Open Access. Powered by Scholars. Published by Universities.®

Cybersecurity Commons™

Open Access. Powered by Scholars. Published by Universities.®

Discipline
Institution
Keyword
Publication Year
Publication
Publication Type
File Type

Articles 361 - 390 of 482

Full-Text Articles in Cybersecurity

Broadening Participation Of Teachers In Computing: Examining Postsecondary Educational Experiences And Prospective Educators’ Cs Teaching Interests, Robert Schwarzhaupt, Alexsandra Galanis, Joanna Goode, Kate Blanchard, Jill Bowdon, Joseph P. Wilson Feb 2024

Broadening Participation Of Teachers In Computing: Examining Postsecondary Educational Experiences And Prospective Educators’ Cs Teaching Interests, Robert Schwarzhaupt, Alexsandra Galanis, Joanna Goode, Kate Blanchard, Jill Bowdon, Joseph P. Wilson

Journal of Computer Science Integration

Teacher shortages in K–12 computer science (CS) education negatively impact students’ access to CS courses, exposure to CS concepts, and interest in CS-related careers. To address CS teacher shortages, this study seeks to understand factors related to expressing a preference to teach CS among prospective teachers. The study team analyzed data from 27,700 prospective teacher applications accepted into the 2016–2020 Teach For America (TFA) corps (cohorts). The TFA corps is an alternative teacher development program that recruits and prepares participants to obtain their teaching certification while they work for at least two years in underserved communities on a temporary teaching …

Go to article

Data Driven Trade-Off Analysis For Cybersecurity, Goskel Kucukkaya, Murat Ozer, Murat Balci, Emrah Ugurlu Jan 2024

Data Driven Trade-Off Analysis For Cybersecurity, Goskel Kucukkaya, Murat Ozer, Murat Balci, Emrah Ugurlu

Engineering Management & Systems Engineering Faculty Publications

Trade-off analysis, a specialization of systems engineering, addresses design criteria like security, cost, performance, and compliance. Monte Carlo simulations are commonly employed to generate impact scenarios for trade-off analysis combined with solution alternatives that accommodate industry-specific considerations and uncertainties. In the cyber domain, this paper proposes a methodology for data-driven trade-off analysis in cybersecurity, leveraging industry reports as primary data sources using confidentiality, integrity, and availability as trade-off analysis objectives. Distribution functions are derived to manage and model uncertainties for various industries. The approach given in this study aims to facilitate informed choices and to enhance cybersecurity decision making and …

Go to article

Tapped In: The Rise Of Mobile Malware, Chrystofuer Davenport Jan 2024

Tapped In: The Rise Of Mobile Malware, Chrystofuer Davenport

Cybersecurity Undergraduate Research Showcase

As the world of technology continues to evolve and become more advanced with our life, so do the dangers and threats that are determined to hinder that development. Malware continues to be a danger to internet surfers or people with access to technology. At first it was an issue that existed only with computers but since the evolution of smartphones in the early twenty-first century, mobile devices have been a target for multiple malware viruses. It’s important to be aware of what different viruses are capable of doing and how to avoid them when they are encountered. Even though computers …

Go to article

A Prototype Application For The Measurement Of Data Breach Event Intensity, James Palazzolo Jan 2024

A Prototype Application For The Measurement Of Data Breach Event Intensity, James Palazzolo

Master's Theses and Doctoral Dissertations

The data breach phenomenon is not new. People have valued information, its protection, and its security for centuries. A data breach is the loss of control over one’s information. In contemporary society (circa 2024), a data breach can occur in several ways: through accidental disclosure, negligence, or malicious action. Likewise, the study of the data breach phenomenon is not new. As with other studies, this research effort seeks to expand the current body of knowledge concerning data breaches. However, unlike previous research, we adopt a novel approach to further our understanding of the phenomenon. By employing topological and phenomenological thinking, …

Go to article

Enhancing Cyber Resilience Through Traffic Generation Patterns In Complex Networks: A Study On Cascading Failures, Aymar Le Père Tchimwa Bouom, Jean-Pierre Lienou, Wilson Ejuh Geh, Frederica Nelson, Sachin Shetty, Charles Kamhoua Jan 2024

Enhancing Cyber Resilience Through Traffic Generation Patterns In Complex Networks: A Study On Cascading Failures, Aymar Le Père Tchimwa Bouom, Jean-Pierre Lienou, Wilson Ejuh Geh, Frederica Nelson, Sachin Shetty, Charles Kamhoua

VMASC Publications

Network resilience is the capacity of a network to maintain and restore its fundamental operations during or after a failure. This paper investigates the resilience of communication networks with heterogeneous nodes, with host nodes that generate and receive packets and routers that only forward packets. We focus on how traffic generation patterns, defined as the distribution of data packet creation across hosts, affect network resilience. While previous studies identified optimal host placements that balance traffic loads and enhance network performance, this research explores how traffic generation patterns influence network resilience, particularly during cascading failures, where the failure of one node …

Go to article

Heuristic Machine Learning Approaches For Identifying Phishing Threats Across Web And Email Platforms, Ramprasath Jayaprakash, Krishnaraj Natarajan, J. Alfred Daniel, Chandru Vignesh Chinnappan, Jayant Giri, Hong Qin, Saurav Mallik Jan 2024

Heuristic Machine Learning Approaches For Identifying Phishing Threats Across Web And Email Platforms, Ramprasath Jayaprakash, Krishnaraj Natarajan, J. Alfred Daniel, Chandru Vignesh Chinnappan, Jayant Giri, Hong Qin, Saurav Mallik

Data Science Faculty Publications

Life has become more comfortable in the era of advanced technology in this cutthroat competitive world. However, there are also emerging harmful technologies that pose a threat. Without a doubt, phishing is one of the rising concerns that leads to stealing vital information such as passwords, security codes, and personal data from any target node through communication hijacking techniques. In addition, phishing attacks include delivering false messages that originate from a trusted source. Moreover, a phishing attack aims to get the victim to run malicious programs and reveal confidential data, such as bank credentials, one-time passwords, and user login credentials. …

Go to article

Machine Learning Based Intrusion Detection Framework For Can Bus Vulnerabilities In Modern Vehicles, Obinna C. Agbo Jan 2024

Machine Learning Based Intrusion Detection Framework For Can Bus Vulnerabilities In Modern Vehicles, Obinna C. Agbo

Graduate Theses, Dissertations, and Problem Reports (ETD)

The Controller Area Network (CAN) bus is a crucial communication backbone in modern vehicles, connecting various Electronic Control Units (ECUs). However, inherent design weaknesses such as the lack of encryption and authentication make CAN networks vulnerable to cyber-attacks, including spoofing, Denial of Service (DoS), and fuzzing attacks. This thesis thoroughly evaluates these vulnerabilities and the limitations of existing security frameworks like Message Authentication Codes (MACs) and encryption, advocating for the adoption of Intrusion Detection Systems (IDS) as a more practical solution for CAN bus security. The proposed IDS leverages advanced machine learning techniques to accurately detect intrusions, even under complex …

Go to article

Towards Trust And Reputation As A Service In Society 5.0, Stephan Olariu, Ravi Mukkamala, Meshari Aljohani Jan 2024

Towards Trust And Reputation As A Service In Society 5.0, Stephan Olariu, Ravi Mukkamala, Meshari Aljohani

Computer Science Faculty Publications

Our paper was inspired by the recent Society 5.0 initiative of the Japanese Government which seeks to create a sustainable human-centric society by putting to work recent advances in technology. One of the key challenges in implementing Society 5.0 is providing trusted and secure services for everyone to use. Motivated by this challenge, this paper makes three contributions that we summarize as follows: Our first main contribution is to propose a novel blockchain and smart contract-based trust and reputation service design to reduce the uncertainty associated with buyer feedback in marketplaces that we expect to see in Society 5.0. Our …

Go to article

Qctaas (Quality Cloud Teaching As A Service): An Immersive Framework For Teaching Cloud Computing For Cybersecurity Majors, Mahmoud K. Quweider, Liyu Zhang, Alexis Aaron De La Cruz Jan 2024

Qctaas (Quality Cloud Teaching As A Service): An Immersive Framework For Teaching Cloud Computing For Cybersecurity Majors, Mahmoud K. Quweider, Liyu Zhang, Alexis Aaron De La Cruz

Informatics and Engineering Systems Faculty Publications

Abstract Cloud Computing and Cybersecurity are at the heart of our recently created new bachelor-level degree in cybersecurity that addresses the national need for cybersecurity specialists. Cloud Computing involves many service models, including IaaS, PaaS, and SaaS, and many deployment models including Public, Private, and Hybrid clouds. Within the services and deployment models lies many concepts and practical implementations that a Cyber-analyst needs to master. We have adopted an immersive approach to teaching Cloud Computing services that introduces standard concepts based on clearly defined objectives from national certification authorities such as CompTIA Cloud+, covering all major services offered by the …

Go to article

An Enhanced Real-Time Intrusion Detection Framework Using Federated Transfer Learning In Large-Scale Iot Networks, Khawlah Harahsheh, Malek Alzaqebah, Chung-Hao Chen Jan 2024

An Enhanced Real-Time Intrusion Detection Framework Using Federated Transfer Learning In Large-Scale Iot Networks, Khawlah Harahsheh, Malek Alzaqebah, Chung-Hao Chen

Electrical & Computer Engineering Faculty Publications

The exponential growth of Internet of Things (IoT) devices has introduced critical security challenges, particularly in scalability, privacy, and resource constraints. Traditional centralized intrusion detection systems (IDS) struggle to address these issues effectively. To overcome these limitations, this study proposes a novel Federated Transfer Learning (FTL)-based intrusion detection framework tailored for large-scale IoT networks. By integrating Federated Learning (FL) with Transfer Learning (TL), the framework enhances detection capabilities while ensuring data privacy and reducing communication overhead. The hybrid model incorporates convolutional neural networks (CNNs), bidirectional gated recurrent units (BiGRUs), attention mechanisms, and ensemble learning. To address the class imbalance, Synthetic …

Go to article

Passperfect: A Secure One Time Password Authentication System, Charlene H. Crawshaw Jan 2024

Passperfect: A Secure One Time Password Authentication System, Charlene H. Crawshaw

UNF Graduate Theses and Dissertations

Most organizations have established strong password policies and standards to ensure the confidentiality, integrity, and availability of their data, applications, and critical systems. Even with rigorous implementations and layered approaches such as utilizing multifactor authentications, there are still flaws and vulnerabilities as they have a high dependency on the user adhering to them. In conjunction with these policies, a strong security awareness program should be implemented to educate the end user about strong password hygiene. In this work, we design and implement a secure one-time password (OTP) system, “PassPerfect”, to provide a method of enforcing a strong set of password …

Go to article

A Defensive Strategy Against Android Adversarial Malware Attacks, Fabrice Setephin Atedjio, Jean-Pierre Lienou, Frederica F. Nelson, Sachin S. Shetty, Charles A. Kamhoua Jan 2024

A Defensive Strategy Against Android Adversarial Malware Attacks, Fabrice Setephin Atedjio, Jean-Pierre Lienou, Frederica F. Nelson, Sachin S. Shetty, Charles A. Kamhoua

VMASC Publications

Due to the popularity of Android mobile devices over the past ten years, malicious Android applications have significantly increased. Systems utilizing machine learning techniques have been successfully applied for Android malware detection to counter the constantly changing Android malware threats. However, attackers have developed new strategies to circumvent these systems by using adversarial attacks. An attacker can carefully craft a malicious sample to deceive a classifier. Among the evasion attacks, there is the more potent one, which is based on solid optimization constraints: the Carlini-Wagner attack. Carlini-Wagner is an attack that uses margin loss, which is more efficient than cross-entropy …

Go to article

A Critical Computing Curriculum Design Case: Exploring Tribal Sovereignty For Middle School Students, Kristin A. Searle, Aubrey Rogowski, Colby Tofel-Grehl, Mengying Jiang Dec 2023

A Critical Computing Curriculum Design Case: Exploring Tribal Sovereignty For Middle School Students, Kristin A. Searle, Aubrey Rogowski, Colby Tofel-Grehl, Mengying Jiang

Journal of Computer Science Integration

We report on our efforts to design an integrated computing curriculum for middle school students in Montana that is in line with the Kapor Center’s focus on culturally sustaining-revitalizing pedagogies. Montana provides a unique context for doing this work because a state constitutional mandate requires all K-12 students to learn about tribal histories and cultures through Indian Education For All (IEFA). IEFA centers around seven essential understandings about Indigenous peoples in Montana that are integrated across content areas. In addition, implementation of Montana’s CS standards began in the 2021–2022 school year. In the curricular design, we sought to bring together …

Go to article

Employing An Abolitionist, Critical Race Pedagogy In Cs: Centering The Voices, Experiences And Technological Innovations Of Black Youth, Tiera Tanksley Dec 2023

Employing An Abolitionist, Critical Race Pedagogy In Cs: Centering The Voices, Experiences And Technological Innovations Of Black Youth, Tiera Tanksley

Journal of Computer Science Integration

This paper proposes a pedagogical extension of culturally responsive praxis called abolitionist, critical race pedagogy in CS. To showcase the power and potentiality of this pedagogy, this paper examines the experiences of 2 cohorts of Black high school students (n = 30) who participated in a critical race technology course that was taught during the dual pandemic of COVID-19 and anti-Black racism. The goal of this summer course was to employ an abolitionist, critical race pedagogy in CS to foster Black students’ ability to critically examine the ubiquity of anti-Black racism within the socio-technical architectures (e.g. code, data, algorithms and …

Go to article

Culturally Responsive-Sustaining Computational Thinking: Enactment In Elementary Classrooms, Victoria Macann, Aman Yadav Dec 2023

Culturally Responsive-Sustaining Computational Thinking: Enactment In Elementary Classrooms, Victoria Macann, Aman Yadav

Journal of Computer Science Integration

Technology has increasingly permeated many aspects of everyday life and this evolution raises the need for individuals to understand how the digital world works and what opportunities and risks it brings (Nouri, Zhang, Mannila & Norén, 2019). For this to be an experience for everyone, we need to rethink how we integrate computational thinking (CT) and provide teachers with tools to center their students’ identities, experiences, and cultures in the classroom. In this paper, we present two case studies of primary (elementary) teachers from a full primary (student ages 5–13) semi-rural school in the North Island of New Zealand that …

Go to article

Exploring The Nexus Of Cybersecurity Leadership, Human Factors, Emotional Intelligence, Innovative Work Behavior, And Critical Leadership Traits, Sharon L. Burton, Darrell Norman Burrell, Calvin Nobles, Laura A. Jones Dec 2023

Exploring The Nexus Of Cybersecurity Leadership, Human Factors, Emotional Intelligence, Innovative Work Behavior, And Critical Leadership Traits, Sharon L. Burton, Darrell Norman Burrell, Calvin Nobles, Laura A. Jones

Publications

Data shows that 12% of leaders are rated as 'very effective' at leadership. This research emphasizes the importance of understanding human behavior and its impact on leadership effectiveness, innovative work behavior (IWB), and the ability to respond to complex cyber threats, particularly in the realm of cybersecurity leadership. Emotional intelligence (EI), a key human factor, is highlighted as a crucial element that can stimulate cognitive absorption, leading to innovative work behavior and improved innovation efficiency (IE). This underscores the need for leaders to not only be technically proficient but also emotionally intelligent to effectively manage their teams and respond to …

Go to article

Teacher Candidates’ Conceptions And Practices Of Computational Thinking For Equity, Heather F. Clark, Symone A. Gyles, Imelda Nava-Landeros Oct 2023

Teacher Candidates’ Conceptions And Practices Of Computational Thinking For Equity, Heather F. Clark, Symone A. Gyles, Imelda Nava-Landeros

Journal of Computer Science Integration

This study documents novice science and math teachers’ developing pedagogical approaches to integrating computational thinking (CT) and data into their courses to support educational equity and social justice. The 10 novice teacher candidates (TCs) studied were part of an urban teacher residency program that empowered them with an asset-based pedagogy we describe as “CT for Equity.” Drawing on coursework and interviews as data, we asked three questions: What are teachers’ conceptions of CT? What are their CT instructional practices? And how did their students respond to those practices? To explore conceptions of CT, we used Kafai et al.’s (2020) articulation …

Go to article

Understanding How To Diversify The Cybersecurity Workforce: A Qualitative Analysis, Maria Chaparro Osman, Maureen Namukasa, Cherrise Ficke, Isabella Piasecki, Tj Oconnor, Meredith Carroll Oct 2023

Understanding How To Diversify The Cybersecurity Workforce: A Qualitative Analysis, Maria Chaparro Osman, Maureen Namukasa, Cherrise Ficke, Isabella Piasecki, Tj Oconnor, Meredith Carroll

Aeronautics Faculty Publications

A robust cybersecurity workforce is critical for protection against a range of malicious attacks. However, it has been noted that there are many vacancies and a shortage of individuals entering the cybersecurity workforce. The workforce shortage has been partially attributed to the lack of diversity in the cybersecurity domain, with women, African Americans, and Hispanics remaining underrepresented in educational and professional settings. Using a qualitative approach, this work sought to investigate what led underrepresented minorities currently involved in cybersecurity to the industry, with the goal of determining methods to attract underrepresented minorities and diversify the workforce. A thematic analysis was …

Go to article

Smart Homes And You: Iot Device Data Risks In An Ever-Changing World, Autumn Person Oct 2023

Smart Homes And You: Iot Device Data Risks In An Ever-Changing World, Autumn Person

Theses and Dissertations

Social media applications are increasingly seen as a national security threat and a cause for concern because they can be used to create user profiles on government personnel and on US citizens. These profiles could be used for big data and artificial intelligence purposes of interest to foreign governments. With the rise of big data and AI being used, foreign governments could use this data for a variety of purposes that can affect normal everyday citizens, not just high value personnel. IoT (Internet of Things) devices that the population uses everyday can also pose the same threat. These devices can …

Go to article

Docker Technology For Small Scenario-Based Excercises In Cybersecurity, Zeinab Ahmed Oct 2023

Docker Technology For Small Scenario-Based Excercises In Cybersecurity, Zeinab Ahmed

Theses and Dissertations

This study aims to better prepare students for cybersecurity roles by providing practical tools that bridge the gap between theory and real-world applications. We investigate the role of small scenario-based exercises for students’ understanding of cybersecurity concepts. In particular, we assess the use of Docker technology to deliver training that includes a simple small scenario on html code injection. The effectiveness of scenario-based learning has long been defined and by using SBL, we are going to create hands-on activity that involves the fundamental topics in cybersecurity using Docker technology, allowing students to see the exploitation of the vulnerabilities and defense …

Go to article

Asset-Based Approaches To Multilingual Students’ Computer Science Identity Development, Sharin Rawhiya Jacob, Mark Warschauer Sep 2023

Asset-Based Approaches To Multilingual Students’ Computer Science Identity Development, Sharin Rawhiya Jacob, Mark Warschauer

Journal of Computer Science Integration

While computer science identity development has been examined in several studies, there is much to learn about the development of multilingual students’ computer science (CS) identities. To develop strong CS identities, multilingual students must engage in culturally and linguistically sustaining curriculum, pedagogy, and interaction that draws from their rich and varied resources. This theoretical paper is grounded in a justice-centered, asset-based framework that views the traditions and practices in students’ cultures and communities as strong contributors to knowledge construction in STEM. We draw on multiple studies exploring multilingual student CS identity development to better understand how their personal, familial, community-based, …

Go to article

Wind River Elementary Computer Science Collaborative: Connecting Computer Science And Indigenous Identities And Knowledges On The Wind River Reservation, Joseph P. Wilson, Kathryn M. Rich, Jared O'Leary, Veronica Miller Sep 2023

Wind River Elementary Computer Science Collaborative: Connecting Computer Science And Indigenous Identities And Knowledges On The Wind River Reservation, Joseph P. Wilson, Kathryn M. Rich, Jared O'Leary, Veronica Miller

Journal of Computer Science Integration

Three Northern Arapaho and Eastern Shoshone–serving districts formed a researcher–practitioner partnership with the Wyoming Department of Education, the American Institutes for Research®, and BootUp Professional Development to advance the computer science (CS) education of their elementary students in ways that strengthen their Indigenous identities and knowledges. In this paper, we share experiences from 2019 to 2022 with our curriculum development, professional development (PD), and classroom implementation. The researcher–practitioner partnership developed student and teacher materials to support elementary CS lessons aligned to Wyoming’s CS standards and “Indian Education for All” social studies standards. Indigenous community members served as experts to codesign …

Go to article

Near Peer Pedagogies For Culturally Sustaining Computer Science And Mathematics, Cliff Freeman, Eli Tucker-Raymond, Juan Gutierrez Sep 2023

Near Peer Pedagogies For Culturally Sustaining Computer Science And Mathematics, Cliff Freeman, Eli Tucker-Raymond, Juan Gutierrez

Journal of Computer Science Integration

In this study, College STEM Literacy Workers act as co-teachers in 9th and 10th grade classrooms alongside mathematics teachers as they both learn to integrate a 30-hour integrated computer science/mathematics curriculum. As part of the curriculum for educator learning, we adapted the Algebra Project’s “Model of Excellence” for culturally relevant-sustaining pedagogies. We used the framework to explore how teachers understand College STEM Literacy Workers’ contributions in the model as well as College STEM Literacy Workers’ own experiences in the classroom. We found that while teachers and College STEM Literacy Workers did not individually instantiate the model of excellence, they were …

Go to article

The Varied Landscape Of Consumer Fraud, Alan Saquella Aug 2023

The Varied Landscape Of Consumer Fraud, Alan Saquella

Publications

In today's interconnected world, consumer fraud remains a persistent threat that can have far-reaching consequences for individuals and their financial well-being. While these insights are relatively current, it's essential to acknowledge that specific numbers and trends may have.

Go to article

Path Of Trust: An Off-Chain Performance Enhancement Algorithm For Public Blockchains, Anthony Kigombola Jun 2023

Path Of Trust: An Off-Chain Performance Enhancement Algorithm For Public Blockchains, Anthony Kigombola

Tanzania Journal of Engineering and Technology (TJET)

Blockchain technology is one among the latest innovations in computing industry. Blockchains have gathered widespread interest in the industry due to their potential as secure data storage. Despite the potential benefits of blockchains, there are several limitations which hinders mass deployment, one of these limitations being low throughput. Low throughput has limited blockchain adoption in large scale applications such as banking or mobile payments. This study addresses this limitation through development of a performance enhancement algorithm called Path of Trust (PoT). PoT uses off-chain stratergy in which transactions meeting certain criteria bypass the main chain and sent direct to the …

Go to article

V3 Onion Service Vulnerability On Website Fingerprinting, Olusegun Akinyemi Jun 2023

V3 Onion Service Vulnerability On Website Fingerprinting, Olusegun Akinyemi

Student Theses and Dissertations

Website fingerprinting attacks have revealed a vulnerability in Tor's network. Previous studies have shown success rates against the V2 onion service network and the possibility of real-time fingerprinting. With the transition to V3 onion services, there has yet to be any recent research on the impact of these changes on website fingerprinting attacks and the feasibility of real-time fingerprinting attacks. This work consists of two experiments: A Comparative Study of Website Fingerprinting Attacks in V2 and V3 Onion Services of Tor Networks and Enhanced Real-Time Fingerprinting Attacks on Tor Networks. These experiments involve analyzing the differences between V2 and V3 …

Go to article

Designing An Equity-Centered Framework And Crosswalk For Integrated Elementary Computer Science Curriculum And Instruction, Carla Strickland, Andrea Ramírez-Salgado, Lauren Weisberg, Latoya Chandler, Jeanne Di Domenico, Elizabeth M. Lehman, Maya Israel Apr 2023

Designing An Equity-Centered Framework And Crosswalk For Integrated Elementary Computer Science Curriculum And Instruction, Carla Strickland, Andrea Ramírez-Salgado, Lauren Weisberg, Latoya Chandler, Jeanne Di Domenico, Elizabeth M. Lehman, Maya Israel

Journal of Computer Science Integration

As computer science (CS) education becomes more prevalent in K-12 instruction, it is critical for educators, researchers, and curriculum developers to identify culturally responsive and pedagogically inclusive approaches that can increase participation, access, and feelings of belonging for students from historically marginalized communities. In response, we developed an equity-centered curricular framework and illustrative crosswalk that synchronizes three distinct pedagogical approaches: culturally responsive pedagogy (CRP), Universal Design for Learning (UDL), and project-based learning (PBL). We describe the framework’s theoretical underpinnings and explain how this framework informed the development of an integrated elementary science+CS curricular unit and provide examples of its implementation. …

Go to article

Use Of Machine Learning In Interactive Cybersecurity And Network Education, Neil Loftus, Husnu S. Narman Mar 2023

Use Of Machine Learning In Interactive Cybersecurity And Network Education, Neil Loftus, Husnu S. Narman

Computer Sciences and Electrical Engineering Faculty Research

Cybersecurity is a complex subject for students to pursue. Hands-on online learning through labs and simulations can help students become more familiar with the subject at security classes to pursue cybersecurity education. There are several online tools and simulation platforms for cybersecurity education. However, those platforms need more constructive feedback mechanisms, and customizable hands-on exercises for users, or they oversimplify or misrepresent the content. In this paper, we aim to develop a platform for cybersecurity education that can be used either with a user interface or command line and provide auto constructive feedback for command line practices. Moreover, the platform …

Go to article

Intel Total Memory Encryption: Functional Verification And Performance Analysis, Tallas T. S. Goo Mar 2023

Intel Total Memory Encryption: Functional Verification And Performance Analysis, Tallas T. S. Goo

Theses and Dissertations

While more attention is generally focused on software security, computer hardware security remains an important effort. Should an attacker gain direct physical access, computers with little to no hardware security can quickly be compromised via a manner of methods. One such attacker method is to steal information directly from the active memory of a locked, powered-on computer. To counter this attack, a hardware security method was developed called memory encryption. Memory encryption, as the name suggests, protects against adversary methods like cold boot attacks by encrypting all of memory. This research evaluates the efficacy and performance specifically of Intel TME. …

Go to article

Characterizing Location-Based Electromagnetic Leakage Of Computing Devices Using Convolutional Neural Networks To Increase The Effectiveness Of Side-Channel Analysis Attacks, Ian C. Heffron Mar 2023

Characterizing Location-Based Electromagnetic Leakage Of Computing Devices Using Convolutional Neural Networks To Increase The Effectiveness Of Side-Channel Analysis Attacks, Ian C. Heffron

Theses and Dissertations

SCA attacks aim to recover some sort of secret information, often in the form of a cipher key, from a target device. Some of these attacks focus on either power-based leakage, or EM-based leakage. Neural networks have recently gained in popularity as tools in SCA attacks. Near-field EM probes with high-spatial resolution enable attackers to isolate physical locations above a processor. This enables attackers to exploit the spatial dependencies of algorithms running on said processor. These spatial dependencies result in different physical locations above a chip emanating different signal strengths. The strengths of different locations can be mapped using the …

Go to article

First Prev Next Last