Cybersecurity Commons^™

Proactive Management In Academic Libraries: Promoting Improved Communication And Inclusion Of Academic Librarians And Archivists In Cybersecurity Policy Creation, Paul J. Luft

Theses and Dissertations

Although increasing cybersecurity threats continue in libraries, not many studies are available which examine surrounding cybersecurity policies. Even less has been done on specific types of libraries such as academic and archives. When it comes to academic libraries, cybersecurity policies take a top-down approach to managing and creating policies. The problem is that both academic libraries and archives are unique areas within a university setting. Some of the general policies do not always handle specific issues dealt with in an academic library or archives. This paper investigates if an actual gap or void in policy exists which could create issues …

Secure Unlinkability Schemes For Privacy Preserving Data Publishing In Weighted Social Networks, Chong Kah Meng

Student Works (2020-2029)

Preserving privacy of users has been one of the important research issues in social networks. Social networks contain sensitive personal information that are often released for business and research purposes. The privacy of a user can be breached if the data are not released in an anonymized form. In this thesis, we address edge weight disclosure, link disclosure and identity disclosure problems in publishing weighted network data. To counter these privacy risks while preserving high utility of the published data, we define two key privacy properties, namely edge weight unlinkability and node unlinkability. We design two novel anonymization schemes namely …

Extracting Deep Features From Short Ecg Signals For Early Atrial Fibrillation Detection, Xiaodan Wu, Yumeng Zheng, Chao-Hsien Chu, Zhen He

Research Collection School Of Computing and Information Systems

Atrial Fibrillation (AF) at an early stage has a short duration and is sometimes asymptomatic, making it difficult to detect. Although the use of mobile sensing devices has provided the possibility of real-time cardiac detection, it is highly susceptible to the noise signals generated by body movement. Therefore, it is of great importance to study early AF detection for mobile terminals with noise immunity. Extracting effective features is critical to AF detection, but most existing studies used shallow time, frequency or time-frequency energy (TFE) features with weak representation that need to rely on long ECG signals to capture the variation …

Three-Tier Storage Systems Based On Fog Computing, Ruiwen Shan

Student Theses and Dissertations

With the rapid development of cloud computing technology, cloud storage services are being paid more and more attention and used by a lot of people. The cloud storage services not only greatly reduce the overhead of local storage for the data owner, but also efficiently implement data sharing between users. However, in a cloud storage system, data owners store local data in the cloud, thereby losing the control of the data, which can easily lead to the leakage of user data. For example, a cloud service provider can privately view a user’s sensitive data and even reveal data to users …

An Efficient Ddos Attack Detection Framework For Vehicular Communication, Kolandaisamy Raenu

Student Works (2020-2029)

Vehicular Ad Hoc Networks (VANETs) are rapidly gaining attention due to the diversity of services that they can potentially offer. VANET is a wireless network that allows vehicles to interconnect and communicate with other nearby vehicles and Road Side Units (RSUs). In VANET, each vehicle is considered as a node which is equipped with an On-Board Unit (OBU) and an Application Unit (AU). The nodes may connect and communicate with each other directly (i.e., Vehicle to Vehicle (V2V)) or through RSUs (i.e., Vehicle to Infrastructure (V2I)). This is primarily for alleviating an Intelligent Transport System (ITS) that aims to provide …

Cybersecurity Behavioural Model For Students In The Tertiary Institutions, Boluwatife Fatokun Faith

Student Works (2020-2029)

Humans are majorly identified as the weakest link in cybersecurity. Tertiary institution student’s face lot of cybersecurity issues due to their increased Internet exposure, however cybersecurity behavioural studies focusing on tertiary students is limited. This study focused on investigating tertiary institutions students’ cybersecurity behaviour, via validated cybersecurity factors, Perceived Vulnerability (PV); Perceived Barriers (PBr); Perceived Severity (PS); Security Self-Efficacy (SSE); Response Efficacy (RE); Cues to Action (CA); Peer Behaviour (PBhv); Computer Skills (CS); Internet Skills (IS); Prior Experience with Computer Security Practices (PE); Perceived Benefits (PBnf); and a newly added factor, Familiarity with Cyber-Threats (FCT), to explore the factors relationship …

Integrated Mobile And Web-Based Application For Enhancing Delivery Of Hiv/Aids Healthcare Information In Tanzania, Ibrahim Mwammenywa

Tanzania Journal of Engineering and Technology (TJET)

This study aims to develop an integrated e-health platform for enhancing delivery of HIV/AIDS healthcare information in Tanzania, which consists of a mobile application and a web-based system. The study is based on the system's functional and non-functional requirements for an e-health system for delivery of HIV/AIDS healthcare information. The Rapid Application Development (RAD) model was adopted during the system development. The system requirements were modelled into Data Flow Diagram (DFD) in order to obtain the clear flow of the HIV/AIDS healthcare information between the clients and HIV/AIDS healthcare practitioners. With the use of different software development tools and environment …

The Potentials Of Faecal Sludge Treatment Using Local Conditioners In Tanzania: A Review, Doglas Benjamin1

Tanzania Journal of Engineering and Technology (TJET)

Worldwide, every day human beings generate millions of tons of Faecal Sludge (FS), which is rich in water, nutrients, energy, and organic compounds. Yet FS is not being managed in a way that permits us to derive value from its reuse, while at the same time, millions of farmers struggle with depleted soils and lack of water. In most of the developing countries, energy for cooking is mainly derived from cutting of trees, either as wood or charcoal. Resource recovery and reuse from FS can create livelihoods, enhance food security, support green economies, reduce waste and contribute to cost recovery …

Adversarial Attack On Neural Machine Translation System, Abijith K. P.

Master’s Dissertations

Nowadays Deep Neural Network based solutions are deployed to solve numerous tasks. Thus, it has become absolutely important to study the robustness of these systems. Machine Translation is one of the popular applications of Deep Neural Networks. This thesis studies the robustness of Neural Machine Translation systems by generating adversarial examples with the objective to fool the model. Whenever there is a change in the source, i.e. when a word in the input sentence is replaced by an unrelated word, the translation system is supposed to reflect the changes while doing translation. These unwanted invariance learned by the model is …

Cybersecurity Framework And Algorithms For Prioritized Vulnerability Mitigation (Cyfer): An Adoption To Blockchain Systems, Sri Nikhil Gupta Gourisetti

Theses and Dissertations

Cybersecurity vulnerability assessment tools, frameworks, methodologies, and processes are commonly used to understand the cybersecurity maturity and posture of a system or a facility. Those tools are strictly developed based on standards defined by organizations such as the National Institute of Standards and Technology (NIST) and the U.S. Department of Energy, and the majority of these tools and frameworks do not provide a platform to prioritize the requirements to reach a desired cybersecurity maturity. To address that challenge, we used multi-criteria decision analysis (MCDA) techniques to develop a framework and a software application family called the Cybersecurity Framework and Algorithms …

Cyberbullying And Cybervictimization In Tanzanian Secondary Schools: Prevalence And Predictors, Hezron Zacharia Onditi, Jennifer Shapka

Journal of Humanities and Social Sciences

This study explored cyberbullying and cybervictimization, and the role of socio demographic and access to technology variables for Tanzanian adolescents. A self-report questionnaire was completed by secondary school students aged 14 to 18 (Form 1 to Form IV). Results provide evidence that online violence is increasingly becoming a problem of concern for Tanzanian adolescents. In particular, whereas 42% of the students reported to have cyberbullied others using electronic communication devices, 58% admitted having experienced cybervictimization. Also, results showed that students who spend more time online, share cellphones with others, and who access digital devices in a private location are more …

Incentivizing Cyber Security Investment In The Power Sector Using An Extended Cyber Insurance Framework, Jack P. Rosson, Mason J. Rice, Juan Lopez Jr., R. David Fass

Faculty Publications

Collaboration between the DHS Cybersecurity and Infrastructure Security Agency (CISA) and public-sector partners has revealed that a dearth of cyber-incident data combined with the unpredictability of cyber attacks have contributed to a shortfall in first-party cyber insurance protection in the critical infrastructure community. This research explores the foundations of insurance theory and adopts behavioral manipulation methods to incentivize cyber-security investment. We validate the model by applying power industry performance data from 2013-2015 to assess risk facing the industry. Results show that the model can successfully discriminate between individual power companies as well as geographic regions on the basis of risk …

Gpu Acceleration Of Ciphertext-Policy Attribute-Based Encryption, Kai Fan

Student Theses and Dissertations

With the development of cloud computing, data security became popular in recent decades. The public key cryptography has its limitation for a considerable number of receivers, which need encrypt the plaintext several times which based on the receivers' number. Bethencourt. Et al., introduced Ciphertext-policy Attribute-based encryption (ABE) in 2007. CP-ABE became one of the hottest topics in the cryptography system. Because of the advantage of CP-ABE system, which is easy to use for remote storage or distributed data centers. Meanwhile, CP-ABE can provide fine-grain access control, which has the flexibility to send ciphertexts. However, it has such advantages, but the …

Virtual Hearings And Blockchain Technology Solutions In Criminal Law, Chantell Bergquist

Political Science Theses and Capstones

Technology has evolved and raided our personal and professional lives. Although the courts are not immune to the advancement and integration of technology, the courts are not keeping up with relevant technological advancements. Historically, courts have been hesitant to embrace new technologies despite the Federal Rules of Civil Procedure and the American Bar Association Model Rules of Professional Conduct. Rule 1 of the Federal Rules of Civil Procedure creates the right to a “just, speedy, and inexpensive determination of every action and proceeding.” Likewise, the American Bar Association Model Rules of Professional Conduct have determined attorneys must “keep abreast of …

Adapting Financial Technology Standards To Blockchain Platforms, Gabriel Bello

Theses and Dissertations

Traditional payment systems have standards designed to keep transaction data secure, but blockchain systems are not in scope for such security standards. We compare the Payment Application Data Security Standard’s (PA-DSS) applicability towards transaction-supported blockchain platforms to test the standard’s applicability. By highlighting the differences in implementation on traditional and decentralized transaction platforms, we critique and adapt the standards to fit the decentralized model. In two case studies, we analyze the QTUM and Ethereum blockchain platforms’ industry compliance, as their payment platforms support transactions equivalent to that of applications governed by the PA-DSS. We determine QTUM’s and Ethereum’s capabilities to …

Computational Thinking And Literacy, Sharin Rawhiya Jacob, Mark Warschauer

Journal of Computer Science Integration

Today’s students will enter a workforce that is powerfully shaped by computing. To be successful in a changing economy, students must learn to think algorithmically and computationally, to solve problems with varying levels of abstraction. These computational thinking skills have become so integrated into social function as to represent fundamental literacies. However, computer science has not been widely taught in K-12 schools. Efforts to create computer science standards and frameworks have yet to make their way into mandated course requirements. Despite a plethora of research on digital literacies, research on the role of computational thinking in the literature is sparse. …

Practical Attribute-Based Multi-Keyword Search Scheme In Mobile Crowdsourcing, Yinbin Miao, Jianfeng Ma, Ximeng Liu, Xinghua Li, Zhiquan Liu, Hui Li

Research Collection School Of Computing and Information Systems

Cloud-based mobile crowd-sourcing has been an attractive solution to provide data storage and share services for resource-limited mobile devices in a privacy-preserving manner, but how to enable mobile users to issue search queries and achieve fine-grained access control over ciphertexts simultaneously is still a big challenge for various circumstances. Although the ciphertext-policy attribute-based keyword search technology combining attribute-based encryption with searchable encryption has become a hot research topic, it just deals with equivalent attributes rather than more practical attribute comparisons, like “greater than” or “less than.” In this paper, we devise a practical cryptographic primitive called attribute-based multi-keyword search scheme …

Ua8 It Security Bulletins, Wku Information Technology

WKU Administration Documents

IT Security Bulletins issued in 2018 to faculty and staff via email.

• Ciampa, Mark. Protecting Your Critical Email Password
• Alteryx Data Breach
• Securing the Human
• New to WKU?
• Spam
• University Policy
• Personnel Changes
• Password Extortion
• Facebook Messenger Scam
• Privacy
• Phishing

Privacy In Iot Cloud, Aftab Ahmad, Ravi Mukkamala, Karthik Navuluri

Computer Science Faculty Publications

We present a framework for privacy preservation in an information cloud of IoT devices. We contend that privacy provisioning should be located in the user device and must protect the user, the information, and the device from breaches in privacy. We elaborate on how the layered privacy model can ensure such privacy provisioning, and justify the device being the provisioning point instead of the cloud alone. We present the point of view that, due to resource limitations of the IoT devices in general, the privacy preserving measures need to be hard-coded in the device technology. We fall short of suggesting …

Ua8 It Security Bulletin, Wku Information Technology

WKU Administration Documents

WKU Information Technology security bulletin issued to faculty & staff via email.

• Ciampa, Mark. Ransomware
• Securing the Human
• New to WKU?
• Phone Scams
• Phishing
• SMiShing
• Handling Sensitive Data
• University Policy

Ict Adoption And Use In Tanzania Smes, Cuthbert Msuya

Tanzania Journal of Engineering and Technology (TJET)

The purpose of this paper was to establish the status of ICTs adoption and use in Tanzania SMEs. Previously, it was shown that there is a shortage of comprehensive, accurate and up to date data on many aspects of the SMEs sector including the level of ICT adoption and use. This has affected government efforts aimed at development of this important sector in the economic development of the country. Results show that: (i) By year 2014, adoption of ICTs in SMEs had grown from almost non-existence in year 2004 to 80.1% computer technology use, and over 56.6% for use of …

Using Self-Organizing Maps For Computer Network Intrusion Detection, Manuel R. Parrachavez

Theses and Dissertations

Anomaly detection in user access patterns using artificial neural networks is a novel way of combating the ever-present concern of computer network intrusion detection for many entities around the world. Anomaly detection is a technique in network security in which a profile is built around a user's normal daily actions. The data collected for these profiles can be as following: file access attempts; failed login attempts; file creations; file access failures; and countless others. This data is collected and used as training data for a neural network.

There are many types of neural networks, such as multi-layer feed-forward network; recurrent …

Using Timing-Based Side Channels For Anomaly Detection In Industrial Control Systems, Stephen Dunlap, Jonathan W. Butts, Juan L. Lopez Jr., Mason J. Rice, Barry E. Mullins

Faculty Publications

The critical infrastructure, which includes the electric power grid, railroads and water treatment facilities, is dependent on the proper operation of industrial control systems. However, malware such as Stuxnet has demonstrated the ability to alter industrial control system parameters to create physical effects. Of particular concern is malware that targets embedded devices that monitor and control system functionality, while masking the actions from plant operators and security analysts. Indeed, system security relies on guarantees that the assurance of these devices can be maintained throughout their lifetimes. This paper presents a novel approach that uses timing-based side channel analysis to establish …

Towards Trustworthy Version Control Systems: Enhancing The Security Of Subversion, Ruchir Arya

Theses

Software development often relies on a Version Control System (VCS) to manage the source code, documentation and configuration of files. A VCS allows team development in which multiple developers can work simultaneously on source code updates. It also provides the ability to keep track of the historical changes made to the data over time, including the ability to retrieve previous versions of the source code in order to locate and fix bugs, and roll back to earlier versions in case the working version becomes buggy or unstable.

Apache Subversion (SVN) is a popular version control system that uses a client-server …

Cybersecurity Best Practices For Information Professionals, Darla Jackson

Other Faculty Publications

No abstract provided.

Pointing Analysis And Design Drivers For Low Earth Orbit Satellite Quantum Key Distribution, Jeremiah A. Specht

Theses and Dissertations

The world relies on encryption to perform critical and sensitive tasks every day. If quantum computing matures, the capability to decode keys and decrypt messages becomes possible. Quantum key distribution (QKD) is a method of distributing secure cryptographic keys which relies on the laws of quantum mechanics. Current implementations of QKD use fiber-based channels which limit the number of users and the distance between users. Satellite-based QKD using free-space channels is proposed as a feasible secure global communication solution. Since a free-space link does not use a waveguide, pointing a transmitter to receiver is required to ensure signal arrival. In …

Defining Cybercrime & Government Involvement, Kristen Kile

Senior Seminars

No abstract provided.

Cyber Security & Cyber Crimes/Threats, Chad A. Wood

Senior Seminars

No abstract provided.

Git As An Encrypted Distributed Version Control System, Russell G. Shirey

Theses and Dissertations

This thesis develops and presents a secure Git implementation, Git Virtual Vault (GV2), for users of Git to work on sensitive projects with repositories located in unsecure distributed environments, such as in cloud computing. This scenario is common within the Department of Defense, as much work is of a sensitive nature. In order to provide security to Git, additional functionality is added for confidentiality and integrity protection. This thesis examines existing Git encryption implementations and baselines their performance compared to unencrypted Git. Real-world Git repositories are examined to characterize typical Git usage and determine if the existing Git encryption implementations …

Cyber Security And Management Within The Government, Brandon Larsen

Senior Seminars

No abstract provided.