Cybersecurity Commons^™

Context-Switch Attacks: Understanding And Mitigating The Threat To Llm Applications, Sydney Holder, Bivin Sadler

SMU Data Science Review

Large Language Models (LLMs) are transforming conversational AI, yet their dependence on prompt-supplied context exposes them to context-switch attacks that covertly steer dialogue toward sensitive or malicious ends. A 70 one-sided conversation transcript evaluation set was constructed spanning various fraudulent scenarios. Each transcript embeds adversarial patterns drawn while preserving natural conversational flow. We introduce a hybrid defense that pairs a BERT-based semantic-drift detector (cosine-similarity threshold = 0.70) with a curated keyword and hack-phrase scanner to counter these threats. In aggregate, the system delivered 100 % recall, intercepting every simulated phishing or data-harvesting attempt. The keyword layer achieved perfect precision, generating …

Diversifying Cybersecurity: Evaluation Of An Internet Of Things (Iot)-Based Cybersecurity Training Course Designed To Bridge The Diversity Gap, Maureen Namukasa, Bhoomin B. Chauhan, Carlie Swords, Curtice Gough, Weronika Dymanus, Catherine Diresta, John Vitali, Vivek Sharma, T J. Oconnor, Meredith Carroll

Aeronautics Faculty Publications

This study aimed to evaluate the effectiveness of an eight-module Cybersecurity course at increasing the learning outcomes of middle and high school students with little to no experience, including underrepresented minorities (URMs) in Cybersecurity. Twice we administered and evaluated the Cybersecurity course, which included hands-on IoT-based activities, utilizing collaborative learning, scaffolding, and representation-based learning strategies. Using a quasi-experimental, within-subjects, repeated measures design, each participant experienced a pretest, the course, and a post-test to evaluate the impact on learners’ self-efficacy, interest, and knowledge. The results revealed that (1) at pre-test, female (p = .001) and in one course administration minority …

Dsa-Api: Data Standardization Automation Using Ai-Powered Apis, Andrew Asher Turner

Master's Theses

The common factor with current implementations of Artificial Intelligence (AI) is data. Companies are constantly looking for new ways to analyze data, but it comes in various formats: Text, Comma Separated Value (CVE), JavaScript Object Notation (JSON), Extensible Markup Language (XML), and Excel. How can AI be adapted to standardize formats for data analysis, integration, and digestion efficiently? Published research acknowledged that Machine Learning (ML) and AI can provide an automated method to speed up this process and limit the human decision-making error. With the advancement in AI, Application Programming Interfaces (APIs) prompt the idea that they can take in …

Selected Artificial Intelligence Provisions In U.S. Fiscal Year 2025 National Defense Authorization Act, Bert Chapman

Libraries Faculty and Staff Presentations

The 2025 Fiscal Year National Defense Authorization Act contains multiple provisions relating to artificial intelligence (AI). These congressionally mandated provisions direct various sections of the Department of Defense (DOD) and individual U.S. armed service branches to execute congressional intent for AI policymaking. Examples of such intent include identifying and planning DOD's AI workforce, demonstrating AI biotechnology applications for national security, improving the human usability of AI systems, and establishing an AI security center. This presentation will note that reports on these initiatives must be prepared for relevant congressional oversight committees, and, in many cases, are in many cases, publicly released …

Key-Based Authentication Scheme For Evtol Drones Using Chebyshev Chaotic Maps, Eduardo A. Hernandez Escobar

Master's Theses

The development of electric Vertical Take-Off and Landing (eVTOL) drones signifies a substantial advancement in urban air mobility, ready to transform transportation models in densely populated regions. These advanced drones, distinguished by their capacity to function in limited spaces and their minimized environmental impact, are set to transform individual, shipping, emergency services, and public safety activities. Nonetheless, like any transformational technology, the implementation of eVTOL systems presents many challenges, especially in the realm of cybersecurity. Adding many devices and entities to an eVTOL network increases the risk of privacy and security attacks. This paper proposes a key-based authentication scheme that …

Improving Image Quality In Electrical Capacitance Tomography Using Otsu Thresholding, Josiah Nombo

Tanzania Journal of Engineering and Technology (TJET)

Electrical Capacitance Tomography (ECT) is an imaging technique used in industrial process monitoring, particularly for monitoring and measuring the composition of multiphase flows. Despite its widespread application, the commonly used Linear Back Projection (LBP) algorithm often produces low-quality images due to its limited ability to handle high permittivity contrasts and nonlinearities. This study investigates the use of Otsu thresholding as a post-processing technique to enhance ECT image quality. By maximizing inter-class variance in the image histogram, Otsu thresholding improves contrast, clarity, and structural definition, enabling more effective segmentation of oil and gas components in multiphase flows. The proposed Otsu-based reconstruction …

Securing Biometric Data, Alyssa F. Carroll

Cybersecurity Undergraduate Research Showcase

Biometric data has been widely adopted across various sectors, including digital identity, artificial intelligence (AI), border control, digital wallets, and national identification systems. While biometric identifiers—such as fingerprints, retina scans, and facial recognition—offer reliable and convenient authentication, they also raise significant concerns regarding privacy and security. This paper examines how biometric data is stored, the vulnerabilities it faces, and the most effective methods for safeguarding it. By highlighting the critical importance of biometric data protection, this study reviews current research on approaches, strategies, and policies that enhance security while preserving the functionality and efficiency of biometric systems.

From Adversarial Attacks To Robust Classifiers - A Study In Social Media Spam Detection - Black Box & White Box, Jonathan Jose Penaloza Rumie

Undergraduate Theses

Adversarial attacks pose a significant threat to the reliability of machine learning-based spam detection systems in social media. This undergraduate thesis, "From Adversarial Attacks to Robust Classifiers: A Study in Social Media Spam Detection – Black Box & White Box," systematically examines the impact of both black-box and white-box adversarial attacks on a range of spam classifiers, including Logistic Regression, Decision Trees, Random Forests, K-Nearest Neighbors, Bagging, Gradient Boosting, and Support Vector Machines. Leveraging a novel dataset derived from Twitter spam messages and enhanced with adversarial perturbations such as synonym replacement and character-level modifications, this study evaluates classifier performance under …

Cybermapping Solutions: A Unified Approach In Us/Nato Military Applications And Development, Nicholas Macrino

Electrical & Computer Engineering Projects for D. Eng. Degree

[First paragraph] Cyber threats are evolving in complexity and frequency, posing significant challenges for cybersecurity professionals in identifying, categorizing, and responding to attacks in real time. Unlike traditional warfare, where battlefield awareness is based on fixed geographic warfare, cyber operations involve abstract attack vectors, non-linear threat escalation, and rapidly changing network conditions. Modern cyber threats, such as advanced persistent threats (APTs), polymorphic malware, and distributed denial-of-service (DDoS) attacks, require adaptive visualization techniques that provide real-time awareness and facilitate rapid decision-making. However, existing symbology standards, such as MIL-STD-2525D, were not designed to accommodate the dynamic nature of cyber warfare. The inability …

Enhancing Iot Security Using Lightweight Machine Learning Algorithms: A Comprehensive Approach Using Ensemble Learning, Feature Selection, And Federated Transfer Learning, Khawlah Harahsheh

Electrical & Computer Engineering Theses & Dissertations

The rapid expansion of the Internet of Things (IoT) has introduced significant security vulnerabilities due to the resource-constrained nature of IoT devices and their exposure to cyber threats. Traditional security solutions are often infeasible due to the high computational and storage demands they impose. This dissertation presents a lightweight, AI-driven security framework that enhances IoT network resilience by integrating feature selection, ensemble learning, and federated transfer learning while maintaining data privacy and minimizing computational overhead.

The proposed framework consists of three primary components: Feature Selection for Intrusion Detection, which optimizes performance by reducing redundant data and improving detection accuracy with …

Robust Spacecraft Autonomy For Deep Space Exploration In Special Euclidean Group Se(3), Matthew Wittal

Doctoral Dissertations and Master's Theses

Over the past half-century, humanity has gained extensive experience conducting manned spaceflight near Earth. Arguably, "near Earth" could even include the Moon — the most distant destination humans have reached. However, "near" in this work primarily refers low Earth orbit (LEO). One could argue that we have not truly left Earth since the Apollo, as spacecraft in some LEOs remain subject to atmospheric drag thus emphasizing their continued connection to Earth's immediate environment. Reflecting on this, it becomes clear that humanity has largely remained bound to Earth’s immediate vicinity since the Apollo missions reached the Moon. However, that is set …

Evaluating Educational Benefits Of A Custom Cyber Game: ‘Hvac Attack!’, Jillian S. Valente

Theses and Dissertations

Cyber competition and conflict remain an enduring concern for the Department of Defense (DoD). Positive control of cyberspace is crucial across the vast diversity of military operations and supporting activities. Military members play an important role in cyber prevention, detection, and remediation, but most receive relatively little training outside of the annual Cyber Awareness Challenge. Particular career fields within the DoD may benefit from specialized training in cybersecurity, in particular the civil engineering (CE) community supporting critical infrastructure protection. Prior research has suggested that game-based learning (GBL) can be beneficial for teaching cyber concepts.

Jamming-Tolerant Low-Rate Wireless Personal Area Network For Detection Sensor Networks, Michael A. Eddy

Theses and Dissertations

This research evaluates the impact of electronic warfare, particularly jamming, on an audio-based drone detection wireless sensor network (WSN) using Monte Carlo simulations. A six-node IEEE 802.15.4 network, with five edge nodes and a central sink, is tested against jamming probabilities ranging from 0-100% in 5% increments across 30 iterations per configuration. Results show that packet delivery ratio (PDR) degrades linearly at approximately 20% per jammed node, while detection performance often exceeds PDR. Even at 80% jamming, detection success rates remain above 57%, highlighting resilience despite network degradation. The study reveals that jamming effectiveness depends on node placement relative to …

Improving Rupture Status Prediction For Intracranial Aneurysms Using Wall Shear Stress Informatics, Jingfeng Jiang, Mostafa Rezaeitaleshmahalleh, Jinshan Tang, Joseph Gemmette, Aditya Pandey

Michigan Tech Publications

BACKGROUND: Wall shear stress (WSS) plays a crucial role in the natural history of intracranial aneurysms (IA). However, spatial variations among WSS have rarely been utilized to correlate with IAs' natural history. This study aims to establish the feasibility of using spatial patterns of WSS data to predict IAs' rupture status (i.e., ruptured versus unruptured). METHODS: "Patient-specific" computational fluid dynamics (CFD) simulations were performed for 112 IAs; each IA's rupture status was known from medical records. Recall that CFD-simulated hemodynamics data (wall shear stress and its derivatives) are located on unstructured meshes. Hence, we mapped WSS data from an unstructured …

Design And Implementation Of Secured Hybrid Gateway Node For Securing Iot - Enabled Distribution Automation, Ally Bitebo

Tanzania Journal of Engineering and Technology (TJET)

The integration of smart grid and Internet of Things (IoT) technologies plays a crucial role in enhancing the quality of services provided by traditional electrical grids. This combination has enabled the introduction of new services, such as demand response, automatic meter reading, and IoT-enabled Distribution Automation (IoT-DA), which incorporates sensors, actuators, intelligent electrical devices (IEDs), and information and communication technologies to monitor and control the grid. However, this integration also introduces network security risks, including Denial of Service (DoS) attacks, false data injection, and masquerading attacks, such as system node impersonation that can transmit incorrect readings, trigger false alarms, and …

Human Perception Of Ai Capabilities At Classifying Perturbed Roadway Signs, Katherine R. Garcia, Jing Chen, Yanru Xiao, Scott Mishler, Cong Wang, Bin Hu

Psychology Faculty Publications

Artificial Intelligence (AI) is crucial to numerous functions required for driving automation systems, including the computer vision techniques used to detect the roadway environment and make real-time decisions. However, the images used as inputs to the AI system may be maliciously perturbed, or manipulated, causing the AI system to make an incorrect classification. In this study, we examined humans’ perception of the AI’s computer vision capability of classifying various road sign images, including the original images, images with two different types of malicious attacks, and images that are scrambled randomly at the pixel level. Our results showed that participants rated …

Exploring Research And Tools In Ai Security: A Systematic Mapping Study, Sidhant Narula, Mohammad Ghasemigol, Javier Carnerero-Cano, Amanda Minnich, Emil Lupu, Daniel Takabi

School of Cybersecurity Faculty Publications

With the pervasive integration of artificial intelligence (AI) in various facets of modern technology, the importance of AI security has been thrust into the spotlight. The field is rapidly evolving, with new challenges and solutions emerging at a swift pace. However, the breadth and depth of AI security research have not been comprehensively mapped in recent times, presenting a crucial need for an extensive review and synthesis of existing literature. Given the increasing reliance on AI in critical domains such as healthcare, finance, and national security, ensuring the resilience and trustworthiness of these systems is imperative. This survey fulfills the …

Long-Term Traffic Prediction Using Deep Learning Long Short-Term Memory, Ange-Lionel Toba, Sameer Kulkarni, Wael Khallouli, Timothy Pennington

School of Cybersecurity Faculty Publications

Traffic conditions are a key factor in our society, contributing to quality of life and the economy, as well as access to professional, educational, and health resources. This emphasizes the need for a reliable road network to facilitate traffic fluidity across the nation and improve mobility. Reaching these characteristics demands good traffic volume prediction methods, not only in the short term but also in the long term, which helps design transportation strategies and road planning. However, most of the research has focused on short-term prediction, applied mostly to short-trip distances, while effective long-term forecasting, which has become a challenging issue …

Zero Trust Architecture As A Risk Countermeasure In Small-Medium Enterprises And Advanced Technology Systems, Ahmed M. Abdelmagid, Rafael Diaz

Engineering Management & Systems Engineering Faculty Publications

The growing sophistication of cyberattacks exposes small- and medium-sized businesses (SMBs) to a widening range of security risks. As these threats evolve in complexity, the need for advanced security measures becomes increasingly pressing. This necessitates a proactive approach to defending against potential cyber intrusions. Emerging technologies, such as blockchain, artificial intelligence, and Zero Trust security framework, offer crucial tools for strengthening the digital infrastructure of SMBs. The Zero Trust architecture (ZTA) holds significant promise as a critical strategy for protecting SMBs. While existing literature explores the implementation of ZTA in various business settings, discussions specifically addressing the financial, human resource, …

Security Enhancement In Uav Swarms: A Case Study Using Federated Learning And Shap Analysis, Sushmitha Halli Sudhakara, Lida Haghnegahdar

School of Cybersecurity Faculty Publications

As cyber-physical systems (CPSs) increasingly integrate physical and digital realms, securing critical infrastructure, such as the Port of Virginia, becomes paramount. Among CPSs, Unmanned Aerial Vehicles (UAVs) are vital for monitoring, communication, and supporting the command and control through remote reconnaissance and surveillance missions. These UAV applications often require coordination, planning, and runtime reconfiguration, traditionally managed by human decision-makers. However, this approach has limitations, as extensively documented in the literature. Artificial Intelligence (AI) has emerged as a pivotal tool to address these limitations, enhancing risk mitigation and informed decision-making. This research proposes a machine learning (ML) based security mechanism, leveraging …

Security Enhancement In Aav Swarms: A Case Study Using Federated Learning And Shap Analysis, Sushmitha Halli Sudhakara, Lida Haghnegahdar

School of Cybersecurity Faculty Publications

As cyber-physical systems (CPSs) increasingly integrate physical and digital realms, securing critical infrastructure, such as the Port of Virginia, becomes paramount. Among CPSs, Autonomous Aerial Vehicles (AAVs) are vital for monitoring, communication, and supporting the command and control through remote reconnaissance and surveillance missions. These AAV applications often require coordination, planning, and runtime reconfiguration, traditionally managed by human decision-makers. However, this approach has limitations, as extensively documented in the literature. Artificial Intelligence (AI) has emerged as a pivotal tool to address these limitations, enhancing risk mitigation and informed decision-making. This research proposes a machine learning (ML) based security mechanism, leveraging …

From Cyclones To Cybersecurity: A Call For Convergence In Risk And Crisis Communications Research, Ann Marie Reinhold, Ross J. Gore, Barry Ezell, Clemente I. Izurieta, Elizabeth A. Shanahan

VMASC Publications

Effective risk and crisis communication can improve health and safety and reduce harmful effects of hazards and disasters. A robust body of literature investigates mechanisms for improving risk and crisis communication. While effective risk and crisis communication strategies are equally desired across different hazard types (e.g., natural hazards, cyber security), the extent to which risk and crisis communication experts utilize the “lessons learned” from scientific domains outside their own is suspect. Therefore, we hypothesized that risk and crisis communication research is siloed according to academic disciplines at the detriment to the advancement of the field of risk communications research writ …

A Comprehensive Exploration Of 6g Wireless Communication Technologies, Md Nurul Absar Siddiky, Muhammad Enayetur Rahman, Md. Shahriar Uzzal, H. M. Dipu Kabir

Electrical & Computer Engineering Faculty Publications

As the telecommunications landscape braces for the post-5G era, this paper embarks on delineating the foundational pillars and pioneering visions that define the trajectory toward 6G wireless communication systems. Recognizing the insatiable demand for higher data rates, enhanced connectivity, and broader network coverage, we unravel the evolution from the existing 5G infrastructure to the nascent 6G framework, setting the stage for transformative advancements anticipated in the 2030s. Our discourse navigates through the intricate architecture of 6G, highlighting the paradigm shifts toward superconvergence, non-IP-based networking protocols, and information-centric networks, all underpinned by a robust 360-degree cybersecurity and privacy-by-engineering design. Delving into …

Safeguard Cyberspace In Ransomware Era: Risk Analysis & Cyber Insurance, Li Huang

Electronic Theses & Dissertations (2024 - present)

The increasing frequency and severity of ransomware attacks pose significant challenges for organizational cybersecurity. Fragmentation across disciplines in cyber defense has created practical gaps in the development of the necessary capabilities needed to address rapidly evolving cyber threats. This study explores the impact of ransomware attacks and the evolving role of cyber insurance as a proactive cybersecurity partner. Bridging the gap between actuarial science and cyber risk management, it proposes an interdisciplinary framework that quantifies the impact of ransomware and integrates cyber insurance into cybersecurity strategies.

The primary contribution of this study is methodology. We present a framework that remains …

A Governance-Centric Framework For Strengthening Healthcare Cybersecurity: A Systems Perspective, Sujatha Alla, Sai Gireesh Komaragiri, Teresa Duvall, Satluk Karahan, Nagesh Bheesetty, Vijay Kumar Chattu

Engineering Management & Systems Engineering Faculty Publications

Healthcare systems face unprecedented security and privacy challenges due to increasing digitization and interconnectedness. This paper provides a comprehensive analysis of these challenges by examining various cyberattacks, defensive mechanisms, and governance frameworks within modern healthcare infrastructure. The research systematically categorizes prevalent security threats, such as ransomware, insider threats, and data breaches, identifying vulnerabilities specific to healthcare systems. Furthermore, the study evaluates current defensive strategies, including encryption techniques, access control systems, and intrusion detection tools, assessing their effectiveness against complex cyber threats. A key focus is placed on governance structures and their role in cybersecurity resilience. The research explores how regulatory …

Dynamic Key-Based Privacy-Preserving Authentication Scheme For Internet Of Drones, Zain Chaudhary

Honors Theses

The Internet of Drones (IoD) proliferation has catalyzed transformative changes across various industries, from agriculture to urban management. However, expanding drone networks also presents significant security challenges concerning secure communication and authentication. This paper introduces a robust privacy-preserving key-based authentication scheme tailored explicitly for the IoD, utilizing a matrix key generated by Hierarchical Message Authentication Codes (HMAC) and the SHA-256 algorithm to address these vulnerabilities. Our system enhances security by ensuring each drone in the network can authenticate securely and reliably with a central unit, preventing unauthorized access and securing communications against common threats like eavesdropping and impersonation attacks. Our …

Protocol Transformations Across Osi Network Stack Layers For Attack, Evasion, And Defense, Nathan Tusing

All Dissertations

Network endpoints frequently contend with errors and deviations within protocols. Many factors account for these deviations including noise, tampering, and algorithm implementations. Intermediate nodes are expected to modify instantiated protocols and not guarantee correctness. This ability to modify traffic enables all sides of network security to alter security and performance properties of protocols, and we define this intermediary modification of an instantiated protocol as a transformation. Protocol transformations traverse layers of the OSI reference model and changes a protocol's time series byte sequence. Within this thesis, we show that this framework applies to multiple domains and protocols. Common examples of …

Security Vulnerabilities In Mobile Operating Systems Used In Iot Devices: An Examination Of Current Challenges And Countermeasures, Isain Cortes Jr.

Cybersecurity Undergraduate Research Showcase

No abstract provided.

Real Time Pii Scanning, John David

Electronic Theses and Dissertations

The increased amount of web applications and internet software solutions utilizing cloud frameworks has contributed to large data sets of system log messages being generated constantly. These messages may contain sensitive data, creating an additional security risk for the systems and contributing to the need for analysis of such large volumes of data in real time. Large commercial data monitoring systems can solve for these analysis requirements, but they can be costly. We present a solution to analyzing web application log data which ingests it, processes it and visualizes sensitive data found within in real time. Our solution utilizes an …

Assessment Of Web Security Vulnerabilities For Common Open Source Virtualization Software, Said Ally

Tanzania Journal of Engineering and Technology (TJET)

Open-source hypervisors have emerged as an integral technology for virtualizing server resources in cloud and data center computing. Hypervisor security efficiency is determined by virtual machine isolation, which is a de facto adoption factor in the selection process, as well as its ability to respond to web attacks. This paper assesses the security performance of Proxmox VE and XenServer for type 1 hypervisors, and Kernel Virtual Machine and Oracle Virtual Box for type 2 hypervisors. Security analysis was conducted using common exposures extracted from vulnerability databases and mapped against the OWASP 2013 and 2017 projects. For clarity, experiments were carried …