Computer Sciences Commons^™

Residential Ai Data Centers: Security, Privacy, And Governance Concerns, Alan Saquella

Publications

The concept of placing mini data centers and distributed AI computer nodes inside residential homes may appear innovative from an energy efficiency perspective, but it introduces significant security, privacy, governance, and liability concerns. What is effectively occurring is the expansion of commercial and potentially critical infrastructure into lightly protected residential environments.

Once a residence becomes part of a distributed computer grid supporting hyper-scalers, AI providers, or enterprise workloads, the home is no longer simply a private residence. It becomes a commercial technology asset, a potential cyber target, and even a physical target. A distributed network of thousands of residential nodes …

Hide-And-Sweep: Detecting Concealed Cameras Via Led Illumination Sweeps, Jonghyuk Yun, Jaeyoung Moon, Yunseo Park, Sean Rui Xiang Tan, Byunghyun Kim, Rajesh Krishna Balan, Jun Han

Research Collection School Of Computing and Information Systems

Hidden cameras have increasingly infiltrated hotel and Airbnb rooms, posing serious privacy risks. Detecting such cameras is challenging because they are visually inconspicuous and often embedded inside everyday objects. Even worse, existing handheld detectors are manual and also rely on single-angle illumination and hence suffer from high false-positive rates. We present SweepLED (pronounced "sweepled")1, a practical hidden camera detection system that operates on a commodity smartphone augmented with an unobtrusive LED-embedded case. SweepLED performs LED sweeping - a controlled sequence of multi-angle illumination - while the user simply holds the phone still by hand, enabling the camera to capture how …

Privacy Protection In Machine Learning: Methods For Structured And Unstructured Data, Karuna Bhaila

Graduate Theses and Dissertations

As machine learning models become increasingly integrated into data-driven decision-making, the protection of sensitive information throughout the model lifecycle is a paramount concern. As these models process and memorize sensitive, proprietary, or personal data, they risk leaking information through their outputs or internal states, especially in domains such as healthcare and finance. The protection of data in machine learning has thus been a crucial field of study. Within this paradigm, researchers have studied theoretical and application-oriented mechanisms for realizing privacy protections for various data formats. Nonetheless, privacy in machine learning still has many open problems, especially with the emergence of …

Deep Learning Approaches For Anti-Money Laundering On Mobile Transactions: Review, Framework, And Directions, Jiani Fan, Lwin Khin Shar, Ruichen Zhang, Ziyao Liu, Wenzhuo Yang, Dusit Niyato, Kwok-Yan Lam

Research Collection School Of Computing and Information Systems

Money laundering is a financial crime that obscures the origin of illicit funds, necessitating the development and enforcement of anti-money laundering (AML) policies by governments and organizations. The proliferation of mobile payment platforms and smart IoT devices has significantly complicated AML investigations. As payment networks become more interconnected, there is an increasing need for efficient real-time detection to process large volumes of transaction data on heterogeneous payment systems by different operators such as digital currencies, cryptocurrencies, and account-based payments. Most of these mobile payment networks are supported by connected devices, many of which are considered loT devices in the FinTech …

Towards Secure Program Partitioning For Smart Contracts With Llm’S In-Context Learning, Ye Liu, Yuqing Niu, Chengyan Ma, Ruidong Han, Wei Ma, Yi Li, Debin Gao, David Lo

Research Collection School Of Computing and Information Systems

Smart contracts are highly susceptible to manipulation attacks due to the leakage of sensitive information. Addressing manipulation vulnerabilities is particularly challenging because they stem from inherent data confidentiality issues rather than straightforward implementation bugs. To tackle this by preventing sensitive information leakage, we present PARTITIONGPT, the first LLM-driven approach that combines static analysis with the in-context learning capabilities of large language models (LLMs) to partition smart contracts into critical (privileged) and normal codebases, guided by a few annotated sensitive data variables. We evaluated PARTITIONGPT on 18 annotated smart contracts containing 99 sensitive functions. The results demonstrate that PARTITIONGPT successfully generates …

A Systematic Review And Characterization Of Privacy Noncompliance In Real-World Applications, Alexander E. Charkiewicz

Graduate Studies Theses and Dissertations 2026

Software applications increasingly rely on user data to provide their functionality, but improper handling of such data can lead to serious privacy noncompliance with applicable regulations and policies. A prominent example is the Facebook–Cambridge Analytica scandal, in which a third-party application collected the personal data of approximately 87 million Facebook users without users' consent. Despite growing attention to privacy compliance, two key challenges hinder the systematic understanding and analysis of privacy noncompliance. First, unlike security vulnerabilities, which have been systematically categorized through taxonomies such as the Common Weakness Enumeration (CWE), privacy noncompliance lacks a technical taxonomy describing how it manifests …

A Trigger For The Autonomous Decommissioning Of Smart Devices, Ravindra Mangar, Jared Chandler, Jingyu Qian, Carl A. Gunter, Timothy J. Pierson, David Kotz

Dartmouth Scholarship

Smart devices are ubiquitous in modern environments, yet their decommissioning phase remains poorly studied and often overlooked in system design. We define secure decommissioning as the process by which a smart device securely disconnects from its environment and makes sensitive data inaccessible. If not decommissioned, devices may retain sensitive information – such as security credentials or user-behavior data that could be recovered by an adversary. Unfortunately, some users may forget to decommission a device when they dispose or sell it, and cannot decommission a device that is lost or stolen. This paper investigates a trigger mechanism for individual wireless smart …

Accuracy-Enabling Differential Privacy-Preserving Truth Discovery, Man Zhang, Xinghua Li, Yinbin Miao, Bin Luo, Siqi Ma, Robert H. Deng

Research Collection School Of Computing and Information Systems

Perturbation-based privacy-preserving truth discovery requires the Service Provider (SP) to calculate the truthful aggregation result from perturbed data of the Data Sources (DSs), which inevitably damages the aggregation accuracy due to perturbation noise added in the data. Thus, the existing works attempt to relieve the perturbation errors by reducing noise amounts or adjusting aggregation weights of DSs. However, the former sacrifices DSs’ privacy preservation and the latter has the limited accuracy recovery performance. Aiming at it, we propose an accuracy-enabling differential privacy-preserving truth discovery consisting of an independence-guaranteed data perturbation module and a progressive-private noise elimination module. Specifically, in the …

User Privacy In The Digital Playground: An In-Depth Investigation Of Facebook Instant Games, Sideeq Bello

LSU Master's Theses

Amid growing concerns over data privacy in web and mobile applications, this study aims to assess the privacy mechanisms in instant games on Facebook, a platform with approximately 3.03 billion monthly active users and a substantial repository of personal data. Instant Games have become increasingly popular due to their ease of access and social integration features. Investigating these games can provide insights into privacy mechanisms and practices, thereby informing the development of more fair, compliant, and user privacy-centric gaming experiences. Thus, this study proposes an integrated analytical framework that leverages a combination of descriptive, memory, and network analysis techniques to …

Ivycross: A Privacy-Preserving And Concurrency Control Framework For Blockchain Interoperability, Ming Li, Jian Weng, Jia-Si Weng, Yi Li, Yongdong Wu, Dingcheng Li, Guowen Xu, Deng, Robert H.

Research Collection School Of Computing and Information Systems

Interoperability is a fundamental challenge for long-envisioned blockchain applications. A mainstream approach is using Trusted Execution Environment (TEE) to support interoperable off-chain execution. However, this incurs multiple TEE configured with non-trivial storage capabilities running on fragile concurrent processing environments, rendering current strategies based on TEE far from being practical. This paper aims to fill this gap and design a practical interoperability mechanism with simplified TEE as the underlying architecture. Specifically, we present IvyCross, a TEE-based framework that achieves low-cost, privacy-preserving, and race-free blockchain interoperability. IvyCross allows running arbitrary smart contracts across heterogeneous blockchains atop two distributed TEE-powered hosts. We design …

A Comprehensive Analysis Of Evolving Permission Usage In Android Apps: Trends, Threats, And Ecosystem Insights, Ali Alkinoon, Trung Cuong Dang, Ahod Alghuried, Abdulaziz Alghamdi, Soohyeon Choi, Manar Mohaisen, An Wang, Saeed Salem, David Mohaisen

Research Collection School Of Computing and Information Systems

The proper use of Android app permissions is crucial to the success and security of these apps. Users must agree to permission requests when installing or running their apps. Despite official Android platform documentation on proper permission usage, there are still many cases of permission abuse. This study provides a comprehensive analysis of the Android permission landscape, highlighting trends and patterns in permission requests across various applications from the Google Play Store. By distinguishing between benign and malicious applications, we uncover developers’ evolving strategies, with malicious apps increasingly requesting fewer permissions to evade detection, while benign apps request more to …

A Survey On Security Applications With Smartnics: Taxonomy, Implementations, Challenges, And Future Trends, Serigo Elizalde, Ali Alsabeh, Ali Mazloum, Samia Choeiri, Elie Kfoury, Jose Gomez, Jorge Crichigno

Faculty Publications

Over the last decade, network applications have grown exponentially, demanding high-speed interconnects. Unfortunately, chip manufacturers are approaching the upper limits of silicon-based computing with slow improvements in computational performance and energy efficiency. This trend has forced the industry to shift paradigms, moving from monolithic architectures to heterogeneous, domain-specific designs. Moreover, the ever-evolving threats compromise digital services and demand more scalable and flexible solutions to ensure service continuity in production networks. Smart Network Interface Cards (SmartNICs) are a product of this new paradigm, integrating domain-specific engines and general-purpose cores to offload various network infrastructure tasks, including those related to security. This …

Artificial Intelligence In Higher Education: A Case Study Of Faculty Teaching Methodologies At A Private University, Ellen Ramsey, George Antoniou, Matteo Peroni, Karima Lanfranco, Brent Muckridge, Raouf Ghattas, Philip L. Fazio, Wendy Wallberg, Saidi Porta, Mary Smith, Gary Solomon, Kristen Migliano, David G. Wolf

Faculty and Staff Publications & Presentations

This research study examined the integration of artificial intelligence (AI) in higher education from the perspective of the faculty of a private university. It inquired into the impact of AI on pedagogical methods, administrative procedures, and ethical values. Qualitative case study methodology and in-depth semi-structured interviews were designed and conducted with faculty from four academic departments. Responses related to impressions, challenges, and opportunities for AI integration were gathered. The study findings from qualitative and quantitative data analysis indicated that AI is perceived to help improve educational outcomes with student-personalized learning pathways through streamlined administrative processes. The study revealed that participating …

Achieving Flexible Fairness And Privacy In Federated Learning, Alycia N. Carey

Graduate Theses and Dissertations

Having access to large, high-quality datasets is crucial for training machine learning models that achieve satisfactory performance. Unfortunately, it is common that a single entity (e.g., mobile device or organization) does not have access to such datasets due to monetary or resource constraints. Traditional machine learning requires that all training data reside in a centralized location during the entire duration of model training, however, in many circumstances it is difficult or even impossible (e.g., due to governmental regulations) for multiple parties to combine their data to meet this constraint. Federated learning is a machine learning paradigm that facilitates the joint …

Systemization Of Knowledge (Sok): Goals, Coverage, And Evaluation In Cybersecurity And Privacy Games, Yue Huang, Marthie Grobler, Lauren S. Ferro, Georgia Psaroulis, Sanchari Das, Jing Wei, Helge Janicke

Research outputs 2022 to 2026

This paper systematized existing knowledge on cybersecurity and privacy game-based approaches, exploring their goals, scope, and evaluation methods. Our review of 93 academic papers revealed that these approaches serve multiple purposes and target diverse player types. We identified 11 key aspects of cybersecurity and privacy that these approaches addressed, such as threats, defensive strategies, and data privacy. Additionally, we analyzed the effectiveness evaluation methods of these approaches, emphasizing the connections between evaluation techniques, types of data used, and their alignment with the approaches' goals. We also summarized the aspects of user experience evaluated in the literature and the types of …

Balancing Privacy And Security: A Comparative Analysis Of Ai-Driven Surveillance In The Uae And Usa, Belal Alghafri, Abdallah Tubaishat

All Works

AI-driven surveillance has emerged as a critical tool for enhancing public safety, enabling authorities to monitor and prevent crime and terrorism more effectively. In countries like the UAE and the USA, these systems are often implemented under the pretext of national security, offering advanced methods to track potential threats. However, the increasing reliance on AI for surveillance raises significant ethical concerns about privacy and individual freedoms. The boundary between protecting citizens and infringing on their privacy becomes increasingly blurred, potentially leading to abuses of power, diminished public trust, and a pervasive atmosphere of fear. This paper explores the complex relationship …

Cachealarm: Monitoring Sensitive Behaviors Of Android Apps Using Cache Side Channel, Jianwen Tian, Haoyu Ma, Debin Gao, Xiaohui Kuang

Research Collection School Of Computing and Information Systems

Malware attack has been a serious threat to the security and privacy of both individual and corporation users of the Android platform. Business entities seek to protect themselves by means of monitoring privacy-related sensitive behaviors conducted on company-issued Android devices. However, due to Android’s own access control and privacy protection policies, this is difficult to be done with third-party apps using only normal privileges. Existing works proposed using side-channel readings from leaky APIs and system virtual files to speculate runtime app behaviors, which could be unreliable due to future system updates (that ban exploited resources), hardware jittering, etc. In this …

Data Injustice In Global Justice, Asaf Lubin, Cherry Tang

Articles by Maurer Faculty

In May 2020, the United Nations Secretary-General unveiled a sweeping “Data Strategy for Action by Everyone, Everywhere,” seeking to unlock the UN’s “full data potential.” The International Criminal Court’s Office of the Prosecutor followed suit, declaring in 2023 its intent to acquire advanced cyber forensic tools so as to hold the “widest range of digital evidence globally.” Across international institutions, data-driven governance has become the norm, with humanitarian agencies and tribunals transforming into “data hubs and information clearinghouses.” This Article critiques the unfettered datafication of global justice by international courts and organizations. These entities have aggressively expanded their data-driven operations …

Exploring Research And Tools In Ai Security: A Systematic Mapping Study, Sidhant Narula, Mohammad Ghasemigol, Javier Carnerero-Cano, Amanda Minnich, Emil Lupu, Daniel Takabi

School of Cybersecurity Faculty Publications

With the pervasive integration of artificial intelligence (AI) in various facets of modern technology, the importance of AI security has been thrust into the spotlight. The field is rapidly evolving, with new challenges and solutions emerging at a swift pace. However, the breadth and depth of AI security research have not been comprehensively mapped in recent times, presenting a crucial need for an extensive review and synthesis of existing literature. Given the increasing reliance on AI in critical domains such as healthcare, finance, and national security, ensuring the resilience and trustworthiness of these systems is imperative. This survey fulfills the …

Privacy-Preserved And Incentivized Knowledge Sharing For Reinforced-Learning Based Iot Platform Security, Weichao Wang, Md Morshed Alam, Yu Wang

School of Cybersecurity Faculty Publications

With the fast development and deep penetration of IoT devices and smart environments, using localized machine learning models to detect malicious activities has also been developed and deployed. However, these isolated learning models and results cannot be effectively federated together because of privacy concerns and lack of incentivization. This paper proposed several mechanisms to solve the problem. A verification method was designed for phased learning results to protect user privacy and prevent individual parties from manipulating the verification selection. The paper also presented an incentive method based on delay of distribution of the latest federated learning results. Extensive simulations were …

Including Individuals' Sense Of Self In Digital Information Privacy, Peter N. Meso, Solomon Negash, Humayun Zafar, Gurpreet Dhillon

Faculty Articles

The nature of contemporary digital ecosystems causes concerns that affect the person, the individual-self, an integral part of an individual’s information privacy calculus and hence a component of individuals’ Information Privacy Concerns (IPC). Yet, prior IPC models overlook self-focused concerns. This study articulates two constructs, termed “loss of autonomy” (i.e., autonomy) and “control over profiling” (i.e., profiling), that reflect individuals’ self-focused privacy concerns. Combining these new constructs with conventional IPC constructs that capture data-focused and device-focused concerns yields an IPC model made up of three dimensions: self-focused concerns, data-focused concerns, and device-focused concerns. The authors first develop instrument items for …

Privshap: A Finer-Granularity Network Linearization Method For Private Inference, Xiangrui Xu, Zhenzhen Wang, Rui Ning, Chunsheng Xiu, Hongyi Wu

Computer Science Faculty Publications

Private inference applies cryptographic techniques like homomorphic encryption, garble circuit and secret sharing to keep both sides privacy in a client-server setting during inference. It is often hindered by the high communication overheads, especially at non-linear activation layers such as ReLU. Hence ReLU pruning has been widely recognized as an efficient way to accelerate private inference. Existing approaches to ReLU pruning typically rely on coarse hypothesis, which assume an inverse correlation between the importance of ReLU and linear layers or shallow activation layers have less importance for universal models, to assign the budgets according to the layer while preserving the …

The Great Scrape: The Clash Between Scraping And Privacy, Daniel J. Solove, Woodrow Hartzog

Faculty Scholarship

Artificial intelligence (AI) systems depend on massive quantities of data, often gathered by “scraping”—the automated extraction of large amounts of data from the internet. A great deal of scraped data contains people’s personal information. This personal data provides the grist for AI tools such as facial recognition, deep fakes, and generative AI. Although scraping enables web searching, archiving of records, and meaningful scientific research, scraping for AI can also be objectionable and even harmful to individuals and society.

Organizations are scraping at an escalating pace and scale, even though many privacy laws are seemingly incongruous with the practice. In this …

Safeguarding Virtual Healthcare: A Novel Attacker-Centric Model For Data Security And Privacy, Suvineetha Herath, Haywood Gelman, John Hastings, Yong Wang

Research & Publications

The rapid growth of remote healthcare delivery has introduced significant security and privacy risks to protected health information (PHI). Analysis of a comprehensive healthcare security breach dataset covering 2009-2023 reveals their significant prevalence and impact. This study investigates the root causes of such security incidents and introduces the Attacker-Centric Approach (ACA), a novel threat model tailored to protect PHI. ACA addresses limitations in existing threat models and regulatory frameworks by adopting a holistic attacker-focused perspective, examining threats from the viewpoint of cyber adversaries, their motivations, tactics, and potential attack vectors. Leveraging established risk management frameworks, ACA provides a multi-layered approach …

Gotcha ! This Model Uses My Code ! Evaluating Membership Leakage Risks In Code Models, Zhou Yang, Zhipeng Zhao, Chenyu Wang, Jieke Shi, Dongsum Kim, Donggyun Han, David Lo

Research Collection School Of Computing and Information Systems

Leveraging large-scale datasets from open-source projects and advances in large language models, recent progress has led to sophisticated code models for key software engineering tasks, such as program repair and code completion. These models are trained on data from various sources, including public open-source projects like GitHub and private, confidential code from companies, raising significant privacy concerns. This paper investigates a crucial but unexplored question: What is the risk of membership information leakage in code models? Membership leakage refers to the vulnerability where an attacker can infer whether a specific data point was part of the training dataset. We present …

De-Identification Is Not Enough: A Comparison Between De-Identified And Synthetic Clinical Notes, Atiquer Rahman Sarkar, Yao-Shun Chuang, Noman Mohammed, Xiaoqian Jiang

Faculty, Staff and Student Publications

For sharing privacy-sensitive data, de-identification is commonly regarded as adequate for safeguarding privacy. Synthetic data is also being considered as a privacy-preserving alternative. Recent successes with numerical and tabular data generative models and the breakthroughs in large generative language models raise the question of whether synthetically generated clinical notes could be a viable alternative to real notes for research purposes. In this work, we demonstrated that (i) de-identification of real clinical notes does not protect records against a membership inference attack, (ii) proposed a novel approach to generate synthetic clinical notes using the current state-of-the-art large language models, (iii) evaluated …

Phr-Nft: Decentralized Blockchain Framework With Hyperledger And Nfts For Secure And Transparent Patient Health Records, Huwida E. Said, Nedaa B. Al Barghuthi, Sulafa M. Badi, Faiza Hashim, Shini Girija

All Works

Blockchain technology holds significant promise for healthcare by enhancing the security and integrity of patient health records (PHRs) through decentralized storage and transparent access. However, it has substantial limitations, including problems with scalability, high transaction costs, privacy concerns, and intricate stakeholder access management. This study presents PHR-NFT, a novel framework that strengthens PHR privacy by utilizing Hyperledger Fabric and non-fungible tokens (NFTs) to address these issues. PHR-NFT improves privacy and communication by letting patients keep control of their medical records while permitting temporary, permission-based access by medical professionals. PHR-NFT offers a transparent solution that increases trust among healthcare stakeholders through …

A Novel Algorithmic Approach To Safeguarding Inter-Vehicular Communications And Privacy, Susan Zehra

Graduate Student Government Association Research Conference

Vehicular networks have become a crucial technology for implementing various safety applications for both drivers and passengers. These networks are currently receiving significant attention due to their ability to facilitate access to a diverse range of ubiquitous services. However, the growing popularity of vehicular networks has also led to an increase in security vulnerabilities within their inter-vehicular services and communications, resulting in a rise in security attacks and threats.

Ensuring the security of vehicular networks is paramount, as their deployment should not compromise the safety and privacy of stakeholders. Effectively defending against a broad spectrum of attacks necessitates the development …

Bridging The Protection Gap: Innovative Approaches To Shield Older Adults From Ai-Enhanced Scams, Ld Herrera, London Van Sickle, Ashley L. Podhradsky

Research & Publications

Artificial Intelligence (AI) is rapidly gaining popularity as individuals, groups, and organizations discover and apply its expanding capabilities. Generative AI creates or alters various content types including text, image, audio, and video that are realistic and challenging to identify as AI-generated constructs. However, guardrails preventing malicious use of AI are easily bypassed. Numerous indications suggest that scammers are already using AI to enhance already successful scams, improving scam effectiveness, speed and credibility, while reducing detectability of scams that target older adults, who are known to be slow to adopt new technologies. Through hypothetical cases analysis of two leading scams, the …

Regulating Algorithmic Harms, Sylvia Lu

Law & Economics Working Papers

In recent years, the rapid expansion of artificial intelligence (AI) innovations has led to a rise in algorithmic harms—harms emerging from AI operations that pose significant threats to civil rights and democratic values in today’s technological landscape. A facial recognition system for improving criminal detection wrongly collected sensitive personal data and flagged racial minorities as shoplifters. A risk-prediction algorithm adopted to identify patients denied medical treatment to Black individuals with poor health conditions. A social media algorithm intended to boost social engagement exacerbated addictive behavior and mental illness in teenagers. These harms are becoming increasingly ubiquitous yet often manifest in …