Cybersecurity Commons^™

Energy Security Strategy Empowered By Artificial Intelligence, Qiang Ji, Jiaofeng Pan, Yu Song

Bulletin of Chinese Academy of Sciences (Chinese Version)

Against the backdrop of unprecedented changes in a century, geopolitical restructuring has led to the fragmentation of energy game camps, climate change has impacted the resilience of energy infrastructure, and energy transformation has promoted the multidimensional and coordinated expansion of security connotations. Artificial intelligence, with its core advantages such as optimizing geopolitical risk prevention and control, enhancing infrastructure protection, improving energy system efficiency, and accelerating the integration of renewable energy, has promoted the shift of energy security strategy from experience driven to data-driven intelligence, achieving comprehensive risk identification, dynamic evaluation, collaborative response, and full chain monitoring, significantly improving the efficiency, …

Large Models Empowering Cybersecurity: Opportunities And Challenges, Zhuofeng He, Dongbin Hu, Yige Yuan

Bulletin of Chinese Academy of Sciences (Chinese Version)

Cybersecurity serves as a critical pillar for national security and social stability. Large models in cybersecurity are emerging as key enablers for the intelligent transformation of cyber offense and defense systems. As one of the most advanced core technologies in artificial intelligence, large models are introducing new research directions and application paradigms in the cybersecurity domain. This study systematically reviews the current landscape of cybersecurity-oriented large model applications and products, and explores their deployment scenarios in practice. It further analyzes the development trends in model capabilities, industry ecosystems, and trustworthiness, while identifying major practical challenges such as data privacy protection, …

Critical Core Technology Breakthroughs In Large-Scale Models: Industrialization Strategies And Policy Implications, Zhongqi Wu, Yinshan Liu, Tao Dai, Xiaolong Zheng

Bulletin of Chinese Academy of Sciences (Chinese Version)

As a pivotal direction for breakthroughs in key core technologies within the artificial intelligence domain, large-scale models hold strategic significance in securing national scientific and technological sovereignty. This study employs a multidimensional framework encompassing “technological breakthroughs, industrial transformation, and governance policies” to systematically investigate the developmental trajectories and industrialization bottlenecks of large-scale models. At the technological level, while large-scale models exhibit exponential growth in parameter scale and computing power demands, they face critical challenges including the scarcity of high-quality data, insufficient transfer learning capabilities, and reliability-explainability trade-offs. Industrially, these models are reshaping the global industrial chain landscape through a dual-track …

Lightweight End-To-End Cryptographic Framework With Semantic Qos For Ar-Based Telesurgery, Pavan Kumar Satram

Masters Theses

This thesis presents the design, implementation, and evaluation of a lightweight end-to-end cryptographic framework integrated with a semantic quality-of-service classification system for augmented reality based telesurgery. Telesurgery can deliver expert surgical care to underserved populations, but adoption has been limited by unresolved cybersecurity, network performance, and resilience challenges. The core tension is that strong encryption adds latency that may exceed the clinical safety threshold, while unencrypted systems remain vulnerable to attacks that could endanger patients during live procedures.

The framework addresses this tension through a dual-edge security middlebox that performs per-flow encryption using semantically selected ciphers: AES-128-GCM for latency-critical haptic …

Geometry-Conditioned Adversarial Defense For Sar Automatic Target Recognition Via Regime-Specialist Classification Heads, Skyler Fabre

Discovery Day - Daytona Beach

This project, titled Geometry-Conditioned Adversarial Defense for SAR Automatic Target Recognition via Regime-Specialist Classification Heads, addresses the critical vulnerability of deep neural networks deployed in Synthetic Aperture Radar (SAR) Automatic Target Recognition (ATR) systems to adversarial perturbations. This is where imperceptible pixel-level modifications cause confident misclassification, posing serious risks in defense and aerospace applications. The objective is to develop and evaluate RegimeResNet, a geometry-conditioned classification architecture that exploits sensor metadata unique to SAR collection systems. Rather than treating all images uniformly, RegimeResNet partitions the SAR capture space into nine geometric regimes defined by depression angle and target azimuth angle extracted …

Determinants And Invertibility In Finite Modular Systems, Osasu Omobude

Discovery Day - Daytona Beach

This project investigates determinants and matrix invertibility in finite modular systems, focusing on matrices over Zn. Using the Hill cipher as context, it examines the algebraic conditions under which a matrix is invertible in modular arithmetic. In particular, the project studies how the determinant determines invertibility, showing that a matrix over Zn is invertible if and only if its determinant is coprime with n.   The project further compares invertibility over the real numbers with invertibility over modular systems, highlighting the distinction between prime moduli Zp and composite moduli. In the prime case, matrices behave similarly to those over fields, where …

Small Uas Detection: Threat Intelligence & Risk Management Project, Tyler Johnson

Discovery Day - Daytona Beach

The TRANSPORTATION SECURITY ADMINISTRATION / FEDERAL AIR MARSHAL SUAS DETECTION: THREAT INTELLIGENCE & RISK MANAGEMENT PROJECT addresses the emerging safety and security challenges posed by the rapid growth of small Unmanned Aircraft Systems (sUAS) in complex airspace environments. This study analyzed 92 days of sensor-captured Remote Identification (RID) data collected near Fort Lauderdale-Hollywood International Airport (FLL) to assess operational behaviors, aviation risk, and ground risk associated with drone activity. The primary objective of this research is to identify patterns of unauthorized or hazardous sUAS operations to enhance situational awareness and inform actionable risk-mitigation strategies. The analysis identified 335 flights from …

An Evaluation Of Machine Learning Models' Efficacy In Determining Uav Spoofing Attacks, Nicolas Machado, Jaxon Selzer

Discovery Day - Daytona Beach

An Evaluation of Machine Learning Models' Efficacy in Determining UAV Spoofing Attacks - The rapid integration of Unmanned Aerial Vehicles (UAVs) into urban airspace has introduced significant cybersecurity concerns, particularly due to vulnerabilities in Automatic Dependent Surveillance–Broadcast (ADS-B), which lacks authentication and encryption. This project addresses the problem of detecting spoofing and data manipulation attacks that can compromise UAV safety and mission reliability. The objective of this work is to evaluate the effectiveness of machine learning–based anomaly detection, specifically Long Short-Term Memory (LSTM) and Gated Recurrent Unit (GRU) networks, as protocol-agnostic solutions for identifying anomalous UAV behavior. To achieve this, …

A Survey On Machine Learning Applications For Operating System Fingerprinting, Siri Siqveland

Discovery Day - Daytona Beach

In the modern age of computers and interconnected networks, cybersecurity and cyber-attackers are evolving in tandem to exploit each other’s vulnerabilities. One technique used by both parties is Operating System Fingerprinting (OSF): with the knowledge of what Operating System a target system is running, innate vulnerabilities can be identified and patched or exploited. Historically, OSF utilizes two main methods: passive and active—the former trades accuracy with undetectability while the latter is generally more detectable but more accurate. However, recent work has combined OSF with Machine Learning (ML) to improve accurate identification. The work presented here is a survey for the …

Dcat - Distributed Computing And Analysis Tool, Asher Zwickel, Jacob Burdge

Discovery Day - Daytona Beach

This project uses distributed computing to process and analyze large datasets related to cyber breaches and attacks. Its main goal is to find patterns between initial cyber incidents and what happens next. It looks at whether responses tend to escalate, calm down, or stay about the same over time. Understanding this helps explain how digital conflicts develop and whether they follow predictable paths. The project was built as part of university research and runs on custom software across a cluster of 17 Chromebooks. While the system can study many topics, it is currently focused on cyber activity. The software uses …

Bridging The Gap: Cybersecurity And Occupational Safety Frameworks In Ai Data Centers, Athena Leader

Discovery Day - Daytona Beach

Bridging the Gap: Cybersecurity and Occupational Safety Frameworks in AI Data Centers   As artificial intelligence infrastructure expands, AI data centers represent a critical and underexamined convergence of cybersecurity and occupational safety risk. Existing frameworks such as NIST, OSHA, and ISO standards were largely developed in isolation, leaving significant gaps in how organizations manage risks that are simultaneously digital and physical in nature. This study investigates the gaps and overlaps between cybersecurity and occupational safety frameworks as they apply specifically to AI data center environments. Drawing on a targeted literature review of established regulatory and standards-based frameworks, this research identifies where …

Evaluating Machine Learning Models On Classification Of Novel Cyber Attacks In The Healthcare Domain, Promise Ehimen

Dissertations, Theses, and Projects

The increasing adoption of the Internet of Medical Things (IoMT) has improved healthcare delivery through connected medical devices while simultaneously expanding the cybersecurity risks facing healthcare organizations. Although machine learning based intrusion detection systems have demonstrated high detection accuracy, their ability to respond reliably to previously unseen cyberattacks remains uncertain. This study investigated how a Neural Network model and a Logistic Regression model classified novel cyberattacks within the IoMT environment. The Neural Network and Logistic Regression models were both trained and tested using a subset of the CICIoMT2024 benchmark dataset. The Neural Network achieved 99.82% test accuracy and a 0.94 …

Surveyception: An Exploration Of Deceptive Survey Forms, Muhammad Danish

Computer Science ETDs

Survey platforms such as Google Forms and Microsoft Forms are widely used for feedback, data collection, and engagement, but scammers increasingly exploit them to distribute phishing and deceptive attacks. This thesis presents a large-scale study of survey-form abuse across ten major providers. We collected 140,000 forms from three sources: public posts on X, search-engine results, and web pages from the top 10 million DomCop-ranked domains. Using automated filtering and manual qualitative review, we identified 2,645 forms requesting sensitive information and classified 566 as scams. These forms used techniques including phishing, private-secret theft, account and personal-data harvesting, financial deception, and psychological …

Stop Blaming My Users: Illumination Of The Technocentric Mythos Bias, Ervin H. Frenzel, Richard Lightcap

Journal of Cybersecurity Education, Research and Practice

 Abstract -This conceptual essay addresses the need for systemic and systematic transdisciplinary analytical techniques within cybersecurity and technical security. This conceptual essay is contingent upon recognition that cybersecurity is not simply technical in nature, it does not need an adversary, and more importantly it is based upon systems engineering and systems thinking.  The essay contributes a socio-technical attribution chain and field-specific ontology/taxonomy which distinguish user-triggered events from root causes, latent conditions, technical debt, validation failures, governance failures, and attribution bias before assigning responsibility to end users. It systematically defines an ontology inclusive of developer technical debt, organizational debt arising from …

Escaping The Cyberstorm: A Gamified Social Engineering Training Program, Noah Mcclanahan, Fadi Abu-Amara, Ali Khattab, Travis Jett, Andre Jackson

Journal of Cybersecurity Education, Research and Practice

In this research work, we explored the effectiveness of gamification in improving cybersecurity awareness and training users on targeted social engineering attacks. Traditional cybersecurity training focuses on lectures and videos. These training methods may not actively engage employees, which reduces their knowledge retention and ability to recognize social engineering attacks. This lack of involvement is a concern, as social engineering continues to be one of the most prevalent attack methods faced by end-users. A gamified training program, Escaping the Cyberstorm, was developed using the Godot game engine to address key challenges in spreading cybersecurity awareness. The game includes real-life …

Assessment And Evidence Practices In Cybersecurity Education: A Systematic Review (2015–2025), James K. Mayberry

Journal of Cybersecurity Education, Research and Practice

This study presents a PRISMA-based systematic review of 412 cybersecurity education intervention studies, coding assessment methods, evidence types, claimed outcomes, use of established assessment instruments, and artifact availability. Despite frequent claims of skill development and workforce preparation, 45.4% of studies reported no identifiable assessment. Knowledge tests appeared in 11.4% of studies, while performance assessments appeared in 10.2%. From 2015 to 2025, assessment practices remained dominated by post-only designs or no assessment, with no statistically detectable increase in pre/post-capable designs. Use of established assessment instruments was rare, with 94.2% of assessed studies using ad hoc measures or not identifying an established …

Assessing Flaws In Captcha Security Through Progress In Ai, Jaydon Stanislowski

Scholarly Horizons: University of Minnesota, Morris Undergraduate Journal

Protecting the internet from the threat of malicious bot activity is an important problem as AI tools become more powerful and commonplace over time. To that end, security measures are employed across websites in the form of CAPTCHAs, short challenges designed to identify and block fake web traffic. Yet, they become less effective over time as AI becomes more powerful, and thus more capable of solving them. This paper examines recent research on the threat to CAPTCHA security posed by current AI models and how this security can be reinforced over time, focusing primarily on Google’s reCAPTCHA v3.

Zero Trust Architecture And Ransomware Mitigation, Ely Johnson

Scholarly Horizons: University of Minnesota, Morris Undergraduate Journal

Ransomware has become a critical threat to modern enterprises, exploiting excessive privileges and flat network architectures to spread rapidly. Traditional perimeter-based security models are insufficient, as they rely on implicit trust within internal networks. This paper examines how Zero Trust Architecture (ZTA) mitigates ransomware through least privilege access, continuous monitoring, and micro- segmentation. Experimental results show that ZTA can significantly reduce impact, limiting encryption to about 20% of targeted files while preserving most data. Continuous monitoring enables rapid detection (5.3 seconds) with high accuracy (up to 97.2%) and a 78% reduction in false positives. Micro-segmentation further restricts lateral movement, reducing …

Security Limitations Of The Can Bus And Detection Through Power Fingerprinting, Ken Broden

Scholarly Horizons: University of Minnesota, Morris Undergraduate Journal

This paper examines the vulnerabilities of the Controller Area Network (CAN), the standard communication protocol used in most modern vehicles. It explains why CAN is widely adopted and outlines key security weaknesses in its design. The paper then reviews recent research efforts to detect and mitigate these vulnerabilities, with particular focus on an approach to origin authentication that relies on the unique power consumption patterns of each individual electronic control unit on a CAN bus.

Geospatial Governance Failures In The Department Of Defense: Contractor Noncompliance, Ai Adoption, And The Parallel Treatment Of Gis And Cybersecurity, Lyndsey Olmstead

Geography and the Environment: Graduate Student Capstones

The Department of Defense's treatment of geographic information systems and cybersecurity as parallel rather than integrated policy domains produces geographically predictable vulnerability patterns across its global military installation footprint. This capstone investigates that conclusion through original spatial analysis, constructing a five-variable composite geospatial vulnerability index across the six U.S. Combatant Command regions using publicly available unclassified data. EUCOM ranked highest overall, driven by GPS/PNT spoofing density, commercial satellite coverage, and cyber incident frequency; CENTCOM ranked second, driven by OSINT exposure incidents and governance risk. The null hypothesis of random geographic distribution is rejected. Findings confirm the structural governance gap documented …

Residential Ai Data Centers: Security, Privacy, And Governance Concerns, Alan Saquella

Publications

The concept of placing mini data centers and distributed AI computer nodes inside residential homes may appear innovative from an energy efficiency perspective, but it introduces significant security, privacy, governance, and liability concerns. What is effectively occurring is the expansion of commercial and potentially critical infrastructure into lightly protected residential environments.

Once a residence becomes part of a distributed computer grid supporting hyper-scalers, AI providers, or enterprise workloads, the home is no longer simply a private residence. It becomes a commercial technology asset, a potential cyber target, and even a physical target. A distributed network of thousands of residential nodes …

A Systematic Review Of Intrusion Detection Systems For Internet Of Medical Things: Performance, Efficiency, Explainability, And Generalization, Oswald Adohinzin, Youssef Harrath

Research & Publications

The Internet of Medical Things (IoMT) has transformed health care delivery through medical devices, remote patient monitoring, and real-time clinical decision support. However, the proliferation of IoMT devices introduces security vulnerabilities that put patient safety and data privacy at risk. Intrusion Detection Systems (IDS) have emerged as essential components for protecting IoMT networks from cyberattacks. This article presents a systematic review of IoMT-IDS research, analyzing 53 high-quality papers published between 2020 and 2025, identified through database searches spanning 2016–2025 across IEEE Xplore, Springer, ScienceDirect, and ACM Digital Library. We organize the literature through a comprehensive taxonomy spanning classical machine learning …

2026 Cyber-Resilient Health Care Workshop Report, Malcolm Schongalla, Sergey Bratus

Computer Science Technical Reports

The ISTS and the Dartmouth College Cybersecurity Cluster hosted the successful, inaugural Cyber-Resilient Health Care (CRHC) Workshop, March 5th & 6th, 2026. The event theme was "Innovation and Implementation," in response to the need to shift from reactive to proactive resiliency measures in the healthcare sector. Approximately 30 experts in clinical health care, cybersecurity, medical technology, policy, and innovation met to discuss solution-focused innovations addressing hard, cyber-related problems in health care. The agenda featured keynotes, an expert panel, innovation pitches, small group discussions, and a tabletop infrastructure disaster exercise. Participants gained insights into the obstacles and solutions involved in supporting …

The Security Of Llm-Generated Code, Christopher Brian Gonzalez Ayala

Student Theses

The rapid adoption of Large Language Models (LLMs) in software development has transformed coding practices by enabling automated code generation, completion, and optimization. Despite these advantages, concerns persist regarding the security and reliability of LLM-generated code. This study presents a comprehensive evaluation of both the functional correctness and security of code produced by three prominent LLMs as of early 2026. A total of 4,800 code snippets were generated using 100 security-focused programming prompts derived from the OWASP Top 10:2025, translated across eight natural languages and two phrasing styles (literal and natural developer-oriented prompts). To assess performance, a multi-stage experimental framework …

Adversarial Robustness Of Perceptual Hashing Systems: A Unified Security Evaluation Framework, Avijit Roy

Student Theses

Social network platforms, child safety organizations, and image provenance systems use perceptual hashing to identify known child sexual abuse material (CSAM), support content moderation and reverse image search, and verify image integrity. Perceptual hashing works by producing similar fingerprints for visually similar images, even after common transformations such as compression, resizing, or minor brightness changes. This useful similarity-preserving property also creates an adversarial attack surface, as attackers can use AI-assisted or conventional image manipulation techniques to move a hash across a matching threshold while maintaining visual similarity, often without access to specialized hardware.

The security failures produced by adversarial attacks …

Anonymity And Accountability In Secure Messaging, Erin Kenney

Dissertations

Encypted messaging has become more and more prevalent as time moves on, and its benefits in assuring privacy cannot be overstated, but it also brings along with it concerns on how to moderate platforms where all messages are hidden. Message Franking, followed by Traceback systems, addressed these concerns by allowing the sender of a message to be proven when reported, even for forwarded messages in the case of Traceback, however these systems damage the privacy guarantees that originally motivated encrypted messaging to begin with.

In practice, even without those concerns encrypted messaging alone is not enough to prevent the most …

Sound Detection Of Memory Leaks In Llvm Ir Programs Using Accumulation Analysis, Robert Blacha

Theses

Resource leaks occur when a limited resource such as memory is allocated by a program and needlessly held past the point of use. Leaks can lead to a degradation of services which can be specifically triggered with malicious behavior, for example abusing a memory leak in a program to cause a server to slow down and crash for a denial-of-service attack.

Prior work has demonstrated that accumulation analysis provides a sound detection of resource leaks with a working implementation for programs written in Java. While useful, current implementations are limited to programs written in Java, which has a garbage collector, …

Distributed File Carving, Brad J. Baudin

LSU Master's Theses

File carving is a fundamental technique in the digital forensics community, enabling analysts to recover deleted files from disk images without relying on filesystem metadata; however, as storage capacities continue to increase, modern file carving tools face significant scalability challenges, with carving time growing substantially alongside disk image size, particularly in the presence of file fragmentation. Fragmentation, a common behavior in modern filesystems, distributes file data across non-contiguous disk blocks to maximize space utilization, and in large disk images this distribution can span wide logical distances, increasing the search space and reducing carving efficiency, causing traditional approaches to struggle within …

Meeting The Moment With Ai-Employer Informed Education, Brent Terwilliger, John Faraca

Publications

As artificial intelligence transforms aviation, aerospace, and autonomy-related sectors, higher education must adapt to meet evolving workforce demands. This session shares emerging findings from a nationwide study led by Embry-Riddle Aeronautical University, focused on employer perceptions of AI adoption, responsible use, and workforce preparedness in domains including uncrewed systems, space systems, robotics, and advanced air mobility. Based on a structured survey and follow-up interviews, the presentation explores how organizations are using AI tools, from generative platforms to enterprise systems, and defining effective and inappropriate use in operational contexts. Participants will gain insight into critical concerns (e.g., data privacy, compliance, security, …

Security Assessment Of A Machine Learning Approach To Generate And Validate Digital Signatures, Juan Ortiz Couder

Doctoral Dissertations and Master's Theses

Cybersecurity has become a global concern as cyber-attacks have become more common, and the cost of the damage caused by them continues to increase. There are several approaches to improve the cyber security of systems such as Digital Signatures, hashing, watermarking, and encryption among others. Digital Signatures are a cryptographic technique used to verify the authenticity and integrity of digital messages or documents. Digital Signatures use a combination of hashing and public-private key encryption to verify the authenticity and integrity of videos, just as they are used for documents and messages. As a result of using a combination of other …