Cybersecurity Commons^™

Investigating The Security Vulnerabilities Of Ip Cameras: Classifications And Trends From Public Cve Data, Sam Oliver

Cybersecurity Undergraduate Research Showcase

Internet of Things (IoT) devices are increasingly targeted by cyber attacks due to weak authentication, insecure communication protocols, outdated firmware, and many other vulnerabilities. Internet Protocol (IP) cameras, a subset of these IoT devices, are particularly vulnerable and often transmit sensitive information. This paper analyzes vulnerability data from the National Vulnerability Database (NVD) to classify security vulnerabilities affecting IP cameras. Using this dataset, the paper examines the types and frequencies of these vulnerabilities, including authentication bypass, web interface exploits, and default and weak credentials. We additionally examine trends over time and across categories. This research aims to identify the primary …

Complex System Governance And Cyber Operations, Willie Gernard Mccallister

Engineering Management & Systems Engineering Theses & Dissertations

This dissertation examines the potential integration of Complex System Governance (CSG) within cybersecurity, emphasizing the development of a reference model for Cybersecurity Infrastructures. Traditional strategies for securing digital environments have struggled to address the intricate and dynamic layers inherent in modern cybersecurity systems. The purpose of this research is to explore the applicability of CSG as a framework to assess cybersecurity infrastructure using a case study research design. The research addresses two key questions: (1) How can the CSG reference model be adapted to explore cybersecurity infrastructure? (2) What results from CSG based exploration of cybersecurity infrastructure through a case …

"Exploring The Training Data Landscape For Ai Based Threathunting For Protecting Intellectual Property", Manzi Siibo, Christopher Kreider

Cybersecurity Undergraduate Research Showcase

This study provides a comprehensive evaluation of the effectiveness that would result in the integration of AI into traditional threat hunting systems. To do so, 10-15 scholarly articles and data sets were evaluated to see the results of AI and machine learning threat hunting versus traditional systems. With so many proven benefits of this integration, this paper also explores how it impacts the protection of Intellectual property which is some of the most important forms of information that threat hunting systems aim to protect.

Fids: Accelerating Network Intrusion Detection Through Strategic Feature Selection, James Elmore

Cybersecurity Undergraduate Research Showcase

Network intrusion detection systems (IDS) typically analyze complete network flows to identify malicious traffic, requiring flows to conclude before classification. This approach creates detection delays for attacks like Slowloris that intentionally keep connections open for extended periods of time. This paper introduces a novel approach that classifies network traffic using only features available from the first few packets of a flow, enabling faster detection while maintaining high accuracy. We evaluate three random forest models on the CICIDS2017 dataset using expanding sets of features: the first-packet model trained on on features available from the first backward packet, the few-packet model which …

The Evolution Of Russian And Chinese Disinformation Tactics And The Threat They Pose To The U.S. Cybersecurity, Jehovani Sese

Cybersecurity Undergraduate Research Showcase

This paper aims to discuss how disinformation has become the most powerful tool used against the United State by foreign operatives. Of these foreign operatives, Russia and China have shown the ability to use advanced tactics to truly affect the United States security. Often these tools came in the form of state-sponsored media, influence campaigns and fake online identities. This literature review explores the evolution of Russian and Chinese disinformation tactics, examining how these approaches have changed over time and become more sophisticated. This paper will highlight major campaigns which use tools such as bot networks, and social media manipulation. …

Shaped Adversarial Patches And The Ability They Hold, Nathan Hallberg

Cybersecurity Undergraduate Research Showcase

In more recent years the development of computer vision has advanced to be more comprehensive than in the past, with newer applications ranging from autonomous vehicles to security systems. The main application I will be talking about throughout this paper is an object detection algorithm called YOLO (You only look once), this algorithm is particularly significant due to their real-time performance of being able to identify and localize objects within an image in quick timing. However, the strength of these computer vision models is increasingly challenged by adversarial attacks, which manipulate the computer's vision to block a certain part of …

Elder Fraud Metrics And Preventative Measures Of Chesapeake, Virginia, Joey J. Whitmore Jr.

Cybersecurity Undergraduate Research Showcase

Geriatric crime continues to escalate in the digital era, where older individuals are disproportionately being targeted because of their low digital literacy and high susceptibility to online frauds. In this paper, we examine the breadth of elder fraud in Chesapeake, Virginia using FBI Internet Crime Complaint Center (IC3) data and state-level cybersecurity initiatives and survey responses. Older adults aged 60 and up have reported losses of over $3.4 billion in 2023 alone, underscoring the importance of proactive measures. It assesses the public awareness from traditional and AI-based perspectives revealing significant gaps in digital safety literacy and fraud reporting mechanism among …

Leveraging Benford’S Law And Machine Learning For Financial Fraud Detection, Benjamin R. Fu

Cybersecurity Undergraduate Research Showcase

Financial fraud, particularly credit card fraud, continues to pose substantial challenges to financial institutions due to its increasing frequency and impact on consumer trust. While traditional rule-based methods have provided foundational defenses, their limitations in scalability and adaptability have accelerated the adoption of machine learning (ML) techniques. Concurrently, Benford’s Law—a statistical principle often used in forensic accounting—has demonstrated efficacy in detecting anomalies within naturally occurring numerical datasets. This study explores a hybrid fraud detection approach that integrates Benford’s Law with supervised machine learning algorithms, including Logistic Regression, Random Forest, and k-Nearest Neighbors. Using the publicly available European credit card fraud …

Phishing Attacks And Prevention, Ruth Johnson

Cybersecurity Undergraduate Research Showcase

Phishing attacks have been the number one leading cause of identity theft and financial theft since 1990. The internet is one of the leading places where individuals’ identity is stolen. Many businesses and government agencies have been at risk of cyber phishing attacks from foreign countries. Attacks on Several U.S. federal government agencies have been hit in a global cyberattack by Russian cybercriminals that exploit a vulnerability in widely used software, according to a top us cybersecurity agency (Lyngaas, Government hit cyber-attacks, 2023).

Phishing attacks are cybercrimes where one or many individuals steal sensitive information like passwords, credit card information, …

How Can We Improve Our Security Measures To Safeguard Against Cyber Threats?, Mattea Trotter-Hicks

Cybersecurity Undergraduate Research Showcase

Many people face the issue of having their information stolen without their knowledge of what is happening. I understand that some people don’t pay attention to everything when it comes to making sure their information is being secured properly. There must be set stages for those who don’t know technology as well and will need help with knowing what to do. There are many stories of people going through issues with getting hacked or scammed out of their money or important information. We are going to dive into finding ways to fix the outcome of others knowing what to do …

Securing Biometric Data, Alyssa F. Carroll

Cybersecurity Undergraduate Research Showcase

Biometric data has been widely adopted across various sectors, including digital identity, artificial intelligence (AI), border control, digital wallets, and national identification systems. While biometric identifiers—such as fingerprints, retina scans, and facial recognition—offer reliable and convenient authentication, they also raise significant concerns regarding privacy and security. This paper examines how biometric data is stored, the vulnerabilities it faces, and the most effective methods for safeguarding it. By highlighting the critical importance of biometric data protection, this study reviews current research on approaches, strategies, and policies that enhance security while preserving the functionality and efficiency of biometric systems.

48 - Improving Worship Experience: A Secure Application For Generating Worship Questions Using Ai, Hind Aldabagh, Rhys Ferris

Undergraduate Research Symposium

Improving worship Experience: A Secure application for generating worship questions using AI

Rhys Ferris

Under the direction of Hind Aldabagh, School of Cybersecurity

Generating discussion questions for family worship time during the week based on sermon notes presents an innovative and helpful tool to assist pastors in developing worship questions. Instead of using ChatGPT, hosting a small AI model with Mistral provides an alternative solution that better suits our project.

Using prompt engineering, a custom prompt was created within the statement of faith to guide the AI in reading the text file of the sermon notes. The front end consists …

47 - Enhancing Patient Experience: A Secure Self-Service Kiosk For Prescription Status In Pharmacies, Raneem Alarian

Undergraduate Research Symposium

Creating secure and dependable pharmacy kiosk systems is essential for improving both patient satisfaction and the overall efficiency of pharmacy operations. Patients often experience frustration due to long wait times at the pharmacy counter, especially when prescriptions are not ready. As a licensed pharmacy technician, I have witnessed this issue firsthand, which led me to develop a software solution developed to improve pharmacy workflow. This project focuses on the design and execution of a client-server application for a self-service pharmacy kiosk, enabling patients to securely check the status of their prescriptions before they reach the counter. Developed using Visual Studio …

Cybermapping Solutions: A Unified Approach In Us/Nato Military Applications And Development, Nicholas Macrino

Electrical & Computer Engineering Projects for D. Eng. Degree

[First paragraph] Cyber threats are evolving in complexity and frequency, posing significant challenges for cybersecurity professionals in identifying, categorizing, and responding to attacks in real time. Unlike traditional warfare, where battlefield awareness is based on fixed geographic warfare, cyber operations involve abstract attack vectors, non-linear threat escalation, and rapidly changing network conditions. Modern cyber threats, such as advanced persistent threats (APTs), polymorphic malware, and distributed denial-of-service (DDoS) attacks, require adaptive visualization techniques that provide real-time awareness and facilitate rapid decision-making. However, existing symbology standards, such as MIL-STD-2525D, were not designed to accommodate the dynamic nature of cyber warfare. The inability …

Enhancing Iot Security Using Lightweight Machine Learning Algorithms: A Comprehensive Approach Using Ensemble Learning, Feature Selection, And Federated Transfer Learning, Khawlah Harahsheh

Electrical & Computer Engineering Theses & Dissertations

The rapid expansion of the Internet of Things (IoT) has introduced significant security vulnerabilities due to the resource-constrained nature of IoT devices and their exposure to cyber threats. Traditional security solutions are often infeasible due to the high computational and storage demands they impose. This dissertation presents a lightweight, AI-driven security framework that enhances IoT network resilience by integrating feature selection, ensemble learning, and federated transfer learning while maintaining data privacy and minimizing computational overhead.

The proposed framework consists of three primary components: Feature Selection for Intrusion Detection, which optimizes performance by reducing redundant data and improving detection accuracy with …

Weapons Of Mass Disruption: How Small States Use Cyber To Resist Larger Powers, Russell Alexander Korb

Graduate Program in International Studies Theses & Dissertations

This paper examines the ways in which small states can engage larger actors using cyber- attacks. Since the end of both World Wars, small states have increased in both numbers and relevance, with strong international institutions and norms against military aggression allowing small states to gain legitimacy by the very act of participating in the international system. However, although small states can now do more than simply choose a larger, stronger benefactor to ward off their enemies, they still cannot defy larger powers outright due to the still- dramatic difference in capabilities between them. Those small states interested in confronting …

Leveraging Artificial Intelligence To Strengthen Human Resilience Against Phishing Attacks, Muhammad Mavins

Cybersecurity Undergraduate Research Showcase

Phishing attacks are a major cybersecurity threat, tricking people with fake emails, scam websites, and social engineering tactics. As these attacks become more advanced, traditional security measures are no longer enough to stop them. This paper looks at how Artificial Intelligence (AI) can help detect and prevent phishing while also making people more aware of these threats. Using machine learning (ML), natural language processing (NLP), and behavioral analysis, AI can examine email content, sender behavior, and metadata to spot phishing attempts. AI-powered cybersecurity training can also teach people to recognize and respond to phishing by using personalized phishing tests and …

Maritime Industry Cybersecurity Threats In 2025: Advanced Persistent Threats (Apts), Hacktivism And Vulnerabilities, Minodora Badea, Olga Bucovetchi, Adrian V. Gheorghe, Mihaela Hnatiuc, Gabriel Raicu

Engineering Management & Systems Engineering Faculty Publications

Background: The maritime industry, vital for global trade, faces escalating cyber threats in 2025. Critical port infrastructures are increasingly vulnerable due to rapid digitalization and the integration of IT and operational technology (OT) systems. Methods: Using 112 incidents from the Maritime Cyber Attack Database (MCAD, 2020-2025), we developed a novel quantitative risk assessment model based on a Threat-Vulnerability-Impact (T-V-I) framework, calibrated with MITRE ATT&CK techniques and validated against historical incidents. Results: Our analysis reveals a 150% rise in incidents, with OT compromise identified as the paramount threat (98/100 risk score). Ports in Poland and Taiwan face the …

Understanding Pii Leakage In Large Language Models: A Systematic Survey, Shuai Cheng, Zhao Li, Shu Meng, Mengxia Ren, Haitao Xu, Shuai Hao, Chuan Yue, Fang Zhang

Computer Science Faculty Publications

Large Language Models (LLMs) have demonstrated exceptional success across a variety of tasks, particularly in natural language processing, leading to their growing integration into numerous facets of daily life. However, this widespread deployment has raised substantial privacy concerns, especially regarding personally identifiable information (PII), which can be directly associated with specific individuals. The leakage of such information presents significant real-world privacy threats. In this paper, we conduct a systematic investigation into existing research on PII leakage in LLMs, encompassing commonly utilized PII datasets, evaluation metrics, and current studies on both PII leakage attacks and defensive strategies. Finally, we identify unresolved …

Privshap: A Finer-Granularity Network Linearization Method For Private Inference, Xiangrui Xu, Zhenzhen Wang, Rui Ning, Chunsheng Xiu, Hongyi Wu

Computer Science Faculty Publications

Private inference applies cryptographic techniques like homomorphic encryption, garble circuit and secret sharing to keep both sides privacy in a client-server setting during inference. It is often hindered by the high communication overheads, especially at non-linear activation layers such as ReLU. Hence ReLU pruning has been widely recognized as an efficient way to accelerate private inference. Existing approaches to ReLU pruning typically rely on coarse hypothesis, which assume an inverse correlation between the importance of ReLU and linear layers or shallow activation layers have less importance for universal models, to assign the budgets according to the layer while preserving the …

Human Perception Of Ai Capabilities At Classifying Perturbed Roadway Signs, Katherine R. Garcia, Jing Chen, Yanru Xiao, Scott Mishler, Cong Wang, Bin Hu

Psychology Faculty Publications

Artificial Intelligence (AI) is crucial to numerous functions required for driving automation systems, including the computer vision techniques used to detect the roadway environment and make real-time decisions. However, the images used as inputs to the AI system may be maliciously perturbed, or manipulated, causing the AI system to make an incorrect classification. In this study, we examined humans’ perception of the AI’s computer vision capability of classifying various road sign images, including the original images, images with two different types of malicious attacks, and images that are scrambled randomly at the pixel level. Our results showed that participants rated …

A Trust-By-Learning Framework For Secure 6g Wireless Networks Under Native Generative Ai Attacks, Md Shirajum Munir, Sravanthi Proddatoori, Manjushree Muralidhara, Trinidad Mario Dena, Walid Saad, Zhu Han, Sachin Shetty

Center for Secure and Intelligent Critical Systems (CSICS) Publications

Sixth-generation (6G) wireless networks will become vulnerable due to native generative AI (GenAI)-driven intelligent poisoning attacks in both the radio unit and the core network. In particular, network parameters and metrics in cross-layer design pose fundamentally uncertain conditions and can be compromised through the native GenAI mechanism, which leverages data augmentation and reconstruction capabilities. This work investigates the capabilities of native GenAI to create novel poisoning attacks in wireless networks, while investigating their impact through uncertainty-informed root analysis. Then, detected attacks are mitigated by developing a trustworthy service aggregation in the wireless network. First, a joint decision problem is formulated …

A Spoofing Speech Detection Method Combining Multi-Scale Features And Cross-Layer Identification, Hongyan Yuan, Linjuan Zhang, Baoning Niu, Xianrong Zheng

Information Technology & Decision Sciences Faculty Publications

Pre-trained self-supervised speech models can extract general acoustic features, providing feature inputs for various speech downstream tasks. Spoofing speech detection, which is a pressing issue in the age of generative AI, requires both global information and local features of speech. The multi-layer transformer structure in pre-trained speech models can effectively capture temporal information and global context in speech, but there is still room for improvement in handling local features. To address this issue, a speech spoofing detection method that integrates multi-scale features and cross-layer information is proposed. The method introduces a multi-scale feature adapter (MSFA), which enhances the model’s ability …

Exploring Research And Tools In Ai Security: A Systematic Mapping Study, Sidhant Narula, Mohammad Ghasemigol, Javier Carnerero-Cano, Amanda Minnich, Emil Lupu, Daniel Takabi

School of Cybersecurity Faculty Publications

With the pervasive integration of artificial intelligence (AI) in various facets of modern technology, the importance of AI security has been thrust into the spotlight. The field is rapidly evolving, with new challenges and solutions emerging at a swift pace. However, the breadth and depth of AI security research have not been comprehensively mapped in recent times, presenting a crucial need for an extensive review and synthesis of existing literature. Given the increasing reliance on AI in critical domains such as healthcare, finance, and national security, ensuring the resilience and trustworthiness of these systems is imperative. This survey fulfills the …

Deepsecure: A Novel Deep Learning Model For Effective Detection Of Attacks On Big Data In Internet Of Urban Things, Laiba Sabir, Nadeem Javaid, Mariam Akbar, Nabil Alrajeh, Safdar Hussain Bouk, Abdulaziz Aldegheishem

School of Cybersecurity Faculty Publications

The Internet of Urban Things (IoUTs) regularly generates large amounts of data, making it a focus of cyberthreats such as denial-of-service attacks and malware bot networks. Traditional intrusion detection systems struggle to detect intricate attack patterns, handle class imbalance, capture temporal dependencies, and exhibit transparency. To address these limitations, we introduce a novel deep machine learning model, DeepSecure, a hybrid model that combines Deep Belief Networks (DBN) for hierarchical feature extraction and Deep Neural Networks for attack classification. DBN is used for feature selection through unsupervised learning to extract hierarchical representations in the IoUTs network data. We assess the random …

Nexus: Network Exploration For Exploiting Unsafe Sequences In Multi-Turn Llm Jailbreaks, Javad Rafiei Asl, Sidhant Narula, Mohammad Ghasemigol, Eduardo Blanco, Daniel Takabi

Computer Science Faculty Publications

Large Language Models (LLMs) have revolutionized natural language processing, yet remain vulnerable to jailbreak attacks—particularly multi-turn jailbreaks that distribute malicious intent across benign exchanges, thereby bypassing alignment mechanisms. Existing approaches often suffer from limited exploration of the adversarial space, rely on hand-crafted heuristics, or lack systematic query refinement. We propose NEXUS (Network Exploration for eXploiting Unsafe Sequences), a modular framework for constructing, refining, and executing optimized multi-turn attacks. NEXUS comprises: (1) ThoughtNet, which hierarchically expands a harmful intent into a structured semantic network of topics, entities, and query chains; (2) a feedback-driven Simulator that iteratively refines and prunes these chains …

Qos-Aware Link Adaptation For Beyond 5g Networks: A Deep Reinforcement Learning Approach, Ali Parsa, Neda Moghim, Sachin Shetty

Center for Secure and Intelligent Critical Systems (CSICS) Publications

Modern wireless communication systems face increasingly complex challenges due to rapidly changing channel conditions and the growing diversity of application-specific Quality of Service (QoS) requirements. Traditional link adaptation mechanisms primarily aim to maximize throughput and often lack the flexibility to support emerging applications, such as Extended Reality (XR) and Virtual Reality (VR), which demand simultaneous guarantees for high data rates, ultra low latency, and high reliability. These stringent and multidimensional QoS needs call for more intelligent and adaptive solutions. In this paper, we propose QDRLLA (QoS-aware Deep Reinforcement Learning-based Link Adaptation), a novel framework that employs deep reinforcement learning to …

Long-Term Traffic Prediction Using Deep Learning Long Short-Term Memory, Ange-Lionel Toba, Sameer Kulkarni, Wael Khallouli, Timothy Pennington

School of Cybersecurity Faculty Publications

Traffic conditions are a key factor in our society, contributing to quality of life and the economy, as well as access to professional, educational, and health resources. This emphasizes the need for a reliable road network to facilitate traffic fluidity across the nation and improve mobility. Reaching these characteristics demands good traffic volume prediction methods, not only in the short term but also in the long term, which helps design transportation strategies and road planning. However, most of the research has focused on short-term prediction, applied mostly to short-trip distances, while effective long-term forecasting, which has become a challenging issue …

Privacy-Preserved And Incentivized Knowledge Sharing For Reinforced-Learning Based Iot Platform Security, Weichao Wang, Md Morshed Alam, Yu Wang

School of Cybersecurity Faculty Publications

With the fast development and deep penetration of IoT devices and smart environments, using localized machine learning models to detect malicious activities has also been developed and deployed. However, these isolated learning models and results cannot be effectively federated together because of privacy concerns and lack of incentivization. This paper proposed several mechanisms to solve the problem. A verification method was designed for phased learning results to protect user privacy and prevent individual parties from manipulating the verification selection. The paper also presented an incentive method based on delay of distribution of the latest federated learning results. Extensive simulations were …

Zero Trust Architecture As A Risk Countermeasure In Small-Medium Enterprises And Advanced Technology Systems, Ahmed M. Abdelmagid, Rafael Diaz

Engineering Management & Systems Engineering Faculty Publications

The growing sophistication of cyberattacks exposes small- and medium-sized businesses (SMBs) to a widening range of security risks. As these threats evolve in complexity, the need for advanced security measures becomes increasingly pressing. This necessitates a proactive approach to defending against potential cyber intrusions. Emerging technologies, such as blockchain, artificial intelligence, and Zero Trust security framework, offer crucial tools for strengthening the digital infrastructure of SMBs. The Zero Trust architecture (ZTA) holds significant promise as a critical strategy for protecting SMBs. While existing literature explores the implementation of ZTA in various business settings, discussions specifically addressing the financial, human resource, …