in mission-critical environments. However, these systems face increasing vulnerabilities due to outdated security architectures, workforce shortages, and rising maintenance costs. This paper examines cybersecurity and operational challenges associated with COBOL systems and evaluates the Strangler Fig pattern as a modernization strategy that enables incremental replacement while maintaining continuity. The findings highlight implications for financial institutions and public-sector organizations dependent on legacy infrastructure.

Hybrid Deep (Cnn-Bilstm) Intrusion Detection For Defense And Mission-Critical Networks, Corey A Cheng, Jermaine Anim-Addo, Asma Jakir Hussain, Zion O Smith-Fox, Sanjay Goel, Yuksel Celik

Military Cyber Affairs

This article examines how hybrid deep learning can strengthen intrusion detection for military and defense networks. Using the CSE-CIC-IDS2018 dataset, the study evaluates a CNN-BiLSTM model designed to detect benign traffic and multiple attack categories, including DDoS, DoS, botnet, brute-force, web attack, and infiltration activity. The model achieved strong multi-class detection performance, with 0.9893 accuracy and 0.9979 ROC-AUC. The findings suggest that AI-supported intrusion detection can improve cyber defense operations, analyst triage, and protection of mission-critical networks.

Are Large Language Models Safe? A Vulnerability Analysis Of Generated Source Code, James Richards-Perhatch, Mitchell Milander, James M. Halvorsen, Assefaw Gebremedhin

Military Cyber Affairs

The increasing complexity of software and demands for rapid deployment have pushed the software industry to rely more on large language models (LLMs) in developing source code. However, as this technology is still relatively recent, questions can arise about the safety of the generated code. This paper presents an analysis of seven LLMs with respect to the presence of vulnerabilities within source code. Our findings show that LLMs are more likely to produce vulnerable web applications than vulnerable C programs, and that vulnerabilities are more likely to occur when program size and complexity increases.

Foreward, Todd Arnold

Military Cyber Affairs

No abstract provided.

Letter From The Director: Mastery In Practice, Joseph Schafer

Military Cyber Affairs

No abstract provided.

Implications Of Quantum Computing For Enterprise Cybersecurity And Data Integrity, Manikantha Varaprasad Inakollu

Computer Science and Engineering Faculty Publications

Quantum computing represents a paradigm shift in computational capabilities that poses both unprecedented threats and opportunities for enterprise cybersecurity. This research examines the implications of quantum computing advancement on current cryptographic systems, data protection mechanisms, and organizational security frameworks. Through analysis of quantum computing developments from 2019-2024 and surveys of 280 cybersecurity professionals across various industries, this study identifies critical vulnerabilities in existing encryption standards and explores emerging quantum-resistant solutions. The findings reveal that approximately 78% of enterprises remain unprepared for quantum threats, with current RSA and ECC encryption systems facing potential compromise within the next 10-15 years. The research …

A Predictive Model For Multi- Week Respiratory Risk From Red Tide On Florida’S Gulf Coast., Elmer S. Ochaeta

Computer Science and Engineering Faculty Publications

Florida’s Gulf Coast red tide (Karenia brevis) can put toxins into the air, making people cough, irritating the throat, and worsening asthma or other breathing problems especially when winds blow from the ocean toward the beach. Right now, most public updates don’t really help with the question people actually ask when planning a weekend or vacation: “Will going to or close to the beach be risky in the next few weeks?”.

In this project, I build a weekly early warning system that estimates respiratory risk for specific beaches and predicts that risk 2 to 4 weeks ahead. The study covers …

Director, Military Cyber Institute, Joseph Schafer

Military Cyber Affairs

No abstract provided.

Throughput Of Ascon Compared With Popular Iot Encryption Algorithms, Mitchel R. Harvey (Ryan), Andrew M. Kaiser, Garrett W. Hoiness

Military Cyber Affairs

No abstract provided.

Anomaly Detection Of Network Layer Attacks Against Cyber Physical Systems Using Machine Learning And Deep Learning Techniques, James Alger, Michael Tu

Military Cyber Affairs

This research paper presents the analysis of using machine learning and deep learning algorithms on detecting anomalous network traffic in Cyber-Physical Systems (CPS). Using a real PLC CPS-based system, normal and anomalous network traffic will be captured using Wireshark. The research analyzes a DDoS attack. The focus of the research is to identify the most effective feature combinations and evaluate them on ML and DL models. The emphasis is on enhancing detection strategies rather than exploiting device vulnerabilities. The detection of network attacks often involves handling a vast array of high-level features. Previous studies (Li & Chasaki, 2022) apply machine …

Characterizing Caldera’S Cyber Attack Emulation Capabilities, Caleb Chang, Matthew Cao, Kenyou Teoh, Ekzhin Ear, Shouhuai Xu

Military Cyber Affairs

Autonomous cyber attack emulation can aid cyber defenders to identify and remediate cyber risks. MITRE’s Caldera software is the state-of-the-practice for automated attack emulation. Yet, it has not been systematically analyzed, putting its performance and effectiveness into question. This paper systematically characterizes Caldera’s architecture, abilities and use cases, and assesses its strengths and weaknesses. It draws useful insights, such as: Caldera excels in stealthy access and execution tactics to pilfer data against Windows operating systems. It also discusses two directions for Caldera improvement: module-level automation and end-to-end attack emulation.

The Digital Battlefield: Safeguarding Military Drones Against Cyberattacks, Jason Ashong, Arun Venkitanarayanan, Benjamin Yankson

Military Cyber Affairs

The Internet of Battlefield Things (IoBT) is an advanced network of interconnected devices that significantly enhance military operations through real-time data exchange and situational awareness. While IoBT offers tactical advantages like improved surveillance, reconnaissance, and operational effectiveness, it also introduces substantial cybersecurity risks. Adversaries can exploit vulnerabilities within these networks, potentially compromising mission integrity and national security. This research examines the cybersecurity measures of commercial drone controllers and their correlation with military devices. It aims to enhance future vulnerability assessments with advanced tools and approaches to better secure critical military operations. The study highlights the need for robust security architectures …

Using Blockchain Technology To Help Secure America's Defense Critical Infrastructure, Vimal Buck, Aerin Krebs, Brynn Hillard, Jakob Gerha, Joseph Lutma, Srikar Maduposu, Ted Allen

Military Cyber Affairs

Critical water infrastructure in the United States faces increasing cybersecurity threats from state-sponsored actors, with potentially devastating consequences for national security, economic stability, and public health. (Cybersecurity and Infrastructure Security Agency, 2025). This infrastructure supports defense critical assets and is actively being targeted by various state-sponsored hacking groups, which poses a major concern for civilians and military alike. K. Herath (personal communication, February 24, 2025) reported being aware of two attacks on Ohio water systems during his tenure as Cybersecurity Strategic Advisor to Ohio Governor Mike DeWine.

Water is essential to everyday life and defense and presents as a high-value …

Network And Multipath Traceroute Visualization, Cameron Makowski

Military Cyber Affairs

TraceCam introduces a new paradigm in network path analysis, leveraging GPU-accelerated WebGL visualization, advanced traceroute integrations, and AI-driven insights to transform complex routing data into actionable intelligence. Early prototypes have demonstrated significant improvements in performance, clarity, and multi-path discovery, overcoming traditional limitations in traceroute analysis. By incorporating retrieval-augmented language models and enriched metadata sources like IPinfo.io, TraceCam enables automated anomaly detection, contextual explanations, and rapid root-cause analysis, enhancing operational efficiency. The platform’s architecture ensures scalability and adaptability, supporting deeper investigations and real-time situational awareness. Future development will focus on clustering-based anomaly detection, expanded geographic visualizations, and enhanced AI-generated analysis to …

Quantifying Adversary Military Forces’ Susceptibility To Cognitive Attacks, Bonnie Rushing, Cole Nelson, Shouhuai Xu, Christofer “Raven” O’Keefe, Olga Karpoyan

Military Cyber Affairs

This paper introduces a method to quantify international populations’ susceptibility to cyber cognitive attacks using press freedom and media trust metrics. We present the Cognitive Influence Calculator, a tool that estimates susceptibility (𝑆) based on Press Freedom Scores (PFS) and media trust levels. Findings show that while authoritarian regimes are harder to reach, successful cognitive attacks have greater impacts due to higher trust in state-controlled narratives. Using U.S. wargaming data and international trust metrics, we compute susceptibility scores for the U.S., Russia, China, Iran, and North Korea. Results show an inverse relationship between PFS and media susceptibility, with local/allied …

Forward, Amy Hamilton

Military Cyber Affairs

No abstract provided.

Understanding Russia’S Cyber Policies, Strategies, And Doctrines, Bryan Hancock, Hanh Nguyen, Olga Karpoyan, Ekzhin Ear, Shouhuai Xu

Military Cyber Affairs

This study analyzes the strengths and weaknesses of Russia’s cyber policies, strategies, and doctrines through a systematic set of attributes, leading to key insights: (i) Russia has proactively adapted its cyber policies, strategies, and doctrines to its evolving environment; (ii) Russia actively conducts cognitive warfare, but remains equally vulnerable to it; and (iii) Russia’s cyber posture faces significant challenges, including a limited technological base, shortage of skilled personnel, and restrictive approach to information control, all of which undermine the effectiveness of its strategies. These insights offer valuable implications for US Cyber Command and the Department of Defense.

Characterizing Cyberattacks Against Operational Technology Infrastructures Through The Lens Of Attack Flows, Sherman Kettner, Caleb Chang, Ekzhin Ear, Shouhuai Xu

Military Cyber Affairs

Operational Technology (OT) infrastructures play a critical role in modern society and economy. However, their increasing connectivity with public networks such as the Internet has made them vulnerable to cyberattacks, much like traditional Information Technology (IT) systems. In particular, cyberattacks against OT infrastructures remain relatively underexplored and little understood. In this paper, we aim to deepen our understanding of cyberattacks against OT infrastructures. For this purpose, we propose a methodology, including novel cybersecurity metrics to analyze the attack flows of these attacks in an end-to-end fashion, which allows us to draw useful insights. We demonstrate the utility of the methodology …

Quantum-Resilient Architectures For Enterprise And Cloud Information Systems, Implications Of Quantum Computing For Enterprise Cybersecurity And Data Integrity, Manikantha Varaprasad Inakollu

Computer Science and Engineering Faculty Publications

The emergence of quantum computing presents unprecedented challenges to contemporary enterprise cybersecurity frameworks. Current cryptographic systems that protect sensitive data and secure communications will become vulnerable to quantum attacks within the next decade. This research examines the implications of quantum computing advancement for enterprise and cloud information systems, proposing quantum-resilient architectural frameworks that can withstand both classical and quantum threats. We analyze the timeline of quantum computing development, assess vulnerabilities in existing enterprise security infrastructures, and evaluate post-quantum cryptographic approaches suitable for organizational implementation. Through comparative analysis of quantum-resistant algorithms and architectural patterns, this study demonstrates that enterprises must begin …

Blockchain-Enabled Trust Frameworks For Enterprise Information Systems, Establishing Verifiable Trust In Distributed Organizational Environments, Manikantha Varaprasad Inakollu

Computer Science and Engineering Faculty Publications

Enterprise information systems increasingly operate in distributed environments where traditional trust mechanisms based on centralized authority prove insufficient. This research develops a comprehensive blockchain-enabled trust framework that establishes verifiable, decentralized trust mechanisms for enterprise systems operating across organizational boundaries. The study addresses critical gaps in current enterprise architectures where trust depends on centralized intermediaries, creating single points of failure and limiting inter-organizational collaboration. Through examination of existing trust models and blockchain capabilities, we propose an integrated framework that combines cryptographic verification, distributed consensus, and smart contract automation to establish trust without centralized control. Our framework enables organizations to verify data …

Improving Ethics Surrounding Collegiate-Level Hacking Education: Recommended Implementation Plan & Affiliation With Peer-Led Initiatives, Shannon Morgan, Dr. Sanjay Goel

Military Cyber Affairs

Cybersecurity has become a pertinent concern, as novel technological innovations create opportunities for threat actors to exfiltrate sensitive data. To meet the demand for professionals in the workforce, universities have ramped up their academic offerings to provide a broad range of cyber-related programs (e.g., cybersecurity, informatics, information technology, digital forensics, computer science, & engineering). As the tactics, techniques, and procedures (TTPs) of hackers evolve, the knowledge and skillset required to be an effective cybersecurity professional have escalated accordingly. Therefore, it is critical to train cyber students both technically and theoretically to actively combat cyber criminals and protect the confidentiality, integrity, …

Using Digital Twins To Protect Biomanufacturing From Cyberattacks, Brenden Fraser-Hevlin, Alec W. Schuler, B. Arda Gozen, Bernard J. Van Wie

Military Cyber Affairs

Understanding of the intersection of cyber vulnerabilities and bioprocess regulation is critical with the rise of artificial intelligence and machine learning in manufacturing. We detail a case study in which we model cyberattacks on network-mediated signals from a novel bioreactor, where it is important to control medium feed rates to maintain cell proliferation. We use a digital twin counterpart reactor to compare glucose and oxygen sensor signals from the bioreactor to predictions from a kinetic growth model, allowing discernment of faulty sensors from hacked signals. Our results demonstrate a successful biomanufacturing cyberattack detection system based on fundamental process control principles.

Characterizing Advanced Persistent Threats Through The Lens Of Cyber Attack Flows, Logan Zeien, Caleb Chang, Ltc Ekzhin Ear, Dr. Shouhuai Xu

Military Cyber Affairs

Effective cyber defense must build upon a deep understanding of real-world cyberattacks to guide the design and deployment of appropriate defensive measures against current and future attacks. In this abridged paper (of which the full paper is available online), we present important concepts for understanding Advanced Persistent Threats (APTs), our methodology to characterize APTs through the lens of attack flows, and a detailed case study of APT28 that demonstrates our method’s viability to draw useful insights. This paper makes three technical contributions. First, we propose a novel method of constructing attack flows to describe APTs. This abstraction allows technical audiences, …

Machine Learning Security For Tactical Operations, Dr. Denaria Fields, Shakiya A. Friend, Andrew Hermansen, Dr. Tugba Erpek, Dr. Yalin E. Sagduyu

Military Cyber Affairs

Deep learning finds rich applications in the tactical domain by learning from diverse data sources and performing difficult tasks to support mission-critical applications. However, deep learning models are susceptible to various attacks and exploits. In this paper, we first discuss application areas of deep learning in the tactical domain. Next, we present adversarial machine learning as an emerging attack vector and discuss the impact of adversarial attacks on the deep learning performance. Finally, we discuss potential defense methods that can be applied against these attacks.

Securing The Void: Assessing The Dynamic Threat Landscape Of Space, Brianna Bace, Dr. Unal Tatar

Military Cyber Affairs

Outer space is a strategic and multifaceted domain that is a crossroads for political, military, and economic interests. From a defense perspective, the U.S. military and intelligence community rely heavily on satellite networks to meet national security objectives and execute military operations and intelligence gathering. This paper examines the evolving threat landscape of the space sector, encompassing natural and man-made perils, emphasizing the rise of cyber threats and the complexity introduced by dual-use technology and commercialization. It also explores the implications for security and resilience, advocating for collaborative efforts among international organizations, governments, and industry to safeguard the space sector.

Commercial Enablers Of China’S Cyber-Intelligence And Information Operations, Ethan Mansour, Victor Mukora

Military Cyber Affairs

In a globally commercialized information environment, China uses evolving commercial enabler networks to position and project its goals. They do this through cyber, intelligence, and information operations. This paper breaks down the types of commercial enablers and how they are used operationally. It will also address the CCP's strategy to gather and influence foreign and domestic populations throughout cyberspace. Finally, we conclude with recommendations for mitigating the influence of PRC commercial enablers.

Finops-Driven Cloud Optimization Models For Enterprise Applications, Manikantha Varaprasad Inakollu

Computer Science and Engineering Faculty Publications

Cloud computing has revolutionized enterprise IT infrastructure, yet escalating costs and resource inefficiencies threaten to undermine these benefits. This research examines FinOps-driven optimization models that enable organizations to balance cloud performance, cost efficiency, and business value. The study addresses the critical challenge enterprises face in managing cloud expenditures while maintaining operational excellence. Through comprehensive analysis of FinOps principles and practical optimization frameworks, we develop models that integrate financial accountability, technical efficiency, and business alignment. Our research demonstrates that organizations implementing structured FinOps practices achieve 25-40% cost reductions without compromising application performance. The study contributes both theoretical frameworks for understanding cloud …