Cybersecurity Commons^™

Leveraging Convolutional Neural Networks For Through-The-Wall Radar Imaging: Challenges, Impacts, And Future Directions, Tumaini Edgar, Abdulla F. Ally, Abdi T. Abdalla

Tanzania Journal of Engineering and Technology (TJET)

Through-the-wall radar imaging (TWRI) is an essential technology for military and rescue applications; however, its performance in detecting and visualizing high-quality images of targets behind walls is significantly degraded by multipath reflections and signal attenuation. This paper reviews the current state of TWRI and its challenges, and explores the transformative potential of deep learning, particularly convolutional neural networks (CNNs), in addressing these challenges. Peer-reviewed articles published from 2018 to 2024 were analysed to examine CNN applications in addressing TWRI challenges. The analysis reveals that using CNNs, TWRI systems can be more effective by filtering wall distortions, reducing noise, lowering computational …

Ransomware As Organization: A Comparative Analysis Of Corporate And Criminal Structures In Conti, George Urling

Theses, Dissertations and Capstones

Cybercriminal groups continue to pose major threats to global cybersecurity. One of the most common types of cybercriminal groups are, “Ransomware-as-a-Service (RaaS)" groups, who create and sell ransomware. While research is conducted into the development of ransomware, there is limited reporting on the organizational structure and habits of RaaS groups. In 2022, prominent RaaS group Conti had their chat logs leaked, with the logs ranging from 2020 to 2022. This study seeks to provide a deeper understanding of RaaS group structures by utilizing the Conti leaked logs as a case study. The study, entitled “Ransomware as Organization: A Comparative Analysis …

Cybersecurity Center For Offshore Wind Energy (Final Project Round), Sachin Shetty

Center for Secure and Intelligent Critical Systems (CSICS) Publications

This project establishes a Cybersecurity Center for Offshore Wind Energy with the objective of designing and operating a cyber-physical testbed for wind energy farms (WEFs) that enables comprehensive cybersecurity research. The testbed incorporates a Supervisory Control and Data Acquisition (SCADA) system connected to turbine models via industrial-grade programmable logic controllers (PLCs) and remote terminal units (RTUs). It supports side-channel data acquisition, implementation and analysis of various cyberattack scenarios, and development of attack detection, mitigation, and best-practice guidance tailored to wind energy systems. During the project, the team expanded the number and fidelity of mathematical turbine models (MTMs), integrated these models …

Biosecure-Llm Framework: Protecting Llms From Cyberbiosecurity Threats And The Case For Independent Ai Safety Governance, Xavier-Lewis Palmer, Lucas Potter, Srdjan Lesaja, Sotirios Karathanasis, Mohammad Ghasemigol

Computer Science Faculty Publications

Large Language Models (LLMs) are becoming critical infrastructure in scientific, healthcare, and governmental contexts. As frontier AI laboratories increasingly partner with government agencies, a fundamental question arises: Who should control the safety and policy-enforcement layers that constrain model behavior? Current safety mechanisms (LLM guardrails) are typically designed for generic "harmlessness" and operate by detecting semantic patterns and refusing requests. However, they are inadequate governance instruments because they cannot implement auditable, domain-specific controls tied to external regulatory policy objects (e.g., control lists or rules governing personally identifying information). Even a perfectly aligned model is not able to express institution-specific policy without …

An Explainable Cs-Mitigation Triangular (Ecsmt) Framework To Secure Graph Neural Networks, Sabah Ettahri, Sergio Pallas Enguita, Chung-Hao Chen, Wen-Chao Yang

Electrical & Computer Engineering Faculty Publications

This research addresses cyber risk by defending against backdoor attacks on Graph Neural Networks (GNNs). We propose the Explainable Complex System-Mitigation Triangular (ECSMT) Framework, which integrates Robust Training, Graph Regularization, and Data Sanitization into a lightweight, hardware-efficient defense layer. To evaluate structural generalizability, we conducted empirical evaluations across three distinct benchmark domains (AIDS, MUTAG, and PROTEINS) using a Graph Isomorphism Network (GIN) backbone. Under a baseline 5% backdoor subgraph trigger injection ratio, ECSMT achieves excellent utility retention, securing a Clean Accuracy (CA) of 97.33% (±0.62%) while reducing the Attack Success Rate (ASR) from 97.00% down to 69.45% on the primary …

Low-Level Memory Attacks On Edge Assisted Robotic Applications, William Arnold

Master of Engineering Theses

This thesis investigates how low-level memory faults can undermine edge-assisted robotic systems that rely on memory optimization. As robots are utilized in real world applications, the ability to operate safely and successfully in mission critical deployment becomes important. To help achieve these goals, developers are increasingly starting to place computation nodes at network edges to meet latency and reliability requirements. Edge nodes, however, are resource-constrained and resources conservation techniques such as Kernel Same-page Merging (KSM) are enabled to deduplicate identical pages across processes or virtual machines. This thesis shows that this optimization technique quietly widens the attack surface and can …

Improving Image Quality In Electrical Capacitance Tomography Using Otsu Thresholding, Josiah Nombo

Tanzania Journal of Engineering and Technology (TJET)

Electrical Capacitance Tomography (ECT) is an imaging technique used in industrial process monitoring, particularly for monitoring and measuring the composition of multiphase flows. Despite its widespread application, the commonly used Linear Back Projection (LBP) algorithm often produces low-quality images due to its limited ability to handle high permittivity contrasts and nonlinearities. This study investigates the use of Otsu thresholding as a post-processing technique to enhance ECT image quality. By maximizing inter-class variance in the image histogram, Otsu thresholding improves contrast, clarity, and structural definition, enabling more effective segmentation of oil and gas components in multiphase flows. The proposed Otsu-based reconstruction …

Securing Biometric Data, Alyssa F. Carroll

Cybersecurity Undergraduate Research Showcase

Biometric data has been widely adopted across various sectors, including digital identity, artificial intelligence (AI), border control, digital wallets, and national identification systems. While biometric identifiers—such as fingerprints, retina scans, and facial recognition—offer reliable and convenient authentication, they also raise significant concerns regarding privacy and security. This paper examines how biometric data is stored, the vulnerabilities it faces, and the most effective methods for safeguarding it. By highlighting the critical importance of biometric data protection, this study reviews current research on approaches, strategies, and policies that enhance security while preserving the functionality and efficiency of biometric systems.

From Adversarial Attacks To Robust Classifiers - A Study In Social Media Spam Detection - Black Box & White Box, Jonathan Jose Penaloza Rumie

Undergraduate Theses

Adversarial attacks pose a significant threat to the reliability of machine learning-based spam detection systems in social media. This undergraduate thesis, "From Adversarial Attacks to Robust Classifiers: A Study in Social Media Spam Detection – Black Box & White Box," systematically examines the impact of both black-box and white-box adversarial attacks on a range of spam classifiers, including Logistic Regression, Decision Trees, Random Forests, K-Nearest Neighbors, Bagging, Gradient Boosting, and Support Vector Machines. Leveraging a novel dataset derived from Twitter spam messages and enhanced with adversarial perturbations such as synonym replacement and character-level modifications, this study evaluates classifier performance under …

Enhancing Iot Security Using Lightweight Machine Learning Algorithms: A Comprehensive Approach Using Ensemble Learning, Feature Selection, And Federated Transfer Learning, Khawlah Harahsheh

Electrical & Computer Engineering Theses & Dissertations

The rapid expansion of the Internet of Things (IoT) has introduced significant security vulnerabilities due to the resource-constrained nature of IoT devices and their exposure to cyber threats. Traditional security solutions are often infeasible due to the high computational and storage demands they impose. This dissertation presents a lightweight, AI-driven security framework that enhances IoT network resilience by integrating feature selection, ensemble learning, and federated transfer learning while maintaining data privacy and minimizing computational overhead.

The proposed framework consists of three primary components: Feature Selection for Intrusion Detection, which optimizes performance by reducing redundant data and improving detection accuracy with …

Design And Implementation Of Secured Hybrid Gateway Node For Securing Iot - Enabled Distribution Automation, Ally Bitebo

Tanzania Journal of Engineering and Technology (TJET)

The integration of smart grid and Internet of Things (IoT) technologies plays a crucial role in enhancing the quality of services provided by traditional electrical grids. This combination has enabled the introduction of new services, such as demand response, automatic meter reading, and IoT-enabled Distribution Automation (IoT-DA), which incorporates sensors, actuators, intelligent electrical devices (IEDs), and information and communication technologies to monitor and control the grid. However, this integration also introduces network security risks, including Denial of Service (DoS) attacks, false data injection, and masquerading attacks, such as system node impersonation that can transmit incorrect readings, trigger false alarms, and …

A Comprehensive Exploration Of 6g Wireless Communication Technologies, Md Nurul Absar Siddiky, Muhammad Enayetur Rahman, Md. Shahriar Uzzal, H. M. Dipu Kabir

Electrical & Computer Engineering Faculty Publications

As the telecommunications landscape braces for the post-5G era, this paper embarks on delineating the foundational pillars and pioneering visions that define the trajectory toward 6G wireless communication systems. Recognizing the insatiable demand for higher data rates, enhanced connectivity, and broader network coverage, we unravel the evolution from the existing 5G infrastructure to the nascent 6G framework, setting the stage for transformative advancements anticipated in the 2030s. Our discourse navigates through the intricate architecture of 6G, highlighting the paradigm shifts toward superconvergence, non-IP-based networking protocols, and information-centric networks, all underpinned by a robust 360-degree cybersecurity and privacy-by-engineering design. Delving into …

Assessment Of Web Security Vulnerabilities For Common Open Source Virtualization Software, Said Ally

Tanzania Journal of Engineering and Technology (TJET)

Open-source hypervisors have emerged as an integral technology for virtualizing server resources in cloud and data center computing. Hypervisor security efficiency is determined by virtual machine isolation, which is a de facto adoption factor in the selection process, as well as its ability to respond to web attacks. This paper assesses the security performance of Proxmox VE and XenServer for type 1 hypervisors, and Kernel Virtual Machine and Oracle Virtual Box for type 2 hypervisors. Security analysis was conducted using common exposures extracted from vulnerability databases and mapped against the OWASP 2013 and 2017 projects. For clarity, experiments were carried …

Investigations Of Cell Tower Antennas Parameters On Reduction Of Radio Frequency Radiation Levels From Radio Base Stations, Florence U. Rashidi

Tanzania Journal of Engineering and Technology (TJET)

The widespread deployment of mobile cellular base stations in populated areas has raised public health concerns due to increased exposure to radio frequency (RF) radiation emissions. Exposure to high levels of RF radiation can have potential thermal and non-thermal biological effects. Optimizing the configuration of cell tower antenna parameters is crucial for mitigating these radiation levels. This study therefore aims at systematically investigating the influence of different cell tower antenna parameters on reducing the RF radiation levels from mobile base stations. Field measurements were conducted at two cell sites shared by multiple mobile operators. Electric field strengths were measured at …

Evaluation Of Business-Driven Reference Architecture For Big Data Analytics Implementation By Public Sector Organizations In Resource-Constrained Setting: A Case Study Of Uganda, Matendo Didas

Tanzania Journal of Engineering and Technology (TJET)

Big Data Analytics (BDA) is a new area at the nexus of agenda, public sector organizations, and government business. It may satisfy the growing need for trustworthy, cost-effective services in the public sector for better, more informed decision-making processes. BDA has been proposed on the planning schedules of several public sector organizations and the government. Therefore, from the previous work, using Uganda as a case study, specifically the Uganda Bureau of Statistics (UBOS), Ministry of Health (MoH), and Ministry of Education and Sports (MoES), this study aims to evaluate a designed Business-Driven Reference Architecture for Big Data Analytics Implementation (BRABDAI) …

Data Communication Over Power-Lines: A Review On Technical, And Applications Challenges, Abdi Abdalla

Tanzania Journal of Engineering and Technology (TJET)

This paper presents a review study on the data communication over power-lines, commonly referred to as power-line carrier, power-line communication (PLC), mains communications, or power-line digital subscriber line (PDSL). This study examines the technical and application advantages and challenges associated with adopting PLC as a preferred alternative technology for wideband or broadband data communication. The broader coverage area of the PLC network gives it a distinct advantage over other communication network technologies. Additionally, implementing a communication system using the existing power-line network is more cost-effective and less time-consuming compared to constructing a new network from scratch. However, the primary challenge …

Evaluation Of Cybersecurity In Remote Working Settings For Mobile Network Operators, Victoria Mahabi

Tanzania Journal of Engineering and Technology (TJET)

Cybersecurity has increasingly been a primary concern to people as technology advances and allows them to work remotely. This study thus evaluated the cybersecurity posture for organisations that have opted for remote working culture, whereas emerging cyber threats, practices to combat them, and appropriate guidelines for managing cyber threats were discussed. The study used a descriptive design with a quantitative approach from 118 information technology personnel working for Tanzania's three major mobile network operators (MNOs). SPSS analysed the collected data. The study revealed that predominant cyber-threats affecting MNOs in remote working include human errors, phishing attacks, malicious domains, denial of …

Machine Learning Based Intrusion Detection Framework For Can Bus Vulnerabilities In Modern Vehicles, Obinna C. Agbo

Graduate Theses, Dissertations, and Problem Reports (ETD)

The Controller Area Network (CAN) bus is a crucial communication backbone in modern vehicles, connecting various Electronic Control Units (ECUs). However, inherent design weaknesses such as the lack of encryption and authentication make CAN networks vulnerable to cyber-attacks, including spoofing, Denial of Service (DoS), and fuzzing attacks. This thesis thoroughly evaluates these vulnerabilities and the limitations of existing security frameworks like Message Authentication Codes (MACs) and encryption, advocating for the adoption of Intrusion Detection Systems (IDS) as a more practical solution for CAN bus security. The proposed IDS leverages advanced machine learning techniques to accurately detect intrusions, even under complex …

An Enhanced Real-Time Intrusion Detection Framework Using Federated Transfer Learning In Large-Scale Iot Networks, Khawlah Harahsheh, Malek Alzaqebah, Chung-Hao Chen

Electrical & Computer Engineering Faculty Publications

The exponential growth of Internet of Things (IoT) devices has introduced critical security challenges, particularly in scalability, privacy, and resource constraints. Traditional centralized intrusion detection systems (IDS) struggle to address these issues effectively. To overcome these limitations, this study proposes a novel Federated Transfer Learning (FTL)-based intrusion detection framework tailored for large-scale IoT networks. By integrating Federated Learning (FL) with Transfer Learning (TL), the framework enhances detection capabilities while ensuring data privacy and reducing communication overhead. The hybrid model incorporates convolutional neural networks (CNNs), bidirectional gated recurrent units (BiGRUs), attention mechanisms, and ensemble learning. To address the class imbalance, Synthetic …

Machine Learning Approach For Classifying Power Outage In Secondary Electric Distribution Network, Stephan Mgaya, Hellen Maziku

Tanzania Journal of Engineering and Technology (TJET)

Power outage is the problem that hinders social and economic development especially for developing countries like Tanzania. Frequent power outages damage electric equipment, and negatively affect the industrial production process. Power outages cannot be completely eradicated due to uncontrolled cause like natural calamities but technical challenges can be managed and hence reducing power outages. The existing manual methods used to locate power outage like customer calls is inefficient and time consuming. On the other hand, modern method like the Advanced Metering Infrastructure (AMI) still faces a challenge in effectively classifying power line outage due to the nature of imbalanced datasets. …

Big Data Analytics Framework For Effective Higher Education Institutions, George Matto

Tanzania Journal of Engineering and Technology (TJET)

There has been an increased dependency on Information and Communication Technologies (ICTs) in undertaking various activities in Higher Education Institutions (HEIs) ecosystems. Because of that, huge volumes of data have increasingly been generated. There have been, for instance, considerable amounts of data generated through electronic platforms involved in students’ admission and registration process, students’ academic records management, teaching and learning data, curriculum related data, and several other administrative data. Analysis of data generated from these platforms stands to give students, lecturers, HEIs Management, policy makers and implementers, and other stakeholders useful insights that would help in improving HEIs’ effectiveness. Unfortunately, …

An Iot Based Worker Safety Helmet Using Cloud Computing Technology, Yuthriya Iddi Khamis, Mahmoud Alawi, Waheed Muhammad Sanya

Tanzania Journal of Engineering and Technology (TJET)

Miner safety and security is a major challenge around the world due to the exposure to toxic gases that are frequently released in underground mines. Miners' health is adversely affected primarily by toxic gases, which endanger the workers' lives. Furthermore, human sensory abilities do not detect these dangerous gases. As a result, this paper proposes a safety monitoring system that includes a temperature sensor, humidity sensor, and gas sensors to detect harmful gases and alert miners to those harmful gases using the smart helmet they wear. These gases are transmitted to the control station via the cloud using Internet of …

Real-Time Data Analytics For Monitoring Electricity Consumption Using Iot Technology, Waheed Muhammad Sanya, Gaurav Bajpai, Omar Haji Kombo, Evariste Twahirwa

Tanzania Journal of Engineering and Technology (TJET)

Rising electricity bills as a result of climate variability and new home electrical and electronic appliances are becoming a major source of concern for most end users. Consumers are typically unaware of their household electricity consumption patterns and the costs associated with them, making proper planning and budgeting difficult. Monitoring and controlling energy consumption on appliances can reduce energy costs for end-users. The Internet of Things (IoT) has the potential to provide remote monitoring and control of devices via automated monitoring and control. In this study, we propose an IoT-enabled system for monitoring and controlling energy consumption in homes to …

Implementation Of Digital Transformation In The Technical Higher Education Institutions In Tanzania, Charles Raphael

Tanzania Journal of Engineering and Technology (TJET)

Digital transformation has been prioritized recently in this era of fourth industrial revolution by various organizations for maintaining strong competitive advantage, especially in the fourth industrial revolution. The higher education institutions must likewise adopt and implement digital transformation to enrich their students with the knowledge, experience and the skills they need for a very different future. Technical higher education institutions are inevitable in the given transformation. However, very little is known regarding adoption of digital transformation in the given institutions. This study therefore examined the level of adoption of digital services in the technical higher education institutions in Tanzania. It …

Cyber Security Challenges, Its Emerging Trends On Latest Information And Communication Technology And Cyber Crime In Mobile Money Transaction Services, Hakeem J. Pallangyo

Tanzania Journal of Engineering and Technology (TJET)

This paper investigates the challenges emerging trends on latest Information and Communication Technology and cybercrime in mobile money transaction services in Tanzania. The objective of this is to evaluate the challenges associated with this rapid growth in ICT and to determine factors influencing Cybersecurity readiness and Cybercrimes in mobile money transaction services. Cyber Security plays a significant role in the field of Information and Communication Technology especially on mobile money transaction services. The study recognizes the provision of mobile money services by both telecommunication companies and local banks, the fact is that whenever we think about the cyber security, the …

Digital Skills And Self-Employment Among Graduates Of Technical Higher Education Institutions In Tanzania, Charles Raphael

Tanzania Journal of Engineering and Technology (TJET)

Digital skills are the driving forces for innovative, inclusive and sustainable growth through innovations and digitalization which in turn stimulate job creation, alleviate poverty, reducing inequality, facilitating the delivery of goods and services. However, large number of graduates is shown to be weak in digital skills in the industry hence affect their employability including self-employment. Recently, the Technical Higher Education Institutions (THEIs) took some initiatives to instill the digital skills to their respective students. This study therefore assessed the level of competence of digital skills among graduates following the initiatives taken by the THEIs and their influence on self-employment. It …

Real-Time Complex Hand Gestures Recognition Based On Multi- Dimensional Features, Isack Bulugu

Tanzania Journal of Engineering and Technology (TJET)

Gesture recognition is broadly utilized within the field of sensing. There are basically three gesture recognition methods based on computer vision, depth sensor and motion sensor. Motion sensor-based gesture recognition has few input data, fast speed, and direct access to three- dimensional information of the hand. The advantages of traditional motion sensor-based gesture recognition have gradually become a current research hotspot. The essence of traditional motion sensor-based gesture recognition is a pattern recognition problem, and its accuracy depends heavily on the feature dataset extracted from prior experience. Unlike traditional pattern recognition methods, deep learning can be used to a large …

Complete Neighbourhood Search Heuristic Algorithm For Portfolio Optimization, Collether John

Tanzania Journal of Engineering and Technology (TJET)

In portfolio optimization, the fundamental goal of an investor is to optimally allocate investments between different assets. Mean-variance optimization methods make unrealistic assumptions to solve the problem of optimal allocation. On the other hand, when realistic constraints like holding size and cardinality are introduced it leads to optimal asset allocation which differ from the mean variance optimization. The resulting optimization problem become quite complex as it exhibits multiple local extrema and discontinuities. Heuristic algorithms work well for the complex problem. Therefore, a heuristic algorithm is developed which is based on hill climbing complete (HC-C). It is utilized to solve the …

Socio-Technical Perspective For Electronic Tax Information System In Tanzania, Lucas Ngowi, Ellen Kalinga

Tanzania Journal of Engineering and Technology (TJET)

Socio-technical systems theory has rarely been used by system architects in setting up computing systems. However, the role of socio-technical concepts in computing, which is becoming social in nature, has made the concepts more relevant and commercial. Tax information systems are examples of such systems because they are influenced by external variables such as the political environment, technological trends, and social environment, introducing complexity in their deployment and determining the type of e-services and their delivery to a diverse group of people. It was observed that in Tanzania there is resistance, reluctance and minimal use of electronic tax system because …

Integrated Mobile And Web-Based Application For Enhancing Delivery Of Hiv/Aids Healthcare Information In Tanzania, Ibrahim Mwammenywa

Tanzania Journal of Engineering and Technology (TJET)

This study aims to develop an integrated e-health platform for enhancing delivery of HIV/AIDS healthcare information in Tanzania, which consists of a mobile application and a web-based system. The study is based on the system's functional and non-functional requirements for an e-health system for delivery of HIV/AIDS healthcare information. The Rapid Application Development (RAD) model was adopted during the system development. The system requirements were modelled into Data Flow Diagram (DFD) in order to obtain the clear flow of the HIV/AIDS healthcare information between the clients and HIV/AIDS healthcare practitioners. With the use of different software development tools and environment …