Computer Sciences Commons^™

Leveraging Quantum Storage Mechanism For Digital Forensic Readiness Towards Smart City Security, Bashaer Aljeneibi, Richard Ikuesan

All Works

The increasing digitization of urban infrastructure has introduced advanced efficiency and connectivity in smart cities while exposing them to sophisticated cybersecurity threats. This study explores how Quantum Storage Mechanisms (QSM) can be integrated with digital forensic readiness systems to enhance smart city security and incident response. Through a simulated environment, the research evaluates the effectiveness of QSM against three critical cyberattack scenarios: Distributed Denial of Service (DDoS), sensor spoofing, and supply chain firmware attacks. The findings reveal that QSM-enabled systems outperform traditional cybersecurity tools by ensuring tamper-proof evidence collection, real-time threat detection, and secure long-term data retention. The study also …

Drone Authentication System Using Radio Frequency Fingerprinting, Jamila Muhsen Alnuaimi, Shamma Ghaleb Almansoori, Noura Ahmed Alrumeithi, Richard Ikuesan

All Works

The widespread integration of unmanned aerial vehicles (UAVs) across domains such as logistics, surveillance, and emergency response has introduced critical security challenges, particularly unauthorized access, identity spoofing, and drone cloning. Traditional software-based authentication methods, including GPS tracking and encryption, have proven inadequate against advanced cyber-physical threats. This paper proposes a secure and automated drone authentication framework based on Radio Frequency (RF) fingerprinting, leveraging intrinsic hardware-level signal imperfections to generate unique and unclonable drone identities. Using Random Forest classifiers, the system captures, preprocesses, and analyses RF features to distinguish between authorized and unauthorized UAVs. Validation with real-world RF datasets demonstrates high …

Enlem: Ensemble Learning-Based Model To Detect Phishing Websites, Most Nilufa Yeasmin, Md Abu Rumman Refat, Bikash Chandra Singh, Zulfikar Alom, Zeyar Aung, Mohammad Azim

School of Cybersecurity Faculty Publications

Phishing involves manipulating individuals into revealing private data, e.g., user IDs, bank details, and passwords. The observed surge in fraud is related to increased deception, impersonation, and advanced online attacks. Thus, effective phishing detection methods are required to mitigate escalating global phishing threats. Existing methods (e.g., heuristics-based, signature-based, and visual similarity-based methods) attempt to detect phishing sites, and machine learning (ML) and deep learning (DL) methods are effective in the cybersecurity context in terms of learning from data, offering insights, and forecasting. However, independent ML algorithms are limited when handling complex data, and DL techniques surpass traditional ML methods in …

Analyzing Network Traffic And Data Exfiltration Via Smb In Post-Vm Escape Scenarios, Noah M. Disanza

Williams Honors College, Honors Research Projects

Virtual machines (VMs) play a crucial role in modern IT infrastructure environments by providing isolation and enhanced security, among other things, for both personal and corporate systems. VMs are heavily rely upon to safely test malware, manage infrastructure, and reduce risk to host systems. This reliance is so substantial that the idea of reducing risk to the host system is believed to be erasing risk entirely. However, this mindset has shown to be challenged time and time again by the emergence of exploits known as virtual machine escapes. These exploits allow malicious actors to break out of the virtualized environment …

Secure The Database: A Red Team, Blue Team Analysis Of Sql Injection, Andrew N. Miller

Williams Honors College, Honors Research Projects

SQL injection (SQLi) attacks are a type of cyberattack that seeks to bypass website logins and gain entry to sensitive information. These pose a significant danger to organizations holding confidential user information. Personally Identifiable Information (PII) like physical addresses, emails, phone numbers, social security numbers are at risk of theft. Login credentials like usernames, passwords, and other sensitive information like financial details and social security numbers are also exposed through SQLi attacks. SQLi attacks harm the confidentiality, integrity, and availability of people’s identity. Additionally, data breaches that reach public battention harm the reputation and trust of organizations. SQLi attacks rank …

When Helpfulness Becomes Harmful: Jailbreaking Llms For Malicious Code Generation, Noelle Capodieci

Electronic Theses & Dissertations (2024 - present)

Generative AI (GenAI) and Large Language Models (LLMs) have made large strides in coding task capabilities, with many software developers integrating agentic engineering into their workflow. While GenAI has largely benefited professional software engineers who can automate their work, it has also created room for those with little coding expertise to also create fully fledged programs and applications. It is commonly noted that GenAI is trained with two major goals in mind: to be as helpful as possible, and be as harmless as possible. There exist moments where helpfulness may be prioritized over harmlessness when these goals conflict. LLMs may …

Rumooz Aljareemah: An Intelligent Search System For Uae Criminal Law With Case Correlation Framework For Forensic Investigators, Rahaf Alnuaimi, Maryam Almarzooqi

All Works

Digital forensic investigations in the UAE encounter dual challenges: effectively correlating data across cases and complying with local legal frameworks. Conventional methods create information silos that hide connections between instances and increase the probability of procedural errors. This paper presents RUMOOZ ALJAREEMAH, a prototype platform for case correlation designed for cybersecurity experts and forensic investigators in the UAE. The approach integrates a correlation engine with a UAE-specific legal compliance framework, using authentication protocols, bilingual assistance, and text-based search algorithms. Our theoretical framework suggests enhancements in investigative efficiency, including reduced case resolution durations, improved identification of cross-case relationships, and a decrease …

A Proposed Tort To Address The Negligent Enablement Of Cloud Data Breaches, Michael L. Rustad

American University Business Law Review

[INTRODUCTION] The term “cloud computing” means the remote storage of software applications, tools, and data accessed through the internet. Cloud customers enter into subscription agreements with providers who give 24/7, on-demand, as-needed access to software, storage, and networking services owned and managed by providers through a web browser. “Many businesses are transitioning to the cloud for data storage, remote work, and collaboration.” Cloud providers operate their software as a software-as-a-service (“SaaS”) model, under which customers pay a subscription fee to access the software. Netflix and Amazon Prime Video are examples of subscription services that deliver television programs and videos through …

Gem-Can: A Real-World Dataset Of Can-Bus Attack Scenarios On An Autonomous Vehicle For Intrusion-Detection Research, Mahsa Tavasoli, Abdolhossein Sarrafzadeh, Ali Karimoddini, Tienake Phuapaiboon, Milad Khaleghi, Daniel Tobias

Electrical & Computer Engineering Faculty Publications

This paper presents GEM-CAN, a labelled Controller Area Network (CAN) dataset captured from an autonomous GEM e6 platform under both normal operation and controlled cyber-attack conditions.

The dataset contains ∼143 K frames comprising (i) ∼ nominal autonomous operation (∼100k messages), (ii) DoS floods using arbitration ID 0 × 00000000 (∼41 K messages), and (iii) data-tampering injections that reuse legitimate IDs for brake and steering-lock (∼1.3 K messages). Each record includes timestamp, arbitration ID (11/29-bit), DLC, eight payload bytes, and a Normal/Attack label. A companion metadata file enumerates attack windows, PCAN bus-load traces, bitrate, and test conditions. Data were collected with …

Biosecure-Llm Framework: Protecting Llms From Cyberbiosecurity Threats And The Case For Independent Ai Safety Governance, Xavier-Lewis Palmer, Lucas Potter, Srdjan Lesaja, Sotirios Karathanasis, Mohammad Ghasemigol

Computer Science Faculty Publications

Large Language Models (LLMs) are becoming critical infrastructure in scientific, healthcare, and governmental contexts. As frontier AI laboratories increasingly partner with government agencies, a fundamental question arises: Who should control the safety and policy-enforcement layers that constrain model behavior? Current safety mechanisms (LLM guardrails) are typically designed for generic "harmlessness" and operate by detecting semantic patterns and refusing requests. However, they are inadequate governance instruments because they cannot implement auditable, domain-specific controls tied to external regulatory policy objects (e.g., control lists or rules governing personally identifying information). Even a perfectly aligned model is not able to express institution-specific policy without …

Cybercamp: An Experience Report On The Transformations Of An Intensive Cybersecurity Summer Camp For High School Students, Jose R. Ortiz Ubarri, Kariluz Dávila Diaz Ph.D., Rafael A. Arce Nazario

Journal of Cybersecurity Education, Research and Practice

The Cybercamp is a Cybersecurity summer camp for high school students that has been held for the last nine years at a Hispanic Serving Institution. Since its inception in 2016 the Cybercamp has undergone several transformations in response to budget reductions and the COVID pandemic, to finally become its current version: a rich, hands-on learning experience that we believe is easily replicable even in resource-challenged environments.

In this paper, we document the transformations of the Cybercamp and discuss the developed curriculum and materials in hopes that others will reuse, adapt, and improve upon them. In the Cybercamp, we apply active …

Bridging The Gap Between Network Science And Network Systems To Identify And Mitigate Cyber Risk: Identify And Mitigate Backdoor Attacks On Graph Neural Networks And On Complex Systems, Sabah Ettahri

Electrical & Computer Engineering Projects for D. Eng. Degree

This doctoral project aims to bridge the gap between graph theory and network science to identify and mitigate cyber risk, represented as a CY-Triangular Network that connects different networks. The CY-Triangular Framework is a cybersecurity system that integrates graph theory and network science through an interoperable learning approach. The objective of this project is to bridge the gap between two domains: network science and network systems. Accordingly, it examines one representative network from each field, focuses on a complex system network, and explores Graph Neural Networks (GNNs). The connection between these domains lies in graph theory. This research demonstrates that …

Exploiting The In-Distribution Embedding Space With Deep Learning And Gaussian Discriminant Analysis For An Out-Of-Distribution Malware Attach Detection, Tosin Olusola Ige

Open Access Theses & Dissertations

State-of-the-art machine and deep learning models generally perform well on previously seen data, albeit with wrong close world assumption that all real-world data are from previously seen train and validation samples, hence there poor performance when exposed to data which deviates from previously seen training and validation set. This is clearly evident in the domain of cybersecurity where the world continues to experience several high profile malware attacks despite advancement in state-of-the-art research. The reason being that the constant evolvement of innovation in the development of tools and method deployed to carry out various attacks had given hackers and other …

Contextual Embedding Using Machine Learning For Cybersecurity: Access Control And Application, Thanh Bui

Graduate Theses and Dissertations

Access control is a well-established challenge in cybersecurity, with significant research focused on enhancing system autonomy and accuracy across various scenarios. Access control rules can be designed based on users’ roles, attributes, or relationships requesting access to specific resources. However, despite their benefits, these models still require human oversight. As systems expand and grow, it becomes increasingly complex for administrators to maintain precise access control rules, often necessitating extensive system updates or even a complete overhaul. This dissertation introduces a novel approach that leverages contextual embedding for user information to enable the system to autonomously authorize user requests for resources. …

Programmable Network Approaches To Resilience And Security In Phasor Measurement Unit Networks, Zhiyao He

Graduate Theses and Dissertations

The security and resilience of smart grids are critical for ensuring reliable and stable power delivery. As modern power systems evolve to incorporate more advanced sensing and control capabilities, Phasor Measurement Units (PMUs) have become an important source of high-frequency, time-synchronized measurements that support wide-area monitoring, control, and protection. However, the growing complexity of smart grids and their reliance on real-time communication expose them to a range of cyber threats, including data loss, tampering, and coordinated attacks. This dissertation explores the use of programmable network technologies, particularly P4-based programmable switches, to provide in-network solutions that enhance the reliability and security …

Making Explanations Make Sense: Xai For Smishing Detection, Eleni Alexandra Katsarakes

Psychology Theses & Dissertations

Explainable Artificial Intelligence (XAI) is a key component of effective human-AI collaboration, particularly in high-stakes domains such as cybersecurity. While AI tools hold promise for mitigating threats such as SMS-based phishing (SMiShing), their real-world effectiveness may hinge not just on detection accuracy, but on whether users can make sense of the system’s outputs. As SMiShing attacks grow in both frequency and sophistication, so does the urgency of designing human-centered AI systems that support user decision-making under uncertainty. This study examined how four distinct AI explanation types - Normative (rule-based), Attributive (feature-based), Exemplar (case-based), and Recommendation-Only - influence user performance, confidence, …

When The Grid Goes Dark: A Digital Forensics Study Of Industrial Control System Cyberattacks, Katie Kettler

Graduate Theses and Dissertations

Industrial Control Systems (ICS) and Operational Technology (OT) maintain the grid, ensure water safety, and keep transportation running. Because they influence nearly every aspect of daily life, these systems have become prime targets for cyberattacks. The need for this research arises from the fact that when ICS and OT systems are compromised, the consequences go beyond data loss, and they can directly disrupt communities and endanger public safety. This thesis introduces digital forensics fundamentals and explains how investigations in ICS environments differ from those in traditional IT environments. This work then examines major attacks, including Stuxnet, the Ukrainian Grid Attacks …

Agentguard: An Active Threat Discovery System For Package Confusion Using Multi-Agent Collaboration, Wei Ma, Yu Li, Zhi Chen, Ye Liu, Lingxiao Jiang, Qiang Hu, Junyi Tao

Research Collection School Of Computing and Information Systems

The proliferation of open-source software (OSS) has made software supply chains prime targets for attacks like Package Confusion, where adversaries publish malicious packages with names deceptively similar to legitimate ones. Existing detection methods often rely on simple lexical similarity or passive analysis of known package pairs, struggle with high false positive rates (FPR), fail to proactively identify emerging threats, and are vulnerable to adversarial evasion. To overcome these limitations, we introduce AgentGuard, a novel framework for proactive, single-input package confusion detection. AgentGuard employs a multi-agent architecture that autonomously discovers potential confusion targets using fine-tuned word embedding model to hybird semantic …

Security Vulnerabilities And Defense Tactics For Generative Ai Application Development, Kyle Klein

University Honors Theses

Generative AI (GenAI) applications such as OpenAI's ChatGPT leverage large language models (LLMs) trained on enormous amounts of data to accomplish tasks such as document editing, summarization, and query response. Chatbots and LLM programs that are equipped with retrieval-augmented generation (RAG) have the ability to draw upon data provided by developers and users to improve the quality of the program's responses. LLM technology has even expanded to generate images, audio, and video from user instructions. Designed around unpredictable user input and typically composed of many opaque components, LLM software products face a paradigm shift of new, constantly evolving security challenges. …

Creating An Iot User Centric Security And Privacy Label, Luke Joseph Gleba

Theses and Dissertations

Concerns for cybersecurity awareness and training in the public have been rising at astronomical rates over the past few years. People globally have entered a critical intersection with computers. Computers are being used in everyday life, and users do not have an easy way to understand their own cyber risk. Consumers deserve to know how secure their new Internet of Things (IoT) system is in a quick, efficient way before they purchase the device and while they own it. The following research looks to improve on ideas for the criteria and the development of a security label. Few prototypes currently …

Enhancing It Security Management With An Advanced Intrusion Detection System Based On Machine Learning And Explainable Ai, Hanan Alzubaidi

Thesis/ Dissertation Defenses

The fast-changing landscape of cyber threats continues to challenge the development of strong and reliable security frameworks for IT management systems. Traditional defense tools, such as Intrusion Detection Systems (IDS), often struggle to keep up with today’s advanced and constantly evolving attack methods. This thesis explores these ongoing challenges and looks into how machine learning (ML) and explainable artificial intelligence (XAI) can be used to boost IDS performance.

The research outlines a smart, adaptive system that combines supervised learning for real-time threat detection, unsupervised models for anomaly analysis, and proactive defense strategies. The goal is to improve detection accuracy, cut …

Effects Of Code Scaffolding In Increasing Student Confidence In Programming Cryptography, John Denny

LSU Master's Theses

Cryptography is essential for secure communications, and new threats require more students willing to program and interact with cryptographic systems. Previous research is focused on tools for teaching these systems at a high level, teaching through attacks against these systems, and proper use of these systems in software development. In this paper, we seek to design a workshop to use scaffolded Python code to teach how these cryp- tographic systems are designed. We explore the use of code scaffolding for students to program an example implementation of the McEliece crypto- graphic system to build confidence in working with these systems. …

Enhancing Cloud-Based Threat Detection Through Explainable Ai: A Comparative Study Of Machine Learning And Xai-Integrated Models, Amna Al Ghaithi

Thesis/ Dissertation Defenses

The rapid adoption of cloud computing brought about serious security concerns, as cloud infrastructures are constantly exposed to cybersecurity threats such as malware and Distributed Denial of Service attacks. Also, on the other hand, current security methodologies have limitations in identifying new threats accurately. Apart from the fact that ML models are highly efficient in detecting attacks, as ‘black boxes,’ they lack interpretability, impacting trust and adoption within vital cloud environments. This research aims to solve this issue by integrating Explainable Artificial Intelligence practices to help enhance both the accuracy and interpretability of AI systems intended to detect threats in …

Enhancing It Security Management With An Advanced Intrusion Detection System Based On Machine Learning And Explainable Ai, Hanan Aslam Al Zubaidi

Theses

The fast changing landscape of cyber threats continues to challenge the development of strong and reliable security frameworks for IT management systems. Traditional defense tools, such as Intrusion Detection Systems (IDS), often struggle to keep up with today's advanced and constantly evolving attack methods. This thesis explores these ongoing challenges and looks into how machine learning (ML) and explainable artificial intelligence (XAI) can be used to boost IDS performance.

The research outlines a smart, adaptive system that combines supervised learning for real-time threat detection, unsupervised models for anomaly analysis, and proactive defense strategies. The goal is to improve detection accuracy, …

Higher Education Cybersecurity: A Vulnerability Assessment Of The U.S. South’S Institutional Websites, Zachary W. Taylor, Vivi Vo

Journal of Cybersecurity Education, Research and Practice

As technology continues to advance, it is critical to understand how higher education institutions protect digital information of their stakeholders including students, faculty, and staff through cybersecurity measures. Although conceptual research has articulated various aspects of cybersecurity, no empirical research has explored the cybersecurity of higher education (.edu) websites through a vulnerability scan of these websites via an open PortScan and analysis. To fill a critical gap in the literature, this study conducted a vulnerability scan and open PortScan and analysis of all higher education websites in three of the lowest-income states in the United States: Louisiana (n=112), Mississippi (n=52), …

When Cybersecurity Becomes A Reason For Amending Or Terminating An International Commercial Contract: Proposed Solutions, Mohammed El Hadi El Maknouzi, Enas Mohammed Alqodsi, Iyad Mohammad Jadalhaq, Ashraf Khalil

All Works

This study investigates the issue of a country's cybersecurity evolving into a justification for amending the scope of or terminating an international commercial contract. Therefore, the hypothesis is grounded in the neglect of cybersecurity-related issues during the negotiation of certain types of international commercial contracts, as well as in the drafting of their clauses. This underscores the need for an analytical approach to trace the emergence of such risks. The identification of these risks by the public authority responsible for overseeing cybersecurity may result in the suspension of the performance of the international commercial contract. This measure affects the national …

Explainabledetector: Exploring Transformer-Based Language Modeling Approach For Sms Spam Detection With Explainability Analysis, Mohammad Amaz Uddin, Muhammad Nazrul Islam, Leandros Maglaras, Helge Janicke, Iqbal H. Sarker

Research outputs 2022 to 2026

Short Message Service (SMS) is a widely used and cost-effective communication medium that has unfortunately become a frequent target for unsolicited messages - commonly known as SMS spam. With the rapid adoption of smartphones and increased Internet connectivity, SMS spam has emerged as a prevalent threat. Spammers have recognized the critical role SMS plays in today's modern communication, making it a prime target for abuse. As cybersecurity threats continue to evolve, the volume of SMS spam has increased substantially in recent years. Moreover, the unstructured format of SMS data creates significant challenges for SMS spam detection, making it more difficult …

Optimizing Cybersecurity Through Ai Predictive Analytics And Human Expertise, Cathy Mae C. Dutong

Journal of the Symposium of University Research and Creative Expression

Project Mentor(s): Hideki Takei, DBA

As cybersecurity threats evolve in complexity and scale, the reliance on artificial intelligence (AI) has become increasingly prevalent across both public and private sectors. This study examines the dual role of AI-driven predictive analytics in strengthening organizational cybersecurity, while addressing the ongoing need for human oversight. Through a mixed-method approach, combining survey data from cybersecurity professionals with an extensive literature review, this research analyzes AI's capacity to detect emerging threats, the systemic challenges associated with AI integration, and the indispensable role of human expertise in interpreting AI outputs. Findings indicate that while AI enhances proactive …

An Envisioned And Efficient Design Of Next Generation Decentralized Iot Bot Detection Model, Ahmed Abdullah Almalki

Doctoral Dissertations

The Industrial Internet of Things (IIoT) and Internet of Medical Things (IoMT) are revolutionizing critical infrastructures, but their expansion has also introduced severe cybersecurity vulnerabilities. Traditional IoT Bot Detection Systems (IBDS) struggle to scale in environments characterized by high-dimensional, large-scale, and redundant network traffic. These challenges hinder the development of reliable cloud-based intrusion detection systems. The limitations of static and rulebased methods in detecting evolving IoT botnet attacks—such as those launched by Mirai and Gafgyt—underscore the need for intelligent, adaptive approaches. To address this, the present study proposes a machine learning and deep learning-driven IoT Botnet Detection Model, validated through …

Cybersecurity: Digital Stewardship In A Violent World, Rocky K. C. Chang

University Faculty Publications and Creative Works

This paper defines cybersecurity based on the principle of biblical stewardship. The focus of this principle is God, not the technologies, who is the creator and owner of cyberspace and everything in it. Humankind is called by God to steward them by protecting the digital property of our neighbors in cyberspace from malicious attacks. In the context of cybersecurity, a neighbor can be any individual cyber user, practitioner, educator, organization, tech company, or even hacker. However, as argued from the perspectives of human sin and human finitude, the defending stewards can never win over evil in this spiritual battle. Instead, …