Cybersecurity Commons^™

Lightweight End-To-End Cryptographic Framework With Semantic Qos For Ar-Based Telesurgery, Pavan Kumar Satram

Masters Theses

This thesis presents the design, implementation, and evaluation of a lightweight end-to-end cryptographic framework integrated with a semantic quality-of-service classification system for augmented reality based telesurgery. Telesurgery can deliver expert surgical care to underserved populations, but adoption has been limited by unresolved cybersecurity, network performance, and resilience challenges. The core tension is that strong encryption adds latency that may exceed the clinical safety threshold, while unencrypted systems remain vulnerable to attacks that could endanger patients during live procedures.

The framework addresses this tension through a dual-edge security middlebox that performs per-flow encryption using semantically selected ciphers: AES-128-GCM for latency-critical haptic …

Evaluating Machine Learning Models On Classification Of Novel Cyber Attacks In The Healthcare Domain, Promise Ehimen

Dissertations, Theses, and Projects

The increasing adoption of the Internet of Medical Things (IoMT) has improved healthcare delivery through connected medical devices while simultaneously expanding the cybersecurity risks facing healthcare organizations. Although machine learning based intrusion detection systems have demonstrated high detection accuracy, their ability to respond reliably to previously unseen cyberattacks remains uncertain. This study investigated how a Neural Network model and a Logistic Regression model classified novel cyberattacks within the IoMT environment. The Neural Network and Logistic Regression models were both trained and tested using a subset of the CICIoMT2024 benchmark dataset. The Neural Network achieved 99.82% test accuracy and a 0.94 …

Surveyception: An Exploration Of Deceptive Survey Forms, Muhammad Danish

Computer Science ETDs

Survey platforms such as Google Forms and Microsoft Forms are widely used for feedback, data collection, and engagement, but scammers increasingly exploit them to distribute phishing and deceptive attacks. This thesis presents a large-scale study of survey-form abuse across ten major providers. We collected 140,000 forms from three sources: public posts on X, search-engine results, and web pages from the top 10 million DomCop-ranked domains. Using automated filtering and manual qualitative review, we identified 2,645 forms requesting sensitive information and classified 566 as scams. These forms used techniques including phishing, private-secret theft, account and personal-data harvesting, financial deception, and psychological …

Geospatial Governance Failures In The Department Of Defense: Contractor Noncompliance, Ai Adoption, And The Parallel Treatment Of Gis And Cybersecurity, Lyndsey Olmstead

Geography and the Environment: Graduate Student Capstones

The Department of Defense's treatment of geographic information systems and cybersecurity as parallel rather than integrated policy domains produces geographically predictable vulnerability patterns across its global military installation footprint. This capstone investigates that conclusion through original spatial analysis, constructing a five-variable composite geospatial vulnerability index across the six U.S. Combatant Command regions using publicly available unclassified data. EUCOM ranked highest overall, driven by GPS/PNT spoofing density, commercial satellite coverage, and cyber incident frequency; CENTCOM ranked second, driven by OSINT exposure incidents and governance risk. The null hypothesis of random geographic distribution is rejected. Findings confirm the structural governance gap documented …

The Security Of Llm-Generated Code, Christopher Brian Gonzalez Ayala

Student Theses

The rapid adoption of Large Language Models (LLMs) in software development has transformed coding practices by enabling automated code generation, completion, and optimization. Despite these advantages, concerns persist regarding the security and reliability of LLM-generated code. This study presents a comprehensive evaluation of both the functional correctness and security of code produced by three prominent LLMs as of early 2026. A total of 4,800 code snippets were generated using 100 security-focused programming prompts derived from the OWASP Top 10:2025, translated across eight natural languages and two phrasing styles (literal and natural developer-oriented prompts). To assess performance, a multi-stage experimental framework …

Adversarial Robustness Of Perceptual Hashing Systems: A Unified Security Evaluation Framework, Avijit Roy

Student Theses

Social network platforms, child safety organizations, and image provenance systems use perceptual hashing to identify known child sexual abuse material (CSAM), support content moderation and reverse image search, and verify image integrity. Perceptual hashing works by producing similar fingerprints for visually similar images, even after common transformations such as compression, resizing, or minor brightness changes. This useful similarity-preserving property also creates an adversarial attack surface, as attackers can use AI-assisted or conventional image manipulation techniques to move a hash across a matching threshold while maintaining visual similarity, often without access to specialized hardware.

The security failures produced by adversarial attacks …

Anonymity And Accountability In Secure Messaging, Erin Kenney

Dissertations

Encypted messaging has become more and more prevalent as time moves on, and its benefits in assuring privacy cannot be overstated, but it also brings along with it concerns on how to moderate platforms where all messages are hidden. Message Franking, followed by Traceback systems, addressed these concerns by allowing the sender of a message to be proven when reported, even for forwarded messages in the case of Traceback, however these systems damage the privacy guarantees that originally motivated encrypted messaging to begin with.

In practice, even without those concerns encrypted messaging alone is not enough to prevent the most …

Sound Detection Of Memory Leaks In Llvm Ir Programs Using Accumulation Analysis, Robert Blacha

Theses

Resource leaks occur when a limited resource such as memory is allocated by a program and needlessly held past the point of use. Leaks can lead to a degradation of services which can be specifically triggered with malicious behavior, for example abusing a memory leak in a program to cause a server to slow down and crash for a denial-of-service attack.

Prior work has demonstrated that accumulation analysis provides a sound detection of resource leaks with a working implementation for programs written in Java. While useful, current implementations are limited to programs written in Java, which has a garbage collector, …

Distributed File Carving, Brad J. Baudin

LSU Master's Theses

File carving is a fundamental technique in the digital forensics community, enabling analysts to recover deleted files from disk images without relying on filesystem metadata; however, as storage capacities continue to increase, modern file carving tools face significant scalability challenges, with carving time growing substantially alongside disk image size, particularly in the presence of file fragmentation. Fragmentation, a common behavior in modern filesystems, distributes file data across non-contiguous disk blocks to maximize space utilization, and in large disk images this distribution can span wide logical distances, increasing the search space and reducing carving efficiency, causing traditional approaches to struggle within …

Security Assessment Of A Machine Learning Approach To Generate And Validate Digital Signatures, Juan Ortiz Couder

Doctoral Dissertations and Master's Theses

Cybersecurity has become a global concern as cyber-attacks have become more common, and the cost of the damage caused by them continues to increase. There are several approaches to improve the cyber security of systems such as Digital Signatures, hashing, watermarking, and encryption among others. Digital Signatures are a cryptographic technique used to verify the authenticity and integrity of digital messages or documents. Digital Signatures use a combination of hashing and public-private key encryption to verify the authenticity and integrity of videos, just as they are used for documents and messages. As a result of using a combination of other …

F.L.A.I.R. -- A Flow-Level Autoencoder For Intrusion Recognition, Joseph P. Dumond

Electrical Engineering and Computer Science Undergraduate Honors Theses

Industrial Internet of Things (IIoT) networks underpin critical infrastructure worldwide, yet securing them remains an open challenge. Traditional intrusion detection systems require labeled attack data for training, a resource that is rarely available in real industrial deployments. They also fail against novel threats, a model trained on known attacks has no basis for detecting anything outside its training set. This thesis presents a Flow-Level Autoencoder for Intrusion Recognition, or FLAIR, a fully unsupervised deep learning system for network intrusion detection in IIoT environments. FLAIR is built on a Gated Recurrent Unit (GRU) autoencoder trained exclusively on normal network traffic. Rather …

A Case Study On Using Large Language Models To Drive Convergence-Oriented Literature Discovery In Critical Infrastructure Security, Caden J. Williamson

Electrical Engineering and Computer Science Undergraduate Honors Theses

In the world of cybersecurity, the rapid development of artificial intelligence proposes a constant challenge for researchers to defend critical infrastructure. Attacks on critical infrastructure can be catastrophic, and emerging strategies of cyber-adversaries that implement leading AI models can expose vulnerabilities in critical infrastructure much faster than previous tools. To defend against this emerging threat, the Cybersecurity Research Working Group at the University of Arkansas is aiming to develop a cross-domain and cross-discipline center of excellence. To support this effort, the group is writing a literature review on the topics of AI and critical systems security. Literature review is an …

Weavecc: Symbolically-Guided Joint Exploration Of Inputs And Schedules For Concurrency Bug Detection, William Philip Dinauer

Dartmouth College Master’s Theses

Concurrent programs introduce a class of bugs that depend jointly on both program inputs and thread schedules. Exposing these bugs requires simultaneously reasoning about which code paths are reachable and which thread interleavings are possible. At the same time, many existing tools handle the problem insufficiently. Race detectors observe only the interleavings that the OS happens to produce. Fuzzers explore inputs without controlling schedules. Tools that address both dimensions together exist, but are built on interpretation-based symbolic executors that incur considerable overhead.

We present WeaveCC, a practical concurrency testing tool for C/C++ programs that jointly explores inputs and thread schedules. …

Improving Fairness On Semantic Segmentation Using Large Language Models, Samuel E. Burggraf

Electrical & Computer Engineering Projects for D. Eng. Degree

As machine learning systems are increasingly integrated into critical decision-making processes, ensuring fairness in their design and implementation has become a significant concern. While fairness research has primarily focused on specific protected attributes, less attention has been given to spatial fairness, which can affect individuals at specific locations. If fairness is not addressed, models may systematically underperform in certain regions or across populations which can lead to unequal access to accurate predictions and potentially biased decision-making. Fairness considerations should extend across all machine learning applications to align with the National Institute of Standards and Technology (NIST) guidelines of fair and …

Friend Or Foe? The Benefits And Risks Of Llms In Cybersecurity, Niklas P. Dobler

Honors Theses

The rapid growth of Large Language Models (LLMs) and their continuous increase in capabilities have affected many professions and people. Due to advancements in areas such as coding and data analysis, they are now also being utilized in Cybersecurity. Recent research has examined their use in many different areas such vulnerability detection in code and analyzing network traffic. With this rapid growth, most organizations around the world are eager to advance faster than their competition, with limited considerations for the potential harm and risks these tools could bring. Some research has been conducted on malicious uses, but as the benefits …

Post-Quantum Cryptography Encryption Implementation For Messaging App, Callum S. Ward

Theses/Capstones/Creative Projects

This paper and complementary capstone project aim to explore the state of post-quantum cryptography today by defining the algorithms with which quantum computers can decipher modern asymmetric cryptographic algorithms in exponentially accelerated time, exploring national standards body NIST’s recommendations to circumvent these weaknesses with post-quantum solutions, and implementing recommended algorithms in my group’s project for the UNO Computer Science Capstone course, LockTalk. After having decided on ML-KEM for quantum-resistant asymmetric key transfer and AES-256 for symmetric message encryption and decryption, I was able to cryptographically encode messages to obscure their plaintext values from communication interceptions without any discernible increase in …

Blockchain Message Integrity For Messaging App: Python-Based Implementation Of Blockchain-Backed Verification And Tamper Detection, Brendan J. Farrell

Theses/Capstones/Creative Projects

With the rapid development and use of digital communication, the need for maintaining the integrity and authenticity of transmitted information becomes more pressing than ever.  However, existing methods of data exchange have several flaws and drawbacks such as reliance on centralized networks which are subject to manipulation, modifications, and potential failures.  Thus, the current project offers an innovative approach to improving the integrity and detection capabilities of messages in real-time communication platforms using the power of blockchain technology.  The proposed solution uses the inherent features of blockchain-based systems to ensure secure and safe message transmission.

Message Malware: File Vulnerability Scanning In Messaging Apps, Miah Mason

Theses/Capstones/Creative Projects

As messaging platforms become primary communication hubs within highly secure environments, they introduce significant vulnerabilities regarding file sharing with potential malicious content. This research, an honors extension of the Northrop Grumman sponsored Capstone project ‘LockTalk’, evaluates the technical abilities of automated file scanning methods within messaging platforms like Slack, Microsoft Teams, or our own developed platform LockTalk. This paper investigates a variety of scanning methods and their applications, with particular emphasis on comparing the qualities of static scanning, used in signature-based detection, and dynamic scanning with heuristics. Furthermore, this paper investigates the differences and advantages of both End-to-End Encryption (E2EE), …

Using Ai For Data Loss Prevention, Camden A. Wright

Theses/Capstones/Creative Projects

Data Loss Prevention (DLP) systems play a critical role in protecting modern systems that handle sensitive information from both accidental and malicious exposure. Traditional DLP approaches often rely on static rules and methods that can struggle to adapt to complex and evolving data patterns. This paper presents a hybrid DPL system that integrates machine learning-based message classification, rule based policy enforcement, and context-aware access control to improve both detection accuracy and decision reliability. In addition, the system introduces a second stage access control model that evaluates user context, including role of clearance level and job title to determine whether access …

The Privacy Paradox: How Does Concern About Privacy Impact Actions In The Digital Age?, Julia Laduke

Honors Theses

The privacy paradox occurs when people claim to care about their digital privacy, but do not take actions to keep their data from being spread across the internet. This study examines college students, being primarily Generation Z, and their concerns and actions regarding digital privacy and security. A survey of 15 college students, 7 in humanities and 8 in STEM, was used to analyze their thoughts and concerns about their digital privacy. This survey also asked whether they took actions concerning their privacy, and if so, what tools they used to protect it. The results show that about 50% of …

Enhancing Control Charting Schemes And Exploring New Assessment Metrics To Advance Quality Control And Cyber-Attack Detection In Manufacturing, Ahmad Al Majali

Dissertations

The increasing integration of digital technologies and industrial control systems in modern manufacturing has introduced new cybersecurity vulnerabilities within cyber–physical production environments. Malicious actors can exploit these vulnerabilities to induce subtle process deviations that degrade product quality while remaining undetected by conventional statistical monitoring tools. Such attacks can be deliberately engineered to manipulate process behavior through transient shifts that vary in magnitude, duration, and frequency. Despite extensive research on transient shifts caused by assignable causes in Statistical Process Control (SPC), limited attention has been given to intelligently designed cyber–physical attacks that exploit the structural characteristics and limitations of control charting …

Using Siamese Neural Networks To Effectively Detect Trojans In Fpgas When Trojans Manipulate Encryption Operations At The Bitstream Level, Kylie Arnett

Graduate Theses and Dissertations (2019 - present)

This research investigates security vulnerabilities in Field-Programmable Gate Arrays (FPGAs) at the bitstream level, focusing on hardware trojans (HTs) that manipulate encryption operations. This study addresses two critical questions: (1) The feasibility of exploiting FPGA bitstreams to selectively bypass encryption operations when a predefined input pattern is observed (all ones), thereby exposing sensitive data, and (2) the efficacy of Siamese Neural Networks (SNNs) in detecting such trojans with high accuracy. FPGAs are vulnerable to malicious modifications during manufacturing or deployment, posing risks to data integrity and system functionality. In this work, a trojan is inserted into a Xilinx series-7 FPGA …

Polyglot File Detection For Forensic Investigations, Chase Stevens

Graduate Theses and Dissertations (2019 - present)

As technology has become far more ubiquitous over the years, so too has the amount of digital evidence that can and needs to be collected and processed. Forensic tools are developed in response to the growing need, but are limited to what they are programmed to do. One such forensic tool is Autopsy, one of the most widely used open-source tools. Autopsy uses known file-type signatures (e.g., headers, trailers) to identify and recover files from forensic images. Polyglot files introduce a unique problem to both these forensic tools and investigators alike. In the context of the research conducted, polyglot files …

Detecting Sophisticated Cyberattacks On Public Water Infrastructure, Ayrton Purdy

Graduate Theses and Dissertations (2019 - present)

In recent years there has been an increasing number of cyberattacks on public water generation and distribution systems. Advanced persistent attackers could usurp sensors and control systems to contaminate public drinking water. In order to conceal their malicious activity, they can manipulate sensor data flows to give the appearance of normal activity. The compromised sensors would report normal chemical levels even though unsafe water is entering the distribution system. In response, this research proposes a multi-sensor, cross-comparison approach to anomaly detection. The proposed approach is designed to detect sophisticated cyberattacks which are not easily detectable using traditional cyber tools. The …

Developing A Framework For Microchip Design Recovery, Eric Diep

Graduate Theses and Dissertations (2019 - present)

Due to the increase in diverse chip production over the past decade, reverse engineering has become a difficult and daunting task. This research develops a methodology for microchip design recovery, seeking to validate and reproduce prior approaches to physical reverse engineering using low-cost tools and techniques. We used mechanical hardware abrasion tools and techniques to delayer and capture silicon integrated chip (IC) layout. We focused on the Mifare Classic EVl microchip, commonly implemented in public transit/transportation cards, to extract information for design recovery. The research explores limitations and advantages of mechanical abrasion and optical microscopy in context to modem chip …

Exploring The U.S. Public Service Employees’ Experiences With Gamified Cybersecurity Awareness Training, Bisola Adepoju

Human Resource Development Theses and Dissertations

The purpose of this qualitative study was to explore the U.S. public service employees' experiences with gamified cybersecurity awareness training. The primary research question guiding this inquiry was: How do U.S. public service employees make sense of their lived experiences with gamified cybersecurity awareness training? Two secondary questions examined what aspects of the training employees perceive as meaningful or disengaging, and how they interpret their motivation, engagement, and cybersecurity awareness during training. I chose an interpretive qualitative research design grounded in a constructivist paradigm and purposefully selected 11 U.S. public service employees who had participated in gamified cybersecurity awareness training. …

The Psychology Behind Ai-Generated Phishing And Social Engineering Attacks, A’Shya Reynolds

School of Cybersecurity Master's Level Projects and Papers

Cybercrime has evolved significantly with the integration of artificial intelligence (AI), transforming traditional phishing and social engineering attacks into highly sophisticated and personalized threats. While early phishing attempts relied on generic messaging and low success rates, modern AI-driven attacks leverage advanced data analytics, natural language processing, and behavioral prediction to manipulate victims more effectively.

This research examines how cybercriminals utilize AI to enhance psychological manipulation techniques in phishing and social engineering attacks, increasing victim susceptibility. Drawing from interdisciplinary literature in cybersecurity and psychology, this study explores key psychological mechanisms, including cognitive biases, emotional triggers, and decision-making processes that influence victim …

Large-Scale File Fragment Classification Via Multi-View Learning, Samuel Hildebrand

LSU Master's Theses

File reassembly is one of the most fundamental tasks in digital forensics, enabling recovery of data from potentially damaged storage media even when file system metadata is unavailable. This thesis reviews more than two decades of work in the realm of file carving, with a particular focus on fragmented file carving, which remains a focus of research, and file fragment classification, a principal component of fragmented file carving. This thesis serves a literature review of both file carving and fragmented file carving, surveys the massive amounts of data needed for the task of fragment classification and the datasets that serve …

From Network Packets To Physical Consequences: Network-Level Spoofing And Loss Of Visibility In Industrial Control Systems, Lillian B. Beck

LSU Master's Theses

Industrial Control Systems (ICS) are the foundation of critical infrastructure as they provide resources like clean water, electricity, and natural gas to support our everyday functions. Given their essential role in modern society, the failure or compromise of ICS systems can lead to significant negative consequences and public safety impacts. Understanding how these systems can be targeted and exploited by malicious actors is necessary to improve their security and resilience.

This research examines how an attacker could manipulate a real-world ICS network by targeting a fully functional Natural Gas (NG) Compressor Station Platform that emulates real operations. This research led …

Recovery And Validation Of Fragmented Rar Files Through The Scalpel3 Application, Thomas L. Landaiche Iii

LSU Master's Theses

A core component of filesystems includes an address table or other means of tracking metadata on where a given file resides within a disk image. This is crucial for regular operation of a computer, or disk analysis in digital forensics. When filesystem information is missing or corrupted, locating saved files on a disk becomes challenging. Whether the disk was accidentally wiped or intentionally tampered with, data still present on the disk, even while untracked, can possibly be recovered beyond what the filesystem registers. File carving in digital forensics is important for these scenarios when data recovery is necessary but address …