Computer Sciences Commons^™

Llms In Network Intrusion Detection – A Comprehensive Analysis, Sudharshan Balaji

USF Tampa Graduate Theses and Dissertations

Network Intrusion Detection Systems (NIDS) play a critical role in identifying and mitigating malicious activities within computer networks. With the rapid evolution of natural language processing (NLP), Large Language Models (LLMs) have emerged as transformative tools across various domains. LLMs, such as OpenAI’s GPT series and Meta’s LLaMA models,have demonstrated remarkable performance in tasks like language generation, reasoning, and classification. Their ability to understand and process vast amounts of data has enabled groundbreaking advancements in areas like healthcare, finance, and cybersecurity. Recent trends highlight their potential to handle unstructured data, perform complex reasoning, and adapt to a wide range of …

The Future Of Ai: Join The Conversation, Jennifer Wojton, Cassandra Branham, Vijay Tummala, Laxima Niure Kandel, Kayla D. Taylor

Publications

Join the Conversation! The Future is AI? There is so much conflicting information about what AI is capable of, how it could/should be used, by whom and for what purpose. In this panel discussion, we hope to provide a baseline of information that will help all participants think critically and articulate thoughtful questions about the mechanics of AI, ethical use or non-use of AI in particular contexts (school, industry, business, art, etc.), and the impacts we are currently experiencing or are likely to experience. Hear from ERAU faculty of different disciplines to discuss what the current state of AI technology …

Hypergame Models For Cyber Defense In A Purple Team Setting, Thomas N. Whitney

Theses and Dissertations

Hypergame theory and purple teaming are two fields that can support an increased cybersecurity posture. This research investigates a hypergame theory framework that incorporates fittingly into the purple team feedback loop. Additionally, this research integrates empirical data into the hypergames. The data and the hypergames are supported by the MITRE ATT&CK framework. This research also includes a review of available game theory and hypergame theory software, five different hypergame models, a comparison of the two hypergame formats, and an innovative analysis technique using a multi-stage hypergame to represent the cyber kill chain. One finding of this research is that a …

Managing Cybersecurity In Local Governments: 2022, Donald F. Norris Phd, Laura K. Mateczun Jd

Journal of Cybersecurity Education, Research and Practice

This paper, based on data from our second nationwide survey of cybersecurity among local or grassroots governments in the U.S., examines how these governments manage this important function. As we have shown elsewhere, cybersecurity among local governments is increasingly important because these governments are under constant or nearly constant cyberattack. Due to the frequency of cyberattacks, as well as the probability that at least some attacks will succeed and cause damage to local government information systems, these governments have great responsibility to protect their information assets. This, in turn, requires these governments to manage cybersecurity effectively, something our data show …

A Survey-Based Quantitative Analysis Of Stress Factors And Their Impacts Among Cybersecurity Professionals, Sunil Arora, John D. Hastings

Research & Publications

This study investigates the prevalence and underlying causes of work-related stress and burnout among cybersecurity professionals using a quantitative survey approach guided by the Job Demands-Resources model. Analysis of responses from 50 cybersecurity practitioners reveals an alarming reality: 44% report experiencing severe work-related stress and burnout, while an additional 28% are uncertain about their condition. The demanding nature of cybersecurity roles, unrealistic expectations, and unsupportive organizational cultures emerge as primary factors fueling this crisis. Notably, 66% of respondents perceive cybersecurity jobs as more stressful than other IT positions, with 84% facing additional challenges due to the pandemic and recent high-profile …

Real-Time Testbed For Studying Cyberattacks And Defense In Der-Integrated Smart Inverter Systems, M. Maliha, A. Oluyomi, M. Booge, S. Bhattacharjee, N. Braasch, P. Gomez, Sajal K. Das

Computer Science Faculty Research & Creative Works

In this paper, we propose a Hardware-in-the-Loop (HIL) simulation testbed suitable for the implementation and testing of realistic cyberattacks on grid-tied smart inverter systems integrated with Distributed Energy Resources (DER) that use the Distributed Network Protocol-3 (DNP3) protocol for communications between grid components. Specifically, our testbed combines a Real-Time Digital Simulator (RTDS) NovaCor device, outfitted with GNETx2 network interface cards, a grid-tied DER topology implemented via the RTDS software package RSCAD, and a custom virtual network that emulates a man-in-the-middle (MITM) attacker. The MITM attacker captures DNP3 traffic and falsifies telemetry data in DNP3 packets to trigger unwarranted commands from …

Scalable Approaches Towards Characterizing And Mitigating Emerging Phishing Scams, Sayak Saha Roy

Computer Science and Engineering Dissertations - Archive

Phishing scams are among the most dangerous and persistent forms of cybercrime, leveraging social engineering to exploit human behavior and obtain sensitive information, leading to widespread identity theft and data breaches. In the past year, these attacks have resulted in financial losses exceeding $10 billion in the United States alone. As phishing scams continue to evolve, they have not only expanded in scale but also grown in sophistication, spreading rapidly across social media and employing adversarial techniques to evade detection by anti-scam tools. The situation is further exacerbated by the availability of advanced phishing kits, and more recently, generative AI, …

Detection Of Data Leakage And Disruption Of Covert Timing Channel In Secure Drone Communication Using Machine And Deep Learning, Jonathan Walatkiewicz

Master's Theses and Doctoral Dissertations

The utilization of recreational drones has experienced a substantial increase in both the United States and globally. However, it is noteworthy that most drones, classified as Internet of Things devices, are produced with a limited security lifecycle. This study's findings are of paramount importance, as traditional computing exploits can be applied to drones, designating them as high- value targets. This study examines the detectability and disruptability of covert timing channel traffic in secure drones. The investigation aims to ascertain the effects of multiple interarrival times, distances ranging from 1 to 330 feet, various detection algorithms, and stream sizes between 32-bit …

Human Perception Of Ai Capabilities At Classifying Perturbed Roadway Signs, Katherine R. Garcia, Jing Chen, Yanru Xiao, Scott Mishler, Cong Wang, Bin Hu

Psychology Faculty Publications

Artificial Intelligence (AI) is crucial to numerous functions required for driving automation systems, including the computer vision techniques used to detect the roadway environment and make real-time decisions. However, the images used as inputs to the AI system may be maliciously perturbed, or manipulated, causing the AI system to make an incorrect classification. In this study, we examined humans’ perception of the AI’s computer vision capability of classifying various road sign images, including the original images, images with two different types of malicious attacks, and images that are scrambled randomly at the pixel level. Our results showed that participants rated …

Insights In Cybersecurity Of A Smart Campus - A Review, Mircea Ţălu

Journal of Cybersecurity Education, Research and Practice

The profound impact of the Internet of Things (IoT) on various fronts, is driven by technological advancements, the ubiquitous spread of information, and the emergence of transformative events. IoT presents a diverse array of possibilities within university environments, fostering a more connected and enhanced educational experience. This research undertakes a comprehensive review of existing literature to provide context to the IoT and underscore its crucial significance in the realm of smart campuses. Additionally, the paper explores the intricate connections between IoT and key concepts such as cybersecurity and wireless sensor networks to present a holistic perspective. It delves into the …

Signal-Based Error Handling: Case Study Using The Bathymetric Attributed Grid Library, Anthony R. Papetti

Honors Theses and Capstones

No abstract provided.

Enhanced Network Anomaly Detection Using Machine Learning Models, Ousmane Barry

CCAC Theses and Dissertations

This dissertation investigates enhanced network anomaly detection using Machine Learning (ML) models. The study addresses two distinct classification problems: binary classification and multiclass classification. In the binary classification task, network traffic data is categorized as either "normal" or "abnormal," where abnormal includes all non-normal traffic. Leveraging the balanced nature of the dataset, this study develops optimized models that achieve consistently high classification performance. Key metrics, including precision, recall, and F1 scores, are used to ensure robust evaluation and reliable detection across all classes.

For multiclass classification, only classes present in both training and test datasets are included to ensure meaningful …

Data Injustice In Global Justice, Asaf Lubin, Cherry Tang

Articles by Maurer Faculty

In May 2020, the United Nations Secretary-General unveiled a sweeping “Data Strategy for Action by Everyone, Everywhere,” seeking to unlock the UN’s “full data potential.” The International Criminal Court’s Office of the Prosecutor followed suit, declaring in 2023 its intent to acquire advanced cyber forensic tools so as to hold the “widest range of digital evidence globally.” Across international institutions, data-driven governance has become the norm, with humanitarian agencies and tribunals transforming into “data hubs and information clearinghouses.” This Article critiques the unfettered datafication of global justice by international courts and organizations. These entities have aggressively expanded their data-driven operations …

Fault And Cyberattack Diagnosis And Handling Via Large Language Models And State Prediction For Manufacturing And Quantum Systems, Jihan Abou Halloun

Wayne State University Dissertations

In the digitalization era and Smart Manufacturing, companies are harnessing the power of artificial intelligence (AI) and machine learning (ML) across multiple sectors, including process engineering optimization, process control and fault detection, to enhance efficiency and engineering decision making. Although AI and ML are widely used in anomaly detection and handling, there are still areas where it has been less explored. One of the major areas where AI’s potential in manufacturing needs to be characterized is with respect to the applications of large language models (LLMs) in manufacturing troubleshooting for fault/attack handling. A second major area where the potential of …

Watchdogs Or Lapdogs: How Audit Committees Influence Financial Reporting Quality And Cybersecurity, Yanru Yang

2025

With the increasing complexity of the business environment, the role of corporate governance and oversight is expanding continuously. Grounded in archival research, my dissertation consists of three studies that explore the features of audit committees in monitoring both financial reporting and broader areas, such as cybersecurity.

The first paper, co-authored with Gopal Krishnan and Wei Yu, examines the implications of audit committee (AC) director departure for financial reporting quality and audit risk. We find that the departures in the firms with most concerning AC departures are associated with a higher likelihood of a future “Big R” restatement announcement and auditor …

Machine Learning Methods For Intrusion Detection And Response In Network Security, Ayomide Oyemaja

College of Graduate Studies: Theses & Dissertations

Intrusion Detection Systems (IDS) play a crucial role in computer network security by identifying malicious activities and potential cyberattacks. This thesis combines machine learning and cybersecurity by applying Reinforcement Learning (RL) in intrusion detection and response using the NSL-KDD dataset.

We designed and implemented a Q-learning framework where an agent learns to classify network traffic over time by interacting with the environment and receiving rewards based on detection accuracy. We also look at the importance of feature selection and classification techniques and how effective they are in improving model performance, reducing the complexity of computation, and producing more desirable results. …

Balancing Performance And Efficiency: An Autoencoder Approach To Api-Based Malware Detection, Selma Bouraoui

Graduate Theses/Dissertations

The constant evolution of malware presents a critical challenge to today's interconnected world. It poses an increasing threat on different scales, spanning from individuals, organizations to critical infrastructures such as government’s security. Hackers continuously develop new techniques to evade detection methods. When confronted with the high volume and variety of malware, conventional approaches tend to struggle to perform in robust, accurate and timely manner. This thesis explores the application of deep learning methods to improve malware detection and classification techniques. By analyzing API call sequences, the proposed approach leverages Autoencoders to compress high-dimensional malware data into more optimized representations that …

A Deep Learning Approach For Identifying Malicious Activities In The Industrial Internet Of Things, Mohammed Amin Almaiah, Fuad Ali El-Qirem, Rami Shehab, Khaled Sulieman Momani

Mesopotamian Journal of Computer Science

Data-driven decision-making, real-time connectivity, and automation have transformed industrial operations with the Industrial Internet of Things. However, the integration also introduces substantial cybersecurity vulnerabilities, making IIoT networks a prime target for malicious activities. Cyber threats are evolving and becoming more sophisticated, which makes traditional security mechanisms inadequate. An approach using deep learning to detect malicious activities in IIoT environments is examined. It is investigated whether Deep Feed Forward neural networks, autoencoders, and convolutional neural networks are effective at detecting anomalies and mitigating cyber threats. NSL-KDD and UNSW-NB15 benchmark datasets are used to evaluate the proposed model's accuracy, precision, and detection …

Synthesizing Deception: Countering Large Language Model-Generated Phishing Campaigns Through Adaptive Semantic Anomaly Detection, Bekim Fetaji, Debabrata Samanta

Mesopotamian Journal of Computer Science

The paper fills in a gap in the literature that demonstrates an insufficient number of sturdy detection schemes that can recognize the small semantic aberrations inherent in LLM-generated deceptive text. Our proposed co-design hybrid model is Semantic Anomaly Detection with Isolation Forest (SADI) model that combines the synergistic mixture of a fine-tuned transformer-based LLM for deep semantic feature extraction with Isolation Forest algorithm that detects anomalies efficiently. This study introduces SADI, an adaptive semantic-anomaly detector for large-language-model phishing emails. Using a corpus of 10 000 messages, SADI attains an F1 score of 0.981 (95 % CI 0.978–0.984) and processes a …

T3-Ciders: Train-The-Trainer And Community Building To Increase Cyberinfrastructure Adoption In Cybersecurity Research And Education, Wirawan Purwanto, Mohan Yang, Peng Jiang, Shanan Chappell Moots, Masha Sosonkina, Hongyi Wu

University Administration Publications

T³-CIDERS is a train-the-trainer program to increase the adoption of advanced cyberinfrastructure (CI) and data skills into the fabric of research and education in cybersecurity and cyber-related disciplines. T³-CIDERS trains faculty, researchers, and students as “future trainers” (FTs) with hands-on technical and instructional skills to enable more people to effectively leverage CI in cybersecurity. The program includes a series of technical pre-training modules, a weeklong summer institute, ongoing learning engagements conducted over an academic year; it culminates with the FTs conducting locally tailored CI-infused training events at their respective home institutions. Ultimately, T³-CIDERS aims to build a “CI+cybersecurity” community of …

Silent Sabotage: Identifying And Preventing Cyber Attacks From Inside Actors, Autumn Groen

Williams Honors College, Honors Research Projects

Cyber-attacks are becoming increasingly common and damaging as technology advances each year. Many businesses cannot afford the latest security technologies, and even with the highest security measures, there can still be room for employee error or insider threats that are not taken into account. It is crucial to keep these factors in mind when securing a business network of any size or financial standing.This project will aim to simulate a business environment by first building a small network with three routers and a switch, and implementing some of the common best practices for network hardening from credible organizations like NIST …

Cyberattacks On Port Infrastructures: A Decade Of Trends, Incidents, And Mitigation Strategies (2011-2024), Minodora Badea, Olga Bucovetchi, Adrian V. Gheorghe, Gabriel Raicu

Engineering Management & Systems Engineering Faculty Publications

Port infrastructures are critical to global trade, handling over 80% of the world's cargo by volume. However, their increasing reliance on digital technologies has exposed them to a wide range of cyber threats. This paper provides a comprehensive analysis of cyberattacks targeting port infrastructures from 2011 to the present. We examine the types of attacks, geographical distribution, notable incidents, and underlying vulnerabilities. Additionally, we discuss mitigation strategies and future directions for enhancing cybersecurity in the maritime sector. Our findings highlight the urgent need for robust regulatory frameworks, advanced technological solutions, and collaborative efforts to safeguard critical port operations.

Vulnerability To Stability: Scalable Large Language Model In Queue-Based Web Service, Md Abdul Barek, Bajlur Rashid, Mostafizur Rahman, A.B.M. Kamrul Islamc Riad, Guillermo Francia, Hossain Shahriar, Sheikh Iqbal Ahamed

Computer Science Faculty Research and Publications

Large Language Models (LLMs) have demonstrated exceptional capabilities in the field of Artificial Intelligence (AI) and are now widely used in various applications globally. However, one of their major challenges is handling high-concurrency workloads, especially under extreme conditions. When too many requests are sent simultaneously, LLMs often become unresponsive which leads to performance degradation and reduced reliability in real-world applications. To address this issue, this paper proposes a queue-based system that separates request handling from direct execution. By implementing a distributed queue, requests are processed in a structured and controlled manner, preventing system overload and ensuring stable performance. This approach …

A Comprehensive Exploration Of 6g Wireless Communication Technologies, Md Nurul Absar Siddiky, Muhammad Enayetur Rahman, Md. Shahriar Uzzal, H. M. Dipu Kabir

Electrical & Computer Engineering Faculty Publications

As the telecommunications landscape braces for the post-5G era, this paper embarks on delineating the foundational pillars and pioneering visions that define the trajectory toward 6G wireless communication systems. Recognizing the insatiable demand for higher data rates, enhanced connectivity, and broader network coverage, we unravel the evolution from the existing 5G infrastructure to the nascent 6G framework, setting the stage for transformative advancements anticipated in the 2030s. Our discourse navigates through the intricate architecture of 6G, highlighting the paradigm shifts toward superconvergence, non-IP-based networking protocols, and information-centric networks, all underpinned by a robust 360-degree cybersecurity and privacy-by-engineering design. Delving into …

T3-Ciders: Fostering A Community Of Practice In Ci-And Data Enabled Cybersecurity Research Through A Train-The-Trainer Program, Wirawan Purwanto, Mohan Yang, Peng Jiang, Masha Sosonkina

Electrical & Computer Engineering Faculty Publications

We present a training program named T³-CIDERS, the Train- The-Trainer approach to fostering cyberinfrastructure (CI)- and Data-Enabled Research in CyberSecurity. T³-CIDERS is a train-the-trainer program for advanced cyberinfrastructure (CI) skills that is designed to be synergistic with research, teaching, and learning activities in cybersecurity and cyber-related disciplines. The participants, termed 'future trainers' (FTs), are trained in effective instructional design and CI hands-on materials from DeapSECURE, developed in a previous CyberTraining program. T³-CIDERS aims to enhance cybersecurity research and education through broader adoption of advanced CI techniques such as artificial intelligence, big data, parallel programming, and platforms like high-performance computing (HPC) …

Enhancing Cybersecurity In Smart Education With Deep Learning And Computer Vision: A Survey, Guma Ali, Aziku Samuel, Maad M. Mijwil, Kholoud Al-Mahzoum, Malik Sallam, Ioannis Adamopoulos, Ayodeji Olalekan Salau, Indu Bala, Klodian Dhoska, Engin Melekoglu

Mesopotamian Journal of Computer Science

The rapid digital transformation of education, driven by the widespread adoption of smart devices and online platforms, has ushered in the era of smart education. While this shift enhances learning experiences, it also introduces significant cybersecurity risks that threaten the confidentiality, integrity, and availability of educational resources, student data, and institutional systems. This survey examines how deep learning (DL) and computer vision (CV) techniques can enhance cybersecurity in smart education environments. By reviewing 202 peer-reviewed research papers published between January 2022 and June 2025 across leading publishers such as ACM Digital Library, Frontiers, Wiley Online Library, IGI Global, Nature, Springer, …

Securing Secrets: Exploring The Aes Encryption And Key Security Capabilities Of Chatgpt, Kayla Taylor

Student Works

The development and increasing accessibility of generative artificial intelligence (AI) tools and large language models (LLMs) have allowed cryptographers to explore a variety of cryptanalysis problems in dynamic and interactive ways. Prompt engineering, the process by which input text is tested and refined to elicit a desired response from LLMs, is a nascent area of research that remains largely unexplored in many contexts, including cryptography. This study will explore the potential applications and limitations of prompt engineering in the context of Advanced Encryption Standard (AES) encryption and key security with OpenAI’s ChatGPT (GPT-4o) through two main objectives: First, given a …

Digital Twin And Cybersecurity In Additive Manufacturing, Lidong Wang

Journal of Cybersecurity Education, Research and Practice

Additive manufacturing (AM) has been applied to automotive, aerospace, medical sectors, etc., but there are still challenges such as parts’ porosity, cracks, surface roughness, intrinsic anisotropy, and residual stress because of the high level of thermal gradient. It is significant to conduct the modeling and simulation of the AM process and achieve quality products. Digital Twin (DT) can help AM with forecasting defects/errors through simulation and real-time process monitoring. DT is a concept of Industry 4.0, and its digital structure reflects the real-time behaviors of a cyber-physical or physical system. This paper introduces the progress of DT applications in AM, …

Integrating Criminological Theories In Cybersecurity Risk Assessment: A Study Of The Traci Framework's Application To Critical Infrastructure, Connor S. Martin

Doctoral Dissertations and Projects

This dissertation explores the application of the Taxonomy for Risk Assessment of Cyberattacks on Critical Infrastructure (TRACI) framework, a tool designed to systematically evaluate cybersecurity threats against critical infrastructure. TRACI integrates principles from Routine Activity and Rational Choice Theories to provide a detailed and comprehensive understanding of cybersecurity risks. This integration facilitates an in-depth analysis not only of how cyberattacks occur but also of the underlying reasons they are initiated, by categorizing and assessing risks based on factors such as attacker motivations and systemic vulnerabilities. By employing ANOVA to assess variations in risk assessment scores across TRACI's designated categories—Assets, Risk …

Exploration Of The Gap Between The Secure Web Application Development Competencies Needed By Industry And Those Competencies Provided By Graduates Of U.S. Undergraduate Software Engineering Programs, Gary Allen Harris

Theses and Dissertations

Literature demonstrates that threats and attacks on computer systems and networks have been around since the beginning of computing, and the number, severity, sophistication, and costs of attacks and data breaches are continuing to grow. Several studies suggest that one of the most common causes of data breaches is insecure web applications that contain vulnerable application code. These studies suggest that poor secure web application development practices are a prime cause of the susceptible web applications. Additionally, studies suggest that higher education is not meeting industry’s secure software/web application development needs. Employers have reported that they are not getting the …