Physical Sciences and Mathematics Commons^™

Assessing Flaws In Captcha Security Through Progress In Ai, Jaydon Stanislowski

Scholarly Horizons: University of Minnesota, Morris Undergraduate Journal

Protecting the internet from the threat of malicious bot activity is an important problem as AI tools become more powerful and commonplace over time. To that end, security measures are employed across websites in the form of CAPTCHAs, short challenges designed to identify and block fake web traffic. Yet, they become less effective over time as AI becomes more powerful, and thus more capable of solving them. This paper examines recent research on the threat to CAPTCHA security posed by current AI models and how this security can be reinforced over time, focusing primarily on Google’s reCAPTCHA v3.

Understanding The Role Of Tiktok As A Source Of Support For Cyberbullying Victims, Saba Iqbal

Theses and Dissertations

Cyberbullying poses a significant threat to teenagers and young adults, who often seek support and advice online. Little is known about the support and advice shared online for victims of cyberbullying and whether it is helpful. In this study, we used qualitative thematic analysis to examine a sample of 150 TikTok videos that give support or advice for cyberbullying victims. We identify 33 unique pieces of support and advice across 5 categories, with differences in tone and delivery among different types of videos. We then evaluated the quality of 33 unique pieces of cyberbullying advice in a user study with …

Defending Code Language Models Against Backdoor Attacks With Deceptive Cross-Entropy Loss, Guang Yang, Yu Zhou, Xiangyu Zhang, Xiang Chen, Terry Yue Zhuo, David Lo, Taolue Chen

Research Collection School Of Computing and Information Systems

Code Language Models (CLMs), particularly those leveraging deep learning, have achieved significant success in code intelligence domain. However, the issue of security, particularly backdoor attacks, is often overlooked in this process. The previous research has focused on designing backdoor attacks for CLMs, but effective defenses have not been adequately addressed. In particular, existing defense methods from natural language processing, when directly applied to CLMs, are not effective enough and lack generality, working well in some models and scenarios but failing in others, thus fall short in consistently mitigating backdoor attacks. To bridge this gap, we first confirm the phenomenon of …

An Investigation Into The Mechanisms, Barriers, Degree And Sphere Of Risk Influence In Corporate Security, Nicola Lockhart

Theses: Doctorates and Masters

This study investigates the sphere of corporate security risk influence within organisations, addressing the conceptual and practical ambiguity surrounding the activity’s capacity to shape organisational decisions, behaviours, and risk priorities. While corporate security’s protective role is widely recognised, its broader organisational risk influence remains under-theorised. The study defines the sphere of risk influence as the range of organisational stakeholders and environments with which the corporate security activity interacts, and within which it may engage, persuade, and mobilise action. This sphere is analytically constituted through the intersection of three dimensions: the mechanisms through which influence is attempted, the barriers that constrain …

Towards Secure Program Partitioning For Smart Contracts With Llm’S In-Context Learning, Ye Liu, Yuqing Niu, Chengyan Ma, Ruidong Han, Wei Ma, Yi Li, Debin Gao, David Lo

Research Collection School Of Computing and Information Systems

Smart contracts are highly susceptible to manipulation attacks due to the leakage of sensitive information. Addressing manipulation vulnerabilities is particularly challenging because they stem from inherent data confidentiality issues rather than straightforward implementation bugs. To tackle this by preventing sensitive information leakage, we present PARTITIONGPT, the first LLM-driven approach that combines static analysis with the in-context learning capabilities of large language models (LLMs) to partition smart contracts into critical (privileged) and normal codebases, guided by a few annotated sensitive data variables. We evaluated PARTITIONGPT on 18 annotated smart contracts containing 99 sensitive functions. The results demonstrate that PARTITIONGPT successfully generates …

A Systematic Study Of Passkey User Experience Consistency, Bernhardt Ramat

Theses and Dissertations

Passkeys have emerged as a more secure authentication method than passwords, providing a passwordless alternative resistant to phishing and credential theft attacks. Despite their growing adoption, a systematic study into the user experience of passkeys across various websites has yet to be conducted. Usability heuristics suggest that users transfer their expectations from one product to another, and therefore, inconsistencies in passkey deployments can increase cognitive load, resulting in frustration and possible rejection. To address this knowledge gap, this paper presents a comparative analysis of the external functional consistency of the passkey user experience across 111 websites. Our research reveals that …

A Trigger For The Autonomous Decommissioning Of Smart Devices, Ravindra Mangar, Jared Chandler, Jingyu Qian, Carl A. Gunter, Timothy J. Pierson, David Kotz

Dartmouth Scholarship

Smart devices are ubiquitous in modern environments, yet their decommissioning phase remains poorly studied and often overlooked in system design. We define secure decommissioning as the process by which a smart device securely disconnects from its environment and makes sensitive data inaccessible. If not decommissioned, devices may retain sensitive information – such as security credentials or user-behavior data that could be recovered by an adversary. Unfortunately, some users may forget to decommission a device when they dispose or sell it, and cannot decommission a device that is lost or stolen. This paper investigates a trigger mechanism for individual wireless smart …

Confidential, Attestable, And Efficient Inter-Cvm Communication With Arm Cca, Sina Abdollahi, Amir Al Sadi, Marios Kogias, Hamed Haddadi, David Kotz

Other Faculty Materials

Confidential Virtual Machines (CVMs) are increasingly adopted to protect sensitive workloads from privileged adversaries such as the hypervisor. While they provide strong isolation guarantees, existing CVM architectures lack first-class mechanisms for inter-CVM data sharing due to their disjoint memory model, making inter-CVM data exchange a performance bottleneck in compartmentalized or collaborative multi-CVM systems. Under this model, a CVM's accessible memory is either shared with the hypervisor or protected from both the hypervisor and all other CVMs. This design simplifies reasoning about memory ownership; however, it fundamentally precludes plaintext data sharing between CVMs because all inter-CVM communication must pass through hypervisor-accessible …

Securing Connected And Autonomous Vehicles, Owana Marzia Moushi

Dissertations and Doctoral Documents, University of Nebraska-Lincoln, 2023–

A vehicular network is susceptible to various security flaws and attacks. Cryptographic techniques are used in vehicular networks but these alone cannot provide proper security to the network. Identifying various types of attacks is necessary to secure vehicular communication networks. In this dissertation, we focused on detecting various insider attacks in vehicular networks to enhance the security of the network.

Our first contribution in this dissertation is the detection of both binary and multi-class data replay and data replay Sybil attacks in vehicular networks. A publicly available dataset, VeReMi-Extension is used to detect these attacks. This dataset has been reformulated …

Improving Co-Decoding Based Security Hardening Of Code Llms Leveraging Knowledge Distillation, Dong Li, Shanfu Shu, Meng Yan, Zhongxin Liu, Chao Liu, Xiaohong Zhang, David Lo

Research Collection School Of Computing and Information Systems

Large Language Models (LLMs) have been widely adopted by developers in software development. However, the massive pretraining code data is not rigorously filtered, allowing LLMs to learn unsafe coding patterns. Several prior studies have demonstrated that code LLMs tend to generate code with potential vulnerabilities. The widespread adoption of intelligent programming assistants poses a significant threat to the software development process. Existing approaches to mitigating this risk primarily involve constructing secure data that are free of vulnerabilities and then retraining or fine-tuning the models. However, such an effort is resource intensive and requires significant manual supervision. When the model parameters …

Non-Blackbox Robust Design Of Machine Learning In Networks, Venkat Sai Suman Lamba Karanam

Dissertations and Doctoral Documents, University of Nebraska-Lincoln, 2023–

Networked systems have become increasingly complex, with newer communication technologies and standards being added every day. Machine Learning (ML) and Artificial Intelligence (AI) paradigms have been adopted in networks to not only solve many fundamental problems, but also to allow seamless integration of components comprising them. The saying “let’s not reinvent the wheel” in ML/AI adoption implies that model architecture design be left for pure ML/AI researchers, while network researchers focus on input preprocessing (e.g. formatting the packet data to be fed to a model), hyperparameter fine-tuning and a trial-and-error approach to find the “best” result. …

Zero Trust Architecture For Electric Transportation Systems: A Systematic Survey And Deep Learning Framework For Replay Attack Detection, Grace Muriithi, Behnaz Papari, Ali Arsalan, Laxman Timilsina, Alex Muriithi, Elutunji Buraimoh, Asif Khan, Gokhan Ozkan, Christopher Edrington, Akram Papari

Montclair State University Scholarship & Creative Works

Modern and autonomous hybrid electric vehicles (HEVs), as complex cyber-physical systems, represent a key innovation in the future of transportation. However, the increasing interconnectivity and reliance on digital components expose these vehicles to significant cybersecurity risks. To address these challenges, Zero Trust Architecture (ZTA) has emerged as a promising security framework. Operating on the principle of ‘never trust, always verify,’ ZTA offers a comprehensive approach to ensuring continuous trust verification in HEV systems. Despite its potential, the application of ZTA within cyber-physical vehicular systems remains underexplored, and its practical benefits and limitations are not yet fully understood by the engineering …

Development Of A Near Terahertz Backward Wave Oscillator Using Standard Waveguide, Alexander Glick

Electrical and Computer Engineering ETDs

There is a demand for terahertz (THz) frequency radiation sources. Applications include, but are not limited to, imaging for medical and security purposes, biochemical and organic spectroscopy, and velocimetry. Historically, there was a limited supply of THz devices due to technological limitations. In recent years much progress has been made to reduce this “gap” in supply and demand for THz sources. This work proposes a vacuum electronic device that produces high power, extremely high frequency radiation in the G-band, by utilizing a backward wave oscillator (BWO) based on WR3 standard waveguide. This device is compact, fundamentally simple, and has great …

Building And Demonstrating A Framework And Guide For Human-Centered Threat Modeling, Warda Usman

Theses and Dissertations

As researchers increasingly seek to understand threats faced by people rather than systems, there remains little consensus on how to study these threats in ways that are grounded in human experience. Traditional approaches to threat modeling are often designed for system vulnerabilities and offer limited guidance for eliciting or analyzing threats as understood by individuals in their social and cultural contexts. This dissertation addresses this gap by advancing human-centered threat modeling (HCTM) in security and privacy research as both a conceptual framework and through a set of empirical studies. The dissertation employs a mixed set of qualitative methods across four …

Exploiting Compiler-Introduced Vulnerabilities In C: A Cross-Compiler And Cross-Architecture Analysis Of Undefined Behavior, Erik Mccutchen

Master's Theses

Compilers are a critical component in generating secure software across engineering disciplines. However, languages like C that permit undefined behavior introduce a fundamental tension between the compiler’s interpretation of undefined behavior and the security of the generated code. This tension can result in security vulnerabilities that, from the programmer's perspective, are ``created'' by the compiler. The widespread use of these languages, combined with the complexity of modern optimizations and limited developer visibility into compiler behavior, makes these vulnerabilities both pervasive and difficult to detect.

Building on prior work, this thesis refines a dataset of C code snippets that exhibit Compiler-Introduced …

Efficient Gan-Based Adversarial Example Generation Against Ml-Based Network Intrusion Detection Systems, Darren D. Hartono

Master's Theses

In the realm of network security, Network Intrusion Detection Systems (NIDS) are essential for identifying and mitigating malicious activities targeting networked devices. Traditionally, these systems have relied on signature-based and anomaly-based detection techniques. However, the increasing complexity and adapt- ability of cyber threats have driven the adoption of Machine Learning (ML) ap- proaches in modern NIDS, significantly improving their ability to detect a wider range of attack vectors. Despite these advancements, ML-based NIDS remain vulnerable to adversarial examples—deliberately crafted inputs designed to mislead models and trigger incorrect classifications. Originally identified in the field of computer vision, adversarial examples now pose …

Does The Transit Industry Understand The Risks Of Cybersecurity And Are The Risks Being Appropriately Prioritized?, Scott F. Belcher, Terri Belcher, James Grimes, Lusa Holmstrom, Andy Souders

Mineta Transportation Institute

The intent of this study is to assess the readiness, resourcing, and capabilities of public transit agencies to detect, identify, be protected from, respond to, and recover from cybersecurity vulnerabilities and threats. This study is an update of the 2020 Mineta Transportation Institute (MTI) study, “Is the Transit Industry Prepared for the Cyber Revolution? Policy Recommendations to Enhance Surface Transit Cyber Preparedness.” In the previous study, the authors found that the transit industry was ill-prepared for cybersecurity attacks. Unfortunately, after four years and the development of new, and often free, resources, the situation has not markedly improved. In fact, this …

Balancing Privacy And Security: A Comparative Analysis Of Ai-Driven Surveillance In The Uae And Usa, Belal Alghafri, Abdallah Tubaishat

All Works

AI-driven surveillance has emerged as a critical tool for enhancing public safety, enabling authorities to monitor and prevent crime and terrorism more effectively. In countries like the UAE and the USA, these systems are often implemented under the pretext of national security, offering advanced methods to track potential threats. However, the increasing reliance on AI for surveillance raises significant ethical concerns about privacy and individual freedoms. The boundary between protecting citizens and infringing on their privacy becomes increasingly blurred, potentially leading to abuses of power, diminished public trust, and a pervasive atmosphere of fear. This paper explores the complex relationship …

Towards Testing, Detecting, And Debloating Insecure Components In Android Applications, Zicheng Zhang

Dissertations and Theses Collection (Open Access)

The Android ecosystem’s openness and extensibility have fueled its dominance in the mobile market, but they also broaden the attack surface of applications by introducing insecure or redundant methods. Vulnerabilities arise from various sources, including insecure API usage, code cloning, and feature bloat, especially from unneeded components introduced during development. To address these challenges, this dissertation presents a systematic, three-phase pipeline that transitions seamlessly from vulnerability discovery to clone-based detection and, ultimately, to dynamic mitigation through runtime debloating. Each phase builds upon the insights and limitations of the previous, collectively forming a practical approach to improving Android app security.

In …

The Future Of Ai: Join The Conversation, Jennifer Wojton, Cassandra Branham, Vijay Tummala, Laxima Niure Kandel, Kayla D. Taylor

Publications

Join the Conversation! The Future is AI? There is so much conflicting information about what AI is capable of, how it could/should be used, by whom and for what purpose. In this panel discussion, we hope to provide a baseline of information that will help all participants think critically and articulate thoughtful questions about the mechanics of AI, ethical use or non-use of AI in particular contexts (school, industry, business, art, etc.), and the impacts we are currently experiencing or are likely to experience. Hear from ERAU faculty of different disciplines to discuss what the current state of AI technology …

Generative Ai And Llms For Critical Infrastructure Protection: Evaluation Benchmarks, Agentic Ai, Challenges, And Opportunities, Yagmur Yigit, Mohamed Amine Ferrag, Mohamed C. Ghanem, Iqbal H. Sarker, Leandros A. Maglaras, Christos Chrysoulas, Naghmeh Moradpoor, Norbert Tihanyi, Helge Janicke

Research outputs 2022 to 2026

Critical National Infrastructures (CNIs)—including energy grids, water systems, transportation networks, and communication frameworks—are essential to modern society yet face escalating cybersecurity threats. This review paper comprehensively analyzes AI-driven approaches for Critical Infrastructure Protection (CIP). We begin by examining the reliability of CNIs and introduce established benchmarks for evaluating Large Language Models (LLMs) within cybersecurity contexts. Next, we explore core cybersecurity issues, focusing on trust, privacy, resilience, and securability in these vital systems. Building on this foundation, we assess the role of Generative AI and LLMs in enhancing CIP and present insights on applying Agentic AI for proactive defense mechanisms. Finally, …

Securing A Virtual Reality Classroom Using Unity, Okemute Samuel Idonor

Theses and Dissertations

This study examines how security features might be incorporated into a Unity created virtual reality (VR) classroom, with a particular emphasis on important concerns including user privacy, data security, and illegal access. The increasing usage of virtual reality (VR) technology in educational settings has made it crucial to ensure the security of these immersive systems, especially when it comes to safeguarding sensitive user data. Designing and implementing a secure VR classroom prototype that could successfully protect against common security concerns, such as unauthorized access and data breaches, was the main goal of this project. Multi-Factor Authentication (MFA), Role-Based Access Control …

Design And Implementation Of Secured Hybrid Gateway Node For Securing Iot - Enabled Distribution Automation, Ally Bitebo

Tanzania Journal of Engineering and Technology (TJET)

The integration of smart grid and Internet of Things (IoT) technologies plays a crucial role in enhancing the quality of services provided by traditional electrical grids. This combination has enabled the introduction of new services, such as demand response, automatic meter reading, and IoT-enabled Distribution Automation (IoT-DA), which incorporates sensors, actuators, intelligent electrical devices (IEDs), and information and communication technologies to monitor and control the grid. However, this integration also introduces network security risks, including Denial of Service (DoS) attacks, false data injection, and masquerading attacks, such as system node impersonation that can transmit incorrect readings, trigger false alarms, and …

Scalable, Secure, And Adaptable Perception Systems Through Adversarial Analysis And Federated Fine-Tuning, Arkajyoti Mitra

Computer Science and Engineering Dissertations - Archive

Perception systems are fundamental to intelligent machines, enabling them to sense, understand, and interpret complex environments. However, as perception increasingly underpins critical applications such as autonomous vehicles, IoT healthcare devices, and smart trading platforms, challenges related to security, scalability, and environmental understanding have become more pressing. This work addresses three core research questions: (1) How can we identify, analyze, and mitigate adversarial vulnerabilities in perception systems to ensure reliable operation under adversarial conditions? (2.1) How can AVPS models be efficiently scaled and fine-tuned across decentralized and resource-constrained environments while preserving privacy and performance? (2.2) How can we scale generative models …

Remenet: A Memory-Enhanced Gan Model For Intrusion Detection In Transportation Cyber-Physical Systems, Xin Wang, Lianbo Ma, Sajal K. Das, Zhonghua Liu

Computer Science Faculty Research & Creative Works

Ensuring the safety and reliability of Transportation Cyber-Physical Systems (T-CPS) is critical. However, the increasing interconnectedness of T-CPS exposes them to sophisticated cyberattacks, necessitating robust intrusion detection systems (IDS) to safeguard against evolving threats. This paper aims to enhance the security of T-CPS by addressing two key challenges: effective anomaly detection and handling imbalanced datasets in intrusion detection tasks. In this paper, we propose ReMeNet (Reconstruction Memory Network), a novel intrusion detection model that combines a memory module with a GAN-based architecture to enhance anomaly detection and data reconstruction. To address the challenge of imbalanced datasets, we incorporate a Vector …

Augmentation Of Quality Of Service, Security, And Trust In Edge-Enhanced Iot Networks Leveraging Blockchain, Kyle Matthew Whitlatch

Masters Theses

The meteoric rise of the Internet of Things (IoT) has led to multiple architectural schemas to handle the data these devices create. Edge-enhancement is a technique where groups of IoT report to a median layer to aggregate the data before relaying to the endpoint. These edges also open opportunities to perform more operations to ensure devices are behaving properly before committing the data to long term storage. By interconnecting these edges with a technology like blockchain, it is possible to have an interconnected and responsive system to ensure the Quality of Service (QoS) of the IoT devices within the architecture …

A Trust-By-Learning Framework For Secure 6g Wireless Networks Under Native Generative Ai Attacks, Md Shirajum Munir, Sravanthi Proddatoori, Manjushree Muralidhara, Trinidad Mario Dena, Walid Saad, Zhu Han, Sachin Shetty

Center for Secure and Intelligent Critical Systems (CSICS) Publications

Sixth-generation (6G) wireless networks will become vulnerable due to native generative AI (GenAI)-driven intelligent poisoning attacks in both the radio unit and the core network. In particular, network parameters and metrics in cross-layer design pose fundamentally uncertain conditions and can be compromised through the native GenAI mechanism, which leverages data augmentation and reconstruction capabilities. This work investigates the capabilities of native GenAI to create novel poisoning attacks in wireless networks, while investigating their impact through uncertainty-informed root analysis. Then, detected attacks are mitigated by developing a trustworthy service aggregation in the wireless network. First, a joint decision problem is formulated …

The Strategic And Governance Implications Of Solar Radiation Modification: Perspectives From Delegates Of International Climate Negotiations, Todd L. Cherry, Steffen Kallbekken, David M. Mcevoy, Wai Yan Siu

ODU Articles

The lack of progress in addressing climate change has led to increased interest in solar radiation modification (SRM)—a collection of large-scale interventions that cool the planet by managing the amount of solar radiation that reaches the earth. SRM complicates climate change governance because, in addition to advancing collective action to reduce greenhouse gas emissions, governance needs to restrain unilateral SRM action while balancing diverging actor interests, ethical risks and scientific uncertainty. We survey international climate policy experts for their assessments of the potential for effective global governance of SRM and the likelihood of possible international responses to unilateral SRM scenarios. …

Osa-Diff: An Origin Sampling Based Adversarial Attack Using Diffusion Models, Shayan Jalalipour, Banafsheh Rekabdar

Computer Science Faculty Publications and Presentations

Diffusion models are becoming an increasingly popular emerging technology, however their use in adversarial attacks remains a scarcely explored topic. We show that diffusion models can be used to create end-to-end hidden adversarial perturbations with high rate of success, and propose a novel diffusion based adversarial attack that allows for substantially faster training time (through improved convergence on high quality images) and with substantially less computational overhead than typical diffusion model training

Robust Text Input For Smartwatches: Compensating For Imprecise Tapping And Swiping, Jianwei Lai, Lina Zhou, Kanlun Wang, Dongsong Zhang

Faculty Publications - Information Technology

Entering text on a smartwatch is challenging due to the difficulty of tapping tiny keys. This study introduces a novel keyboard, Tap’nSwipe, to address the challenge. The keyboard features nine areas, each containing up to four characters. To enter a character, users swipe in a specific direction within the area containing the character, freeing them from precisely tapping on the target key. In addition, Tap’nSwipe leverages word predictions to enter words by allowing users to tap anywhere in the areas containing the target characters. The results of a user experiment show that Tap’nSwipe improves text entry accuracy and reduces error …