Computer Sciences Commons^™

Cyber Security Framework For Vehicular Network Based On A Hierarchical Game, Hichem Sedjelmaci, Imane Horiya Brahmi, Nirwan Ansari, Mubashir Husain Rehmani

Publications

The growth of electronic devices in connected vehicles and their connections to the untrusted network, present unprecedented exposure to attacks. Therefore, a reliable and efficient cyber security framework is mandatory to protect vehicular networks against the cyber attackers. Thereby, we propose a cyber defense framework based on a hierarchical cooperative game to secure legitimate vehicles from attacks. In the proposed hierarchical game, there are two kinds of players, the head agent and secondary agents that cooperate between each other to detect, predict and react efficiently against suspected attacks. The Intrusion Detection System (IDS), Intrusion Prediction System (IPS), and Intrusion Reaction …

A Constructive Direst Security Threat Modeling For Drone As A Service, Fahad E. Salamh, Umit Karabiyik, Marcus Rogers

Journal of Digital Forensics, Security and Law

The technology used in drones is similar or identical across drone types and components, with many common risks and opportunities. The purpose of this study is to enhance the risk assessment procedures for Drone as a Service (DaaS) capabilities. STRIDE is an acronym that includes the following security risks: Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privileges. The paper presents a modified STRIDE threat model and prioritize its desired properties (i.e., authenticity, integrity, non-reputability, confidentiality, availability, and authorization) to generate an appropriate DaaS threat model. To this end, the proposed DIREST threat model better meets the …

Quantitative Analysis And Performance Evaluation Of Target-Oriented Replication Strategies In Cloud Computing, Quadri Waseem, Wan Isni Sofiah Wan Din, Sultan S. Alshamrani, Abdullah Alharbi, Amril Nazir

All Works

Data replications effectively replicate the same data to various multiple locations to accomplish the objective of zero loss of information in case of failures without any downtown. Dynamic data replication strategies (providing run time location of replicas) in clouds should optimize the key performance indicator parameters, like response time, reliability, availability, scalability, cost, availability, performance, etc. To fulfill these objectives, various state-of-the-art dynamic data replication strategies has been proposed, based on several criteria and reported in the literature along with advantages and disadvantages. This paper provides a quantitative analysis and performance evaluation of target-oriented replication strategies based on target objectives. …

Recent Advances In Smartphone Computational Photography, Paul Friederichsen

Scholarly Horizons: University of Minnesota, Morris Undergraduate Journal

Smartphone cameras present many challenges, most of which come from the need for them to be physically small. Their small size puts a fundamental limit on their ability to resolve detail and collect light, which makes low-light photography and zooming difficult. This paper presents two approaches to improve smartphone photography through software techniques. The first is handheld super-resolution which uses natural hand movement to improve the resolution smartphone images, especially when zoomed. The second approach is a system which improves low light photography in smartphones.

Mexican Folk Arithmetic Algorithm Makes Perfect Sense, Julio C. Urenda, Christian Servin, Olga Kosheleva, Vladik Kreinovich

Departmental Technical Reports (CS)

Traditional algorithms for addition and multiplication -- that we all study at school -- start with the lowest possible digits. Interestingly, many people in Mexico use a different algorithm, in which operations start with the highest digits. We show that in many situations, this alternative algorithm is indeed more efficient -- especially in typical practical situations when we know the values -- that we need to add or subtract -- only with uncertainty.

Baudelaire's Ideas Of Vagueness And Uniqueness In Art: Algorithm-Based Explanations, Luc Longpre, Olga Kosheleva, Vladik Kreinovich

Departmental Technical Reports (CS)

According to the analysis by the French philosopher Jean-Paul Sartre, the famous French poet and essayist Charles Baudelaire described (and followed) two main -- somewhat unusual -- ideas about art: that art should be vague, and that to create an object of art, one needs to aim for uniqueness. In this paper, we provide an algorithm-based explanation for these seemingly counter-intuitive ideas, explanation related to Kolmogorov complexity-based formalization of Garrett Birkhoff's theory of beauty.

How Much For A Set: General Case Of Decision Making Under Set-Valued Uncertainty, Laxman Bokati, Olga Kosheleva, Vladik Kreinovich

Departmental Technical Reports (CS)

In real life, we often need to make a decision, i.e., we need to select one of the possible alternatives. In many practical situations, our objective is financial: we need to select an alternative that will bring us the largest financial gain. The problem is that usually, we only know the gain corresponding to each alternative with some uncertainty: instead of the exact numerical value of this gain, there is a whole set of possible values of this gain. How can we make decisions under such interval-valued uncertainty? An answer to this question is known for the case when these …

Why Fuzzy Techniques In Explainable Ai? Which Fuzzy Techniques In Explainable Ai?, Kelly Cohen, Laxman Bokati, Martine Ceberio, Olga Kosheleva, Vladik Kreinovich

Departmental Technical Reports (CS)

One of big challenges of many state-of-the-art AI techniques such as deep learning is that their results do not come with any explanations -- and, taking into account that some of the resulting conclusions and recommendations are far from optimal, it is difficult to distinguish good advice from bad one. It is therefore desirable to come up with explainable AI. In this paper, we argue that fuzzy techniques are a proper way to this explainability, and we also analyze which fuzzy techniques are most appropriate for this purpose. Interestingly, it turns out that the answer depends on what problem we …

How Void Ratio Depends On Grain Size In Soil Mechanics: Theoretical Explanation, Edgar Daniel Rodriguez Velasquez, Vladik Kreinovich

Departmental Technical Reports (CS)

When designing a road, it is important to know how many voids are in the underlying soil -- since these voids will affect the road stiffness. It is difficult to measure the voids ratio directly, so instead, we need to estimate it based on easier-to-measure characteristics such as grain size. There are empirical formulas for such estimation. In this paper, we provide a possible theoretical explanation for these empirical formulas.

Why Base-20, Base-40, And Base-60 Number Systems?, Sean R. Aguilar, Olga Kosheleva, Vladik Kreinovich

Departmental Technical Reports (CS)

Historically, to describe numbers, some cultures used bases much larger than our usual base 10, namely, bases 20, 40, and 60. There are explanations for base 60, there is some explanation for base 20, but base 40 -- used in medieval Russia -- remains largely a mystery. In this paper, we provide a possible explanation for all these three bases, an explanation based on the natural need to manage large groups of people. We also speculate why different cultures used different bases.

Dimension Compactification Naturally Follows From First Principles, Julio C. Urenda, Olga Kosheleva, Vladik Kreinovich

Departmental Technical Reports (CS)

According to modern physics, space-time originally was of dimension 11 or higher, but then additional dimensions became compactified, i.e., size in these directions remains small and thus, not observable. As a result, at present, we only observed 4 dimensions of space-time. There are mechanisms that explain how compactification may have occurred, but the remaining question is why it occurred. In this paper, we provide two first-principles-based explanations for space-time compactification: based on Second Law of Thermodynamics and based on geometry and symmetries.

Additional Spatial Dimensions Can Help Speed Up Computations, Luc Longpre, Olga Kosheleva, Vladik Kreinovich

Departmental Technical Reports (CS)

While we currently only observe 3 spatial dimensions, according to modern physics, our space is actually at least 10-dimensional. In this paper, on different versions of the multi-D spatial models, we analyze how the existence of the additional spatial dimensions can help computations. It turns out that in all the versions, there is some speed up -- moderate when the extra dimensions are actually compactified, and drastic if extra dimensions are separated by a potential barrier.

An Iterative Hybrid Algorithm For Roots Of Non-Linear Equations, Chaman Lal Sabharwal

Computer Science Faculty Research & Creative Works

Finding the roots of non-linear and transcendental equations is an important problem in engineering sciences. In general, such problems do not have an analytic solution; the researchers resort to numerical techniques for exploring. We design and implement a three-way hybrid algorithm that is a blend of the Newton–Raphson algorithm and a two-way blended algorithm (blend of two methods, Bisection and False Position). The hybrid algorithm is a new single pass iterative approach. The method takes advantage of the best in three algorithms in each iteration to estimate an approximate value closer to the root. We show that the new algorithm …

Each Realistic Continuous Functional Dependence Implies A Relation Between Some Variables: A Theoretical Explanation Of A Fuzzy-Related Empirical Phenomenon, Olga Kosheleva, Vladik Kreinovich

Departmental Technical Reports (CS)

In principle, one can have a continuous functional dependence y=f(x1,...,x_n) for which, for each proper subset of n+1 variable x1,...,x_n,y, there is no relation: i.e., for each selection of n variables out of these n+1, all combinations of these n values are possible. However, for fuzzy operations, there is always some non-trivial relation between y and one of the inputs xi; for example, for "and"-operations (t-norms) y=f(x1,x2), we have y ≤ x1; for "or"-operations (t-conorms) y=f(x1,x2) we have x1 ≤ y, etc. In this paper, we prove a general mathematical explanation for this empirical fact.

Fuzzy Logic Leads To A More Adequate Way Of Processing Likert-Scale Values: Case Study Of Burnout, Francisco Zapata, Olga Kosheleva, Vladik Kreinovich

Departmental Technical Reports (CS)

Many phenomena like burnout are gauged by computing a linear combination of user-provided Likert-scale values. The problem with this traditional approach is that, while it makes sense to have linear combination of weights or other physical characteristics, a linear combination of Likert-scale values like "good" and "satisfactory" does not make sense. The only reason why linear combinations are used in practice is that the corresponding data processing tools are readily available. A more adequate approach would be to use fuzzy logic -- a technique specifically designed to deal with Likert-scale values. We show that fuzzy logic actually leads to a …

What Teachers Can Learn From Machine Learning, Christian Servin, Olga Kosheleva, Vladik Kreinovich

Departmental Technical Reports (CS)

Decades ago, machine learning was not as good as human learning, so many machine learning techniques were borrowed from how we humans learn -- be it on the level of concepts or on the level of biological neurons, cells responsible for mental activities such as learning. Lately, however, machine learning techniques such as deep learning have started outperforming humans. It is therefore time to start borrowing the other way around, i.e., using machine learning experience to improve our human teaching and learning. In this paper, we describe several relevant ideas -- and explain how some of these ideas are related …

What Is The True Formula For Soil Permeability? Not Clear, Edgar Daniel Rodriguez Velasquez, Vladik Kreinovich

Departmental Technical Reports (CS)

To design and maintain pavements, it is important to know how fast water will penetrate the underlying soil. The speed of this penetration is determined by a quantity called permeability. There are several seemingly very different empirical and semi-empirical formulas that predict permeability. A recent attempt to select the formula that best fits the experimental data ended up in an unexpected conclusion that all three formula provide a good fit for the data. But these formulas are very different, how come that all three of them fit the same data? In this paper, we explain this somewhat paradoxical result.

How To Best Write Research Papers: Basic English? Sophisticated English?, Martine Ceberio, Christian Servin, Olga Kosheleva, Vladik Kreinovich

Departmental Technical Reports (CS)

Instructors from English department praise our students when they use the most sophisticated grammatical constructions and the most appropriate (often rarely used) words -- as long as this helps better convey all the subtleties of the meaning. On the other hand, we usually teach the students to use the most primitive Basic English when writing our papers -- this way, the resulting paper will be most accessible to the international audience. Who is right? In this paper, we analyze this question by using a natural model -- inspired by Zipf's law -- and we conclude that to achieve the largest …

Low-Complexity Zonotopes Can Enhance Uncertainty Quantification (Uq), Olga Kosheleva, Vladik Kreinovich

Departmental Technical Reports (CS)

In many practical situations, the only information that we know about the measurement error is the upper bound D on its absolute value. In this case, once we know the measurement result X, the only information that we have about the actual value x of the corresponding quantity is that this value belongs to the interval [X − D, X + D]. How can we estimate the accuracy of the result of data processing under this interval uncertainty? In general, computing this accuracy is NP-hard, but in the usual case when measurement errors are relatively small, we can linearize the …

Block The Root Takeover: Validating Devices Using Blockchain Protocol, Sharmila Paul

Masters Theses & Doctoral Dissertations

This study addresses a vulnerability in the trust-based STP protocol that allows malicious users to target an Ethernet LAN with an STP Root-Takeover Attack. This subject is relevant because an STP Root-Takeover attack is a gateway to unauthorized control over the entire network stack of a personal or enterprise network. This study aims to address this problem with a potentially trustless research solution called the STP DApp. The STP DApp is the combination of a kernel /net modification called stpverify and a Hyperledger Fabric blockchain framework in a NodeJS runtime environment in userland. The STP DApp works as an Intrusion …

Towards Identity Relationship Management For Internet Of Things, Mohammad Muntasir Nur

Masters Theses & Doctoral Dissertations

Identity and Access Management (IAM) is in the core of any information systems. Traditional IAM systems manage users, applications, and devices within organizational boundaries, and utilize static intelligence for authentication and access control. Identity federation has helped a lot to deal with boundary limitation, but still limited to static intelligence – users, applications and devices must be under known boundaries. However, today’s IAM requirements are much more complex. Boundaries between enterprise and consumer space, on premises and cloud, personal devices and organization owned devices, and home, work and public places are fading away. These challenges get more complicated for Internet …

A Consent Framework For The Internet Of Things In The Gdpr Era, Gerald Chikukwa

Masters Theses & Doctoral Dissertations

The Internet of Things (IoT) is an environment of connected physical devices and objects that communicate amongst themselves over the internet. The IoT is based on the notion of always-connected customers, which allows businesses to collect large volumes of customer data to give them a competitive edge. Most of the data collected by these IoT devices include personal information, preferences, and behaviors. However, constant connectivity and sharing of data create security and privacy concerns. Laws and regulations like the General Data Protection Regulation (GDPR) of 2016 ensure that customers are protected by providing privacy and security guidelines to businesses. Data …

Traversing Nat: A Problem, Tyler Flaagan

Masters Theses & Doctoral Dissertations

This quasi-experimental before-and-after study measured and analyzed the impacts of adding security to a new bi-directional Network Address Translation (NAT). Literature revolves around various types of NAT, their advantages and disadvantages, their security models, and networking technologies’ adoption. The study of the newly created secure bi-directional model of NAT showed statistically significant changes in the variables than another model using port forwarding. Future research of how data will traverse networks is crucial in an ever-changing world of technology.

Cybersecurity Education For Non-Technical Learners, Matthew Mcnulty

Masters Theses & Doctoral Dissertations

Today’s world is increasingly reliant on technology for school, work, entertainment, and general home use. Many jobs today could not be performed without the use of computer systems or other technology. As lives become intertwined with technology, everyone will inevitably encounter malicious, vulnerable, or privacy-compromising devices or services. Unfortunately, knowledge of how to deal with these cybersecurity and privacy issues is not something that falls within the domain of common knowledge for the everyday person. Additionally, there is a lack of work being done to understand the educational needs of various groups within the general public and educate them. This …

Jrevealpeg: A Semi-Blind Jpeg Steganalysis Tool Targeting Current Open-Source Embedding Programs, Charles A. Badami

Masters Theses & Doctoral Dissertations

Steganography in computer science refers to the hiding of messages or data within other messages or data; the detection of these hidden messages is called steganalysis. Digital steganography can be used to hide any type of file or data, including text, images, audio, and video inside other text, image, audio, or video data. While steganography can be used to legitimately hide data for non-malicious purposes, it is also frequently used in a malicious manner. This paper proposes JRevealPEG, a software tool written in Python that will aid in the detection of steganography in JPEG images with respect to identifying a …

Efficacy Of Incident Response Certification In The Workforce, Samuel Jarocki

Masters Theses & Doctoral Dissertations

Numerous cybersecurity certifications are available both commercially and via institutes of higher learning. Hiring managers, recruiters, and personnel accountable for new hires need to make informed decisions when selecting personnel to fill positions. An incident responder or security analyst's role requires near real-time decision-making, pervasive knowledge of the environments they are protecting, and functional situational awareness. This concurrent mixed methods paper studies whether current commercial certifications offered in the cybersecurity realm, particularly incident response, provide useful indicators for a viable hiring candidate.

Managers and non-managers alike do prefer hiring candidates with an incident response certification. Both groups affirmatively believe commercial …

Programimi Imperativ, Reaktiv Dhe Funksional, Aulona Avdyli

Theses and Dissertations

Me zhvillimin e programimit ndër vite, mund të dallojmë shumë e shumë fjalë dhe terma të reja çdo ditë, duke na ngritur dhe ngjallur kureshtjen të lexojmë dhe të dimë më shumë rreth tyre, pasiqë vet profesioni që kemi zgjedhur është i tillë. Ndër to programimi Imperativ, Reaktiv dhe Funksional, tri lloje të programimit, të cilët ndoshta secili nga ne i kemi përdorur, por pa e ditur saktë me cilin nga ta jemi duke punuar, duke i veçuar në bazë të emrit dhe karakteristikave të tyre.

Në bazë të këtij punimi të diplomës, unë do bëj përpjekje të mund të …

Krahasimi I Teknologjive H.264 Dhe H.265 Në Kompresimet Audio-Video Materialeve, Milot Hoti

Theses and Dissertations

Teknologjia e kompresimit të audio dhe video materialeve, për qëllim primar ka që secili përdorues t’i qaset atij materiali që ka nevojë ta shikojë. Pa teknologjinë e kompresimit kjo mundësi do të ishte shumë e kufizuar dhe jo efikase. Përmes kësaj teknologjie përfitojnë përdoruesit dhe kompanitë të cilat ofrojnë shërbimin për shikim të video materialeve. Përfitimi tek përdoruesit nisë, që nga mundësia e ruajtjes së një fotografie të ditëlindjes së parë, e pse jo edhe incizimi i fryrjes së qirinjve në atë ditëlindje. Ndërsa kompanitë shfrytëzojnë këtë teknologji për ruajtjen dhe shpërndarjen e materialeve, tek secili që dëshiron ta shohë …

Personalized Learning Path Generation Based On Genetic Algorithms, Lumbardh Elshani

Theses and Dissertations

A substantial disadvantage of traditional learning is that all students follow the same curriculum sequence, but not all of them have the same background of knowledge, the same preferences, the same learning goals, and the same needs. Traditional teaching resources, such as textbooks, in most cases orient students to follow fixed sequences during the learning process, thus impairing their performance. Curriculum sequencing is an important research issue for learning process because no fixed learning paths will be appropriate for all learners. For this reason, many research papers are focused on the development of mechanisms to offer personalization on learning sequences, …

Aplikimi I Rrjetave Kompjuterike Dhe Cloud Sherbimeve Ne E-Health Care, Ilir Gojani

Theses and Dissertations

Gjithëkush flet për eHealth këto ditë, por pak njerëz kanë dalë me një përkufizim të qartë të këtijë termi relativisht të ri. Pak në përdorim para vitit 1999, ky term tani duket se shërben si një fjalë e përgjithshme që përdoret për të karakterizuar jo vetëm "mjekësinë e digjitalizuar", por gjithashtu pothuajse çdo gjë që lidhet me kompjuterët dhe mjekësinë. Termi eHealth është krijuar dhe përdorur duke u bazuar në fjalët tjera “e-fjal” si për shembull “e-commerce, e-business, e-mail”, me të cilen fjalë do të mund ti referoheshim mundësive të reja që interneti po i hap në fushën e kujdesit …