Physical Sciences and Mathematics Commons^™

Assessing Flaws In Captcha Security Through Progress In Ai, Jaydon Stanislowski

Scholarly Horizons: University of Minnesota, Morris Undergraduate Journal

Protecting the internet from the threat of malicious bot activity is an important problem as AI tools become more powerful and commonplace over time. To that end, security measures are employed across websites in the form of CAPTCHAs, short challenges designed to identify and block fake web traffic. Yet, they become less effective over time as AI becomes more powerful, and thus more capable of solving them. This paper examines recent research on the threat to CAPTCHA security posed by current AI models and how this security can be reinforced over time, focusing primarily on Google’s reCAPTCHA v3.

Enhancing Traffic Safety Through Ai-Driven, Privacy-Preserving, And Secure Impaired Driving Detection Systems, Razan Alsulieman

Dissertations

Drunk driving remains a major threat to road safety worldwide, contributing significantly to traffic injuries and fatalities each year. Traditional detection approaches are largely reactive and vehicle-centric, relying on in-vehicle sensors, breathalyzers, or post-incident enforcement. These methods often depend on driver cooperation, intrusive hardware installations, or limited monitoring environments, restricting their scalability and effectiveness in large transportation systems. At the same time, modern cities increasingly deploy roadside cameras, surveillance networks, and drone- based monitoring systems, creating new opportunities for proactive intoxication detection at the infrastructure level. However, leveraging such external monitoring introduces challenges related to secure data collection, reliable AI-based …

Understanding The Role Of Tiktok As A Source Of Support For Cyberbullying Victims, Saba Iqbal

Theses and Dissertations

Cyberbullying poses a significant threat to teenagers and young adults, who often seek support and advice online. Little is known about the support and advice shared online for victims of cyberbullying and whether it is helpful. In this study, we used qualitative thematic analysis to examine a sample of 150 TikTok videos that give support or advice for cyberbullying victims. We identify 33 unique pieces of support and advice across 5 categories, with differences in tone and delivery among different types of videos. We then evaluated the quality of 33 unique pieces of cyberbullying advice in a user study with …

Secure Machine Learning In Networking Systems, Wenwei Zhao

USF Tampa Graduate Theses and Dissertations

With the rapid integration of Machine Learning (ML) into networking systems, ensuring the security and trustworthiness of these intelligent frameworks has become a paramount concern. While ML offers unprecedented capabilities in spectrum management and collaborative learning, it also introduces novel vulnerabilities that can be exploited by sophisticated adversaries. This dissertation investigates and addresses critical security challenges across three key dimensions of ML-driven networking: adversarial spectrum sensing, the security of privacy-preserving unlearning processes, and efficient post-attack model recovery.

First, we address the threat of adversarial spectrum attacks in cognitive radio networks, where malicious nodes manipulate sensing reports to disrupt spectrum access. …

A Unified Cloud-Based System For The Tyre Retail Industry: Design And Implementation Of Tracktive, William Theo Wei Loon, Siew-Chin Chong, Kian-Ming Lim, Lee-Ying Chong, Kuok-Kwee Wee

Journal of Informatics and Web Engineering

In the Malaysian concurrent tyre retailing industry, most of the business activities are carried out in the traditional labour-intensive ways. This manual process is prone to inefficiencies, increases operating costs and increases the likelihood of error. The current paper outlines Tracktive, a unified and cloud-based solution that was conceptualized and built to automate the industry by centralizing the ordering of tyres, inventory and order management to a single cloud-based platform. Tracktive is built on microservice architecture and event-driven architecture and deployed with the help of a simulated cloud environment. All the core functional modules are independent, scalable modules, each having …

Defending Code Language Models Against Backdoor Attacks With Deceptive Cross-Entropy Loss, Guang Yang, Yu Zhou, Xiangyu Zhang, Xiang Chen, Terry Yue Zhuo, David Lo, Taolue Chen

Research Collection School Of Computing and Information Systems

Code Language Models (CLMs), particularly those leveraging deep learning, have achieved significant success in code intelligence domain. However, the issue of security, particularly backdoor attacks, is often overlooked in this process. The previous research has focused on designing backdoor attacks for CLMs, but effective defenses have not been adequately addressed. In particular, existing defense methods from natural language processing, when directly applied to CLMs, are not effective enough and lack generality, working well in some models and scenarios but failing in others, thus fall short in consistently mitigating backdoor attacks. To bridge this gap, we first confirm the phenomenon of …

Towards Secure Program Partitioning For Smart Contracts With Llm’S In-Context Learning, Ye Liu, Yuqing Niu, Chengyan Ma, Ruidong Han, Wei Ma, Yi Li, Debin Gao, David Lo

Research Collection School Of Computing and Information Systems

Smart contracts are highly susceptible to manipulation attacks due to the leakage of sensitive information. Addressing manipulation vulnerabilities is particularly challenging because they stem from inherent data confidentiality issues rather than straightforward implementation bugs. To tackle this by preventing sensitive information leakage, we present PARTITIONGPT, the first LLM-driven approach that combines static analysis with the in-context learning capabilities of large language models (LLMs) to partition smart contracts into critical (privileged) and normal codebases, guided by a few annotated sensitive data variables. We evaluated PARTITIONGPT on 18 annotated smart contracts containing 99 sensitive functions. The results demonstrate that PARTITIONGPT successfully generates …

An Investigation Into The Mechanisms, Barriers, Degree And Sphere Of Risk Influence In Corporate Security, Nicola Lockhart

Theses: Doctorates and Masters

This study investigates the sphere of corporate security risk influence within organisations, addressing the conceptual and practical ambiguity surrounding the activity’s capacity to shape organisational decisions, behaviours, and risk priorities. While corporate security’s protective role is widely recognised, its broader organisational risk influence remains under-theorised. The study defines the sphere of risk influence as the range of organisational stakeholders and environments with which the corporate security activity interacts, and within which it may engage, persuade, and mobilise action. This sphere is analytically constituted through the intersection of three dimensions: the mechanisms through which influence is attempted, the barriers that constrain …

A Systematic Study Of Passkey User Experience Consistency, Bernhardt Ramat

Theses and Dissertations

Passkeys have emerged as a more secure authentication method than passwords, providing a passwordless alternative resistant to phishing and credential theft attacks. Despite their growing adoption, a systematic study into the user experience of passkeys across various websites has yet to be conducted. Usability heuristics suggest that users transfer their expectations from one product to another, and therefore, inconsistencies in passkey deployments can increase cognitive load, resulting in frustration and possible rejection. To address this knowledge gap, this paper presents a comparative analysis of the external functional consistency of the passkey user experience across 111 websites. Our research reveals that …

A Trigger For The Autonomous Decommissioning Of Smart Devices, Ravindra Mangar, Jared Chandler, Jingyu Qian, Carl A. Gunter, Timothy J. Pierson, David Kotz

Dartmouth Scholarship

Smart devices are ubiquitous in modern environments, yet their decommissioning phase remains poorly studied and often overlooked in system design. We define secure decommissioning as the process by which a smart device securely disconnects from its environment and makes sensitive data inaccessible. If not decommissioned, devices may retain sensitive information – such as security credentials or user-behavior data that could be recovered by an adversary. Unfortunately, some users may forget to decommission a device when they dispose or sell it, and cannot decommission a device that is lost or stolen. This paper investigates a trigger mechanism for individual wireless smart …

Confidential, Attestable, And Efficient Inter-Cvm Communication With Arm Cca, Sina Abdollahi, Amir Al Sadi, Marios Kogias, Hamed Haddadi, David Kotz

Other Faculty Materials

Confidential Virtual Machines (CVMs) are increasingly adopted to protect sensitive workloads from privileged adversaries such as the hypervisor. While they provide strong isolation guarantees, existing CVM architectures lack first-class mechanisms for inter-CVM data sharing due to their disjoint memory model, making inter-CVM data exchange a performance bottleneck in compartmentalized or collaborative multi-CVM systems. Under this model, a CVM's accessible memory is either shared with the hypervisor or protected from both the hypervisor and all other CVMs. This design simplifies reasoning about memory ownership; however, it fundamentally precludes plaintext data sharing between CVMs because all inter-CVM communication must pass through hypervisor-accessible …

Securing Connected And Autonomous Vehicles, Owana Marzia Moushi

Dissertations and Doctoral Documents, University of Nebraska-Lincoln, 2023–

A vehicular network is susceptible to various security flaws and attacks. Cryptographic techniques are used in vehicular networks but these alone cannot provide proper security to the network. Identifying various types of attacks is necessary to secure vehicular communication networks. In this dissertation, we focused on detecting various insider attacks in vehicular networks to enhance the security of the network.

Our first contribution in this dissertation is the detection of both binary and multi-class data replay and data replay Sybil attacks in vehicular networks. A publicly available dataset, VeReMi-Extension is used to detect these attacks. This dataset has been reformulated …

Improving Co-Decoding Based Security Hardening Of Code Llms Leveraging Knowledge Distillation, Dong Li, Shanfu Shu, Meng Yan, Zhongxin Liu, Chao Liu, Xiaohong Zhang, David Lo

Research Collection School Of Computing and Information Systems

Large Language Models (LLMs) have been widely adopted by developers in software development. However, the massive pretraining code data is not rigorously filtered, allowing LLMs to learn unsafe coding patterns. Several prior studies have demonstrated that code LLMs tend to generate code with potential vulnerabilities. The widespread adoption of intelligent programming assistants poses a significant threat to the software development process. Existing approaches to mitigating this risk primarily involve constructing secure data that are free of vulnerabilities and then retraining or fine-tuning the models. However, such an effort is resource intensive and requires significant manual supervision. When the model parameters …

Non-Blackbox Robust Design Of Machine Learning In Networks, Venkat Sai Suman Lamba Karanam

Dissertations and Doctoral Documents, University of Nebraska-Lincoln, 2023–

Networked systems have become increasingly complex, with newer communication technologies and standards being added every day. Machine Learning (ML) and Artificial Intelligence (AI) paradigms have been adopted in networks to not only solve many fundamental problems, but also to allow seamless integration of components comprising them. The saying “let’s not reinvent the wheel” in ML/AI adoption implies that model architecture design be left for pure ML/AI researchers, while network researchers focus on input preprocessing (e.g. formatting the packet data to be fed to a model), hyperparameter fine-tuning and a trial-and-error approach to find the “best” result. …

Zero Trust Architecture For Electric Transportation Systems: A Systematic Survey And Deep Learning Framework For Replay Attack Detection, Grace Muriithi, Behnaz Papari, Ali Arsalan, Laxman Timilsina, Alex Muriithi, Elutunji Buraimoh, Asif Khan, Gokhan Ozkan, Christopher Edrington, Akram Papari

Montclair State University Scholarship & Creative Works

Modern and autonomous hybrid electric vehicles (HEVs), as complex cyber-physical systems, represent a key innovation in the future of transportation. However, the increasing interconnectivity and reliance on digital components expose these vehicles to significant cybersecurity risks. To address these challenges, Zero Trust Architecture (ZTA) has emerged as a promising security framework. Operating on the principle of ‘never trust, always verify,’ ZTA offers a comprehensive approach to ensuring continuous trust verification in HEV systems. Despite its potential, the application of ZTA within cyber-physical vehicular systems remains underexplored, and its practical benefits and limitations are not yet fully understood by the engineering …

Development Of A Near Terahertz Backward Wave Oscillator Using Standard Waveguide, Alexander Glick

Electrical and Computer Engineering ETDs

There is a demand for terahertz (THz) frequency radiation sources. Applications include, but are not limited to, imaging for medical and security purposes, biochemical and organic spectroscopy, and velocimetry. Historically, there was a limited supply of THz devices due to technological limitations. In recent years much progress has been made to reduce this “gap” in supply and demand for THz sources. This work proposes a vacuum electronic device that produces high power, extremely high frequency radiation in the G-band, by utilizing a backward wave oscillator (BWO) based on WR3 standard waveguide. This device is compact, fundamentally simple, and has great …

Building And Demonstrating A Framework And Guide For Human-Centered Threat Modeling, Warda Usman

Theses and Dissertations

As researchers increasingly seek to understand threats faced by people rather than systems, there remains little consensus on how to study these threats in ways that are grounded in human experience. Traditional approaches to threat modeling are often designed for system vulnerabilities and offer limited guidance for eliciting or analyzing threats as understood by individuals in their social and cultural contexts. This dissertation addresses this gap by advancing human-centered threat modeling (HCTM) in security and privacy research as both a conceptual framework and through a set of empirical studies. The dissertation employs a mixed set of qualitative methods across four …

Efficient Gan-Based Adversarial Example Generation Against Ml-Based Network Intrusion Detection Systems, Darren D. Hartono

Master's Theses

In the realm of network security, Network Intrusion Detection Systems (NIDS) are essential for identifying and mitigating malicious activities targeting networked devices. Traditionally, these systems have relied on signature-based and anomaly-based detection techniques. However, the increasing complexity and adapt- ability of cyber threats have driven the adoption of Machine Learning (ML) ap- proaches in modern NIDS, significantly improving their ability to detect a wider range of attack vectors. Despite these advancements, ML-based NIDS remain vulnerable to adversarial examples—deliberately crafted inputs designed to mislead models and trigger incorrect classifications. Originally identified in the field of computer vision, adversarial examples now pose …

Exploiting Compiler-Introduced Vulnerabilities In C: A Cross-Compiler And Cross-Architecture Analysis Of Undefined Behavior, Erik Mccutchen

Master's Theses

Compilers are a critical component in generating secure software across engineering disciplines. However, languages like C that permit undefined behavior introduce a fundamental tension between the compiler’s interpretation of undefined behavior and the security of the generated code. This tension can result in security vulnerabilities that, from the programmer's perspective, are ``created'' by the compiler. The widespread use of these languages, combined with the complexity of modern optimizations and limited developer visibility into compiler behavior, makes these vulnerabilities both pervasive and difficult to detect.

Building on prior work, this thesis refines a dataset of C code snippets that exhibit Compiler-Introduced …

Does The Transit Industry Understand The Risks Of Cybersecurity And Are The Risks Being Appropriately Prioritized?, Scott F. Belcher, Terri Belcher, James Grimes, Lusa Holmstrom, Andy Souders

Mineta Transportation Institute

The intent of this study is to assess the readiness, resourcing, and capabilities of public transit agencies to detect, identify, be protected from, respond to, and recover from cybersecurity vulnerabilities and threats. This study is an update of the 2020 Mineta Transportation Institute (MTI) study, “Is the Transit Industry Prepared for the Cyber Revolution? Policy Recommendations to Enhance Surface Transit Cyber Preparedness.” In the previous study, the authors found that the transit industry was ill-prepared for cybersecurity attacks. Unfortunately, after four years and the development of new, and often free, resources, the situation has not markedly improved. In fact, this …

Balancing Privacy And Security: A Comparative Analysis Of Ai-Driven Surveillance In The Uae And Usa, Belal Alghafri, Abdallah Tubaishat

All Works

AI-driven surveillance has emerged as a critical tool for enhancing public safety, enabling authorities to monitor and prevent crime and terrorism more effectively. In countries like the UAE and the USA, these systems are often implemented under the pretext of national security, offering advanced methods to track potential threats. However, the increasing reliance on AI for surveillance raises significant ethical concerns about privacy and individual freedoms. The boundary between protecting citizens and infringing on their privacy becomes increasingly blurred, potentially leading to abuses of power, diminished public trust, and a pervasive atmosphere of fear. This paper explores the complex relationship …

Towards Testing, Detecting, And Debloating Insecure Components In Android Applications, Zicheng Zhang

Dissertations and Theses Collection (Open Access)

The Android ecosystem’s openness and extensibility have fueled its dominance in the mobile market, but they also broaden the attack surface of applications by introducing insecure or redundant methods. Vulnerabilities arise from various sources, including insecure API usage, code cloning, and feature bloat, especially from unneeded components introduced during development. To address these challenges, this dissertation presents a systematic, three-phase pipeline that transitions seamlessly from vulnerability discovery to clone-based detection and, ultimately, to dynamic mitigation through runtime debloating. Each phase builds upon the insights and limitations of the previous, collectively forming a practical approach to improving Android app security.

In …

The Future Of Ai: Join The Conversation, Jennifer Wojton, Cassandra Branham, Vijay Tummala, Laxima Niure Kandel, Kayla D. Taylor

Publications

Join the Conversation! The Future is AI? There is so much conflicting information about what AI is capable of, how it could/should be used, by whom and for what purpose. In this panel discussion, we hope to provide a baseline of information that will help all participants think critically and articulate thoughtful questions about the mechanics of AI, ethical use or non-use of AI in particular contexts (school, industry, business, art, etc.), and the impacts we are currently experiencing or are likely to experience. Hear from ERAU faculty of different disciplines to discuss what the current state of AI technology …

Generative Ai And Llms For Critical Infrastructure Protection: Evaluation Benchmarks, Agentic Ai, Challenges, And Opportunities, Yagmur Yigit, Mohamed Amine Ferrag, Mohamed C. Ghanem, Iqbal H. Sarker, Leandros A. Maglaras, Christos Chrysoulas, Naghmeh Moradpoor, Norbert Tihanyi, Helge Janicke

Research outputs 2022 to 2026

Critical National Infrastructures (CNIs)—including energy grids, water systems, transportation networks, and communication frameworks—are essential to modern society yet face escalating cybersecurity threats. This review paper comprehensively analyzes AI-driven approaches for Critical Infrastructure Protection (CIP). We begin by examining the reliability of CNIs and introduce established benchmarks for evaluating Large Language Models (LLMs) within cybersecurity contexts. Next, we explore core cybersecurity issues, focusing on trust, privacy, resilience, and securability in these vital systems. Building on this foundation, we assess the role of Generative AI and LLMs in enhancing CIP and present insights on applying Agentic AI for proactive defense mechanisms. Finally, …

Privacy-Preserving Fine-Grained Data Sharing With Dynamic Service For The Cloud-Edge Iot, Jianfei Sun, Yangyang Bao, Weidong Qiu, Rongxing Lu, Songnian Zhang, Yunguo Guan, Xiaochun Cheng

Research Collection School Of Computing and Information Systems

The cloud-edge computing model has been expected to play a revolutionary role in promoting the quality of future generation large-scale Internet of Things (IoT) services. However, security and privacy in data sharing remain crucial issues hindering the success of cloud-edge IoT services. While some solutions based on attribute-based encryption (ABE) have been proposed to address these issues, they still face practical challenges such as attribute privacy leakage, resource-constrained devices, dynamic user groups, inflexible and inefficient service response. To address these challenges, this paper proposes a privacy-preserving fine-grained data sharing scheme with dynamic service (PF2DS), which implements access control by calculating …

Hyperledger Fabric Blockchain For Securing The Edge Internet Of Things: A Review, Muhammad Haziq Zulhazmi Hairul Nizam, Muhammad Afiq Ahmad Nizam, Muhammad Hadi Husaini Jummadi, Nik Nor Muhammad Saifudin Nik Mohd Kamal, Ahmad Anwar Zainuddin

Journal of Informatics and Web Engineering

Life has become more convenient, efficient, and productive in aspects like homes, healthcare, and other businesses’ due to applied IoT. Nonetheless, the proliferation of IoT has led to enormous data production, which has presented daunting tasks of providing sound protective security solutions. It is crucial to address the above challenges in order to protect the data assets in IoT systems. This work deals with the concern on how to extend Hyperledger Fabric to IoT, this being a very crucial aspect in allowing for secure techniques in the collection, storage and sharing of data. Hyperledger Fabric offers advanced capabilities of smart …

Securing A Virtual Reality Classroom Using Unity, Okemute Samuel Idonor

Theses and Dissertations

This study examines how security features might be incorporated into a Unity created virtual reality (VR) classroom, with a particular emphasis on important concerns including user privacy, data security, and illegal access. The increasing usage of virtual reality (VR) technology in educational settings has made it crucial to ensure the security of these immersive systems, especially when it comes to safeguarding sensitive user data. Designing and implementing a secure VR classroom prototype that could successfully protect against common security concerns, such as unauthorized access and data breaches, was the main goal of this project. Multi-Factor Authentication (MFA), Role-Based Access Control …

Design And Implementation Of Secured Hybrid Gateway Node For Securing Iot - Enabled Distribution Automation, Ally Bitebo

Tanzania Journal of Engineering and Technology (TJET)

The integration of smart grid and Internet of Things (IoT) technologies plays a crucial role in enhancing the quality of services provided by traditional electrical grids. This combination has enabled the introduction of new services, such as demand response, automatic meter reading, and IoT-enabled Distribution Automation (IoT-DA), which incorporates sensors, actuators, intelligent electrical devices (IEDs), and information and communication technologies to monitor and control the grid. However, this integration also introduces network security risks, including Denial of Service (DoS) attacks, false data injection, and masquerading attacks, such as system node impersonation that can transmit incorrect readings, trigger false alarms, and …

Scalable, Secure, And Adaptable Perception Systems Through Adversarial Analysis And Federated Fine-Tuning, Arkajyoti Mitra

Computer Science and Engineering Dissertations - Archive

Perception systems are fundamental to intelligent machines, enabling them to sense, understand, and interpret complex environments. However, as perception increasingly underpins critical applications such as autonomous vehicles, IoT healthcare devices, and smart trading platforms, challenges related to security, scalability, and environmental understanding have become more pressing. This work addresses three core research questions: (1) How can we identify, analyze, and mitigate adversarial vulnerabilities in perception systems to ensure reliable operation under adversarial conditions? (2.1) How can AVPS models be efficiently scaled and fine-tuned across decentralized and resource-constrained environments while preserving privacy and performance? (2.2) How can we scale generative models …

Optimizing Radial Interfaces For Eye-Movement Authentication On Smartphones, Trey V. Tuscai

Honors Theses

Radial authentication interfaces offer privacy-preserving, calibration-free eye-movement authentication. While their effectiveness has been demonstrated on large displays, their performance on smartphones remains underexplored. This study investigates seven radial interface configurations on the iPhone 13, varying the number of radial indicators and password lengths to examine trade-offs between accuracy, security, and entry time. Through a controlled eye-tracking experiment with 27 participants, we evaluate each configuration’s performance and collect user prioritizations of the three factors. Our findings reveal that shorter passwords with fewer indicators improve speed and accuracy but reduce security, while longer configurations enhance security at the cost of usability. Based …