Breaking The Build: Detecting Software Supply Chain Vulnerabilities In Ci/Cd Pipelines, Mercedes R. Wahl, Dr. Benjamin Yankson

Military Cyber Affairs

This study examines whether integrating structured DevSec- Ops security controls into CI/CD pipelines can reduce software supply chain risk by preventing vulnerable components from progressing through the software development lifecycle. Software supply chain attacks frequently originate from weaknesses or compromises within dependencies, build environments, and trusted development stages, making early detection essential. A controlled sandbox experiment compared two pipeline configurations: a baseline CI/CD pipeline with no automated security enforcement and a secure DevSecOps pipeline integrating automated vulnerability scanning, SBOM generation, and artifact integrity verification. A known vulnerable dependency, the Python requests package (version 2.19.0) associated with CVE-2018-18074, was intentionally introduced …

Ai Cyber First Responders: Bottleneck Analysis Of Heterogeneous Cpu–Gpu Pipelines For Security Operations Center Triage, Christine Pierce

Harrisburg University Other Works

Abstract — Modern Security Operations Centers (SOCs) must continuously process massive volumes of heterogeneous security telemetry while meeting stringent throughput, latency, and operational continuity requirements. Although transformer-based artificial intelligence has significantly improved threat detection and alert prioritization, most cybersecurity research evaluates model accuracy rather than the end-to-end behavior of AI-enabled operational pipelines. Consequently, relatively little is known about how heterogeneous CPU–GPU coordination, scheduling overhead, memory movement, and synchronization collectively influence operational SOC performance. This paper presents the AI Cyber First Responder, a heterogeneous SOC triage architecture that integrates GPU-accelerated transformer inference with CPU-based doctrine-driven reasoning to investigate end-to-end pipeline behavior …

Design And Implementation Of Cyber Risk Management In The Indonesian Aviation Sector Based On Nist Csf And Iso/Iec 27002:2022, Annisa Aulia Budianti Qurota'aini, Ira Rosianal Hikmah, Yulial Hikmah

Jurnal Vokasi Indonesia

As technology usage increases, cyberspace in Indonesia has developed significantly, including in Vital Information Infrastructure (VII) sectors such as aviation. However, this advancement introduces potential cyber threats that can disrupt operations. This research aims to design a systematic cyber risk management framework for a navigation authority within the Indonesian aviation sector using the National Institute of Standards and Technology Cybersecurity Framework (NIST CSF) as the primary standard. This research also utilizes national aviation regulations, Center for Internet Security Controls (CIS Controls) v8.0, and ISO/IEC 27002:2022 as supporting frameworks. The research employs a qualitative descriptive approach, gathering data through field observations, …

Ai-Scm Cmm: A Capability Maturity Model For Artificial Intelligence Integration In Supply Chain Management, Lordt Becklines, Omar F. El-Gayar, Patti Brooks, Insu Park

Annual Research Symposium

Artificial intelligence is increasingly deployed in supply chain management, yet many organizations struggle to align adoption efforts with process readiness, data quality, governance, and workforce capabilities, and they still lack validated supply chain specific roadmap for assessing readiness, sequencing investments, and reducing implementation risk. This study develops and evaluates a Capability Maturity Model for Artificial Intelligence Integration in Supply Chain Management to address that gap. Using a design science research approach, the study synthesizes prior literature and practitioner knowledge to define maturity dimensions, capability indicators, and staged progression levels for AI integration in supply chain contexts. The artifact and assessment …

A Data-Driven Framework For Modeling Car-Following Behavior Using Conditional Transfer Entropy And Dynamic Mode Decomposition, Poorendra Ramlall

Student Research Symposium (SRS)

Accurate modeling of car-following behavior is essential for understanding traffic dynamics and enabling predictive control in intelligent transportation systems. This study presents a novel data-driven framework that combines information-theoretic input selection via conditional transfer entropy (CTE) with dynamic mode decomposition with control (DMDc) for identifying and forecasting car-following dynamics. In the first step, CTE is employed to identify the specific vehicles that exert directional influence on a given subject vehicle, thereby systematically determining the relevant control inputs for modeling its behavior. In the second step, DMDc is applied to estimate and predict the dynamics by reconstructing the closed-form expression of …

Securing U.S. Leadership In Agentic Ai Literacy And Adoption: U.S. Vs Chinese Government Policies And Initiatives, Satyadhar Joshi

Harrisburg University Other Works

This paper conducts a comparative analysis of U.S. and Chinese frameworks for AI literacy and adoption, with focus on agentic AI and Artificial General Intelligence (AGI) systems capable of autonomous reasoning and execution. We examine national policies, educational integration, governance structures, and technological roadmaps, employing both qualitative review and quantitative modeling. Mathematical formulations include multi-dimensional literacy scoring, Bass diffusion models for adoption dynamics, risk assessment functions, regulatory effectiveness indices, competitiveness metrics, and optimization frameworks for resource allocation. Our analysis reveals divergent paradigms: the U.S. Favors decentralized, innovation-driven approaches with emphasis on interoperability and public-private collaboration; while China pursues centralized, state-led …

Proactive Safety Reasoning In Human-Robot Collaboration In Disassembly Through Llm-Augmented Stpa And Fmea, Morteza Jalali Alenjareghi, Fardin Ghorbani, Samira Keivanpour, Yuvin Adnarain Chinniah, Sabrina Jocelyn

Études primaires

Disassembly tasks in human–robot collaboration (HRC) environments present safety challenges due to hazardous materials, control system variability, and physically demanding operator tasks. To address these challenges, we propose an AI-augmented risk assessment framework integrating System-Theoretic Process Analysis (STPA) and Failure Mode and Effects Analysis (FMEA). This framework is implemented in four configurations: Term Frequency– Inverse Document Frequency (TF-IDF), Fine-tuned Large Language Models (LLMs), Retrieval-Augmented Generation (RAG), and RAG with a structured Knowledge Graph (KG) built from safety standards. The system supports real-time, standards-compliant safety reasoning by generating interpretable, context-specific recommendations. We evaluate these configurations across GPT-3.5 TURBO, GPT-4o, GPT-4.1, and …

Proof Of Recovery: A Model To Enhance Data Integrity In Data Management Systems, Gustaf Barkstrom

Theses and Dissertations

Businesses lose millions of dollars every year when they can’t restore data from backups. Research shows that Disaster Recovery Plan (DRP) testing is not conducted frequently enough, nor are records maintained that demonstrate full data recovery from backups. This work introduces a design science artifact called PRTOK that aims to increase DRP testing. The design science artifact is a software solution that integrates with Data Management Systems (DMS)

such as iRODS and DSpace, and can work with formats such as HDF5 and BagIt. Proof-of- recovery records, or tokens, are recorded in a replicated, resilient, and indelible proof-of- authority blockchain data …

Implementing Controls To Mitigate The 2013 Target Data Breach: A Cost Benefit Analysis, Pricilia R. Fajong

Dissertations, Theses, and Projects

In 2013 Target had a data breach, which compromised 40 million credit/debit card accounts and 70 million customer records. The attackers exploited a vulnerability in a third-party vendor (Fazio Mechanical Services), to gain access to Target's systems. The breach cost Target over $250 Million (USD) in legal fees, investigation expenses, and reputational damage (Jones, 2025). Based on inflation rate, the 2013 Target data breach would cost over $340 Million (USD) today. In this study, a cost-benefit analysis was done to determine whether it would have been more cost-effective for Target to have invested in security controls rather than paying for …

A Predictive Model For Multi- Week Respiratory Risk From Red Tide On Florida’S Gulf Coast., Elmer S. Ochaeta

Computer Science and Engineering Faculty Publications

Florida’s Gulf Coast red tide (Karenia brevis) can put toxins into the air, making people cough, irritating the throat, and worsening asthma or other breathing problems especially when winds blow from the ocean toward the beach. Right now, most public updates don’t really help with the question people actually ask when planning a weekend or vacation: “Will going to or close to the beach be risky in the next few weeks?”.

In this project, I build a weekly early warning system that estimates respiratory risk for specific beaches and predicts that risk 2 to 4 weeks ahead. The study covers …

Llm-Driven Fmea For Safe Human-Robot Collaboration In Disassembly, Morteza Jalali Alenjareghi, Samira Keivanpour, Yuvin Adnarain Chinniah, Sabrina Jocelyn

Articles dans des actes de congrès

Disassembly operations often present unstructured and unpredictable scenarios, such as handling hazardous materials, addressing ergonomic strain, and managing dynamic robot interactions that pose safety risks. To tackle these challenges, we propose an innovative use of large language models (LLMs) to enhance failure mode and effect analysis (FMEA) in the context of human-robot collaboration (HRC) for disassembly tasks. We developed an LLM system leveraging retrieval-augmented generation (RAG) for real-time risk analysis and recommendation generation. RAG retrieves domain-specific information from the FMEA knowledge database, enabling accurate risk analysis, contextual understanding, and relevant recommendations based on user input and operational data. Evaluation of …

Insider Threat Agent: A Behavioral Based Zero Trust Access Control Using Machine Learning Agent, Michael Fojude

College of Graduate Studies: Theses & Dissertations

Hybrid work, cloud adoption, and freely available AI‑enabled attack tools have exposed critical weaknesses in perimeter‑centric security. Current breach reports attribute more than one‑third of incidents to insider misuse or credential compromise, yet many organizations still depend on static Role‑ or Attribute‑Based Access Control that neither verifies intent continuously nor adapts to subtle behavioral change. This research addresses that gap by designing and validating a behavioral based Zero Trust Access Control (ZTAC) Agent. A five‑year enterprise log Dataset was extracted and cleansed to establish a high‑fidelity baseline of normal user behavior. Feature engineering captured temporal regularity (login sequence, session duration), …

The Impact Of Student Engagement Activities On Future Climate Change Adaptation: The Case Of Student Simulation Models, Bassel Mostafa Elkalaf

Future Journal of Social Science

This paper explores the critical role of student engagement in addressing the growing challenges of climate change, with a focus on the Model United Nations (MUN) as a case study. As climate-related security threats increase globally, educational platforms that prepare youth for effective leadership in climate politics are more essential than ever. MUN, a widely practiced student activity simulating global policy-making, provides a valuable opportunity for students to deepen their understanding of the interconnectedness between climate change, peace, and security. By participating in MUN simulations, students engage in debates, develop innovative solutions, and practice diplomatic skills, all while exploring the …

An Analysis Of Security Risks Posed By Text-Based Generative Ai And Corporate Security Weaknesses Leading To Data Leaks, Tashya Rakshana Byreddy

Electronic Theses, Projects, and Dissertations

ABSTRACT

Generative AI (GenAI) has become a fundamental part of modern life, influencing how we work, learn, and interact with technology. This project focuses specifically on text-based GenAI, which is widely used for tasks such as information gathering, code improvement, and content creation. Despite its benefits, it presents significant security risks that are often underestimated by users. This project investigates these risks and the corporate security gaps that lead to unintentional data leaks. The project also provides a brief overview of Large Language Models (LLMs), which are based on the deep learning technique known as Transformer architecture, used for performing …

Bidding Strategy For A Wind Power Producer In Us Energy And Reserve Markets, Anne Stratman

Department of Electrical and Computer Engineering: Dissertations, Theses, and Student Research

Wind power is one of the world's fastest-growing renewable energy resources and has expanded quickly within the US electric grid. Currently, wind power producers (WPPs) may sell energy products in US markets but are not allowed to sell reserve products, due to the uncertain and intermittent nature of wind power. However, as wind’s share of the power supply grows, it may eventually be necessary for WPPs to contribute to system-wide reserves. This paper proposes a stochastic optimization model to determine the optimal offer strategy for a WPP that participates in the day-ahead and real-time energy and spinning reserve markets. The …

Data-Driven Approaches For Enhancing Power Grid Reliability, Behrouz Sohrabi

Electronic Theses and Dissertations

This thesis explores the transformative potential of data-driven approaches in addressing key operational and reliability issues in power systems. The first part of this thesis addresses a prevalent problem in power distribution networks: the accurate identification of load phases. This study develops a data-driven model leveraging consumption measurements from smart meters and corresponding substation data to reconstruct topology information in low-voltage distribution networks. The proposed model is extensively tested using a dataset with more than 5,000 real load profiles, demonstrating satisfactory performance for large-scale networks. The second part of the thesis pivots to a crucial safety concern: the risk and …

Alice In Cyberspace 2024, Stanley Mierzwa

Center for Cybersecurity

‘Alice in Cyberspace’ Conference Nurtures Women’s Interest, Representation in Cybersecurity

On Uncertainty For Ill-Posed Robot Decision Problems, Jared Joseph Beard

Graduate Theses, Dissertations, and Problem Reports (ETD)

As robots adopt more real world responsibilities, they will be expected to solve more complicated problems. In some cases limited prior knowledge will result in unmodelled environmental conditions; in others, multiple users may have competing perspectives on how to frame a decision problem. Many existing frameworks, namely Markov decision processes (MDP) presuppose users have identified a specific problem with models sufficient to solve or learn a problem. If we wish to extend MDPs to novel problems or those heavily dependent on user feedback, autonomous decision makers must be able to identify limitations in how a given problem is framed and …

Compare And Contrast The Intent Of Hacking Vs Penetration Testing, Kehinde Alabi

Harrisburg University Other Works

No abstract provided.

Contrast And Compare The Cyber Hacking Laws Between The United States, Russian Federation, And The People's Republic Of China, Kehinde Alabi

Harrisburg University Other Works

Cyber hacking is a growing threat in the modern world. As the world becomes more digital, the threat of cybercrime continues to grow. Cyberattacks can lead to stolen personal information, financial losses and damage to critical information. The increase in the digital transformation of companies has also led to an increase in cyber security concerns. With cybercriminals using increasingly advanced methods to gain access and take advantage of sensitive information. As a result, governments around the world have developed measures, laws, and regulations to address cybercrime and protect against cyberattacks. The United States, Russian Federation, and the People’s Republic of …

Reducing Food Scarcity: The Benefits Of Urban Farming, S.A. Claudell, Emilio Mejia

Journal of Nonprofit Innovation

Urban farming can enhance the lives of communities and help reduce food scarcity. This paper presents a conceptual prototype of an efficient urban farming community that can be scaled for a single apartment building or an entire community across all global geoeconomics regions, including densely populated cities and rural, developing towns and communities. When deployed in coordination with smart crop choices, local farm support, and efficient transportation then the result isn’t just sustainability, but also increasing fresh produce accessibility, optimizing nutritional value, eliminating the use of ‘forever chemicals’, reducing transportation costs, and fostering global environmental benefits.

Imagine Doris, who is …

Enhancing Accident Investigation Using Traffic Cctv Footage, Aksharapriya Peddi

Electronic Theses, Projects, and Dissertations

This Culminating Experience Project investigated how the densenet-161 model will perform on accident severity prediction compared to proposed methods. The research questions are: (Q1) What is the impact of usage of augmentation techniques on imbalanced datasets? (Q2) How will the hyper parameter tuning affect the model performance? (Q3) How effective is the proposed model compared to existing work? The findings are: Q1. The effectiveness of our model depends on the implementation of augmentation techniques that pay attention to handling imbalanced datasets. Our dataset poses a challenge due to distribution of classes in terms of accident severity. To address this challenge …

Kwad - Ksu All Weather Autonomous Drone, Nick Farinacci, Sebastian Gomez, Stewart Baker, Ed Sheridan

Symposium of Student Scholars

"KWAD" or "KSU all-Weather Autonomous Drone" project was sponsored by Ultool, LLC to the KSU Research and Service Foundation to create a lightweight drone capable of capturing HD video during all-weather operations. The conditions of all-weather operation include rainfall of one inch per hour and wind speeds of up to twenty miles per hour. In addition, a global minimum structural safety factor of two is required to ensure the system's integrity in extreme weather conditions. Potential mission profiles include autonomous aerial delivery, topological mapping in high moisture areas, security surveillance, search and rescue operations, emergency transportation of medical supplies, and …

Sensor Module Network For Monitoring Trace Gases In The International Space Station, Aaron Beck, Drake Provost, Christopher English, Kamrin Gustave

Honors Capstones

The Jet Propulsion Laboratory (JPL) of the National Aeronautics and Space Administration (NASA) aims to develop a sensor network for the International Space Station (ISS) to ensure a comprehensive understanding of air quality within the station. The accumulation of carbon dioxide (CO­­­­­₂) can lead to cognitive impairment, headaches, and potentially dangerous situations at high concentrations. Monitoring air content at the ISS is critical to maintaining a healthy environment for crew onboard. Exposure to harmful gases causes negative side effects that make crew sick, which may interfere with their responsibilities. CO₂ is a gas that should be monitored …

Types Of Cyber Attacks And Incident Responses, Kaung Myat Thu

Publications and Research

Cyber-attacks are increasingly prevalent in today's digital age, and their impact can be severe for individuals, organizations, and governments. To effectively protect against these threats, it is essential to understand the different types of attacks and have an incident response plan in place to minimize damage and restore normal operations quickly.

This research aims to contribute to the field by addressing the following questions: What are the main types of cyber-attacks, and how can organizations effectively respond to these incidents? How can the incident response process be improved through post-incident activities?

The study examines various cyber-attack types, including malware, phishing, …

Systemic Risk Analysis Of Human Factors In Phishing, Mark Guilford

Engineering Management & Systems Engineering Theses & Dissertations

The scope of this study is the systemic risk of the role of humans in the risk of phishing. The relevance to engineering managers and systems engineers of the risks of phishing attacks is the theft of data which has significantly increased in the past couple of years. Phishing has become a systemic persistent threat to all internet users. Understanding the role of humans in phishing from a systemic perspective is a critical objective towards creating a strong defense against complex and manipulative phishing attacks. The systemic view of phishing concentrates on how phishing affects the entire organizational system, not …

Analyzing The Impact Of Automation On Employment In Different Us Regions: A Data-Driven Approach, Thejaas Balasubramanian

Electronic Theses, Projects, and Dissertations

Automation is transforming the US workforce with the increasing prevalence of technologies like robotics, artificial intelligence, and machine learning. As a result, it is essential to understand how this shift will impact the labor market and prepare for its effects. This culminating experience project aimed to examine the influence of computerization on jobs in the United States and answer the following research questions: Q1. What factors affect how likely different jobs will be automated? Q2. What are the possible effects of automation on the US workforce across states and industries? Q3. What are the meaningful predictors of the likelihood of …

Ransomware: Evaluation Of Mitigation And Prevention Techniques, Juanjose Rodriguez-Cardenas

Symposium of Student Scholars

Ransomware is classified as one of the main types of malware and involves the design of exploitations of new vulnerabilities through a host. That allows for the intrusion of systems and encrypting of any information assets and data in order to demand a sum of payment normally through untraceable cryptocurrencies such as Monero for the decryption key. This rapid security threat has put governments and private enterprises on high alert and despite evolving technologies and more sophisticated encryption algorithms critical assets are being held for ransom and the results are detrimental, including the recent Colonial Pipeline ransomware attack in 2021 …

Self-Learning Algorithms For Intrusion Detection And Prevention Systems (Idps), Juan E. Nunez, Roger W. Tchegui Donfack, Rohit Rohit, Hayley Horn

SMU Data Science Review

Today, there is an increased risk to data privacy and information security due to cyberattacks that compromise data reliability and accessibility. New machine learning models are needed to detect and prevent these cyberattacks. One application of these models is cybersecurity threat detection and prevention systems that can create a baseline of a network's traffic patterns to detect anomalies without needing pre-labeled data; thus, enabling the identification of abnormal network events as threats. This research explored algorithms that can help automate anomaly detection on an enterprise network using Canadian Institute for Cybersecurity data. This study demonstrates that Neural Networks with Bayesian …

Identifying Hazardous Patterns In Msha Data Using Random Forests, Olivia Milam

Theses, Dissertations and Capstones

Mining safety and health in the US can be better understood through the application of machine learning techniques to data collected by the Mine Safety and Health Administration (MSHA). By identifying hazardous conditions that could lead to accidents before they occur, valuable insights can be gained by MSHA, mining operators, and miners. In this study, we propose using a Random Forest machine learning model to predict whether a given mining violation will lead to an accident, and if so, whether it will be fatal or non-fatal. To achieve this, the model is trained on MSHA violation data and the sum …