Open Access. Powered by Scholars. Published by Universities.®

Cybersecurity Commons™

Open Access. Powered by Scholars. Published by Universities.®

Discipline
Institution
Keyword
Publication Year
Publication
Publication Type
File Type

Articles 451 - 480 of 480

Full-Text Articles in Cybersecurity

Thinking About Technology - Cybersecurity: Breaches And Heartbleed To Byod—Are Bankers, Entertainment Company Executives, Celebrities, Postal Workers, Ice Cream Lovers, Home Builders, And Cios The Only Ones Who Should Be Concerned?, Darla Jackson Jan 2015

Thinking About Technology - Cybersecurity: Breaches And Heartbleed To Byod—Are Bankers, Entertainment Company Executives, Celebrities, Postal Workers, Ice Cream Lovers, Home Builders, And Cios The Only Ones Who Should Be Concerned?, Darla Jackson

Other Faculty Publications

In 2013 and 2014, we have continually heard about data security breaches and cybersecurity has become a major concern for the legal community. Reports of information leakage and security breach concerns at legal information vendors, firms, universities, and even courts continued to increase. Ms. Jackson addresses the increasing cybersecurity concerns and suggests some considerations for law librarian, legal information professionals, and the organizations they serve in determining the measures to address security threats.

Go to article

Network Security: A Practical And Technical Approach, Logan Berg Apr 2014

Network Security: A Practical And Technical Approach, Logan Berg

Senior Seminars

No abstract provided.

Go to article

Cloud Computing Risks And Risk Management, Anthony Hopkins Apr 2014

Cloud Computing Risks And Risk Management, Anthony Hopkins

Senior Seminars

Cloud computing is an emerging technology that is becoming more and more popular every year. With the many benefits that the cloud provides it is hard for corporations not to integrate it into their business operations. With the increase usage in cloud computing substantial risks and concerns are beginning to surface. External data breaches, malicious insiders, outages, vendor lock-in, and insufficient due diligence are a couple of the major risks and concerns that need to be on the minds of the customer and the cloud service provider. The customer and the provider needs to know how to mitigate the risks …

Go to article

Impact Of The Shodan Computer Search Engine On Internet-Facing Industrial Control System Devices, Roland C. Bodenheim Mar 2014

Impact Of The Shodan Computer Search Engine On Internet-Facing Industrial Control System Devices, Roland C. Bodenheim

Theses and Dissertations

The Shodan computer search engine crawls the Internet attempting to identify any connected device. Using Shodan, researchers identified thousands of Internet-facing devices associated with industrial controls systems (ICS). This research examines the impact of Shodan on ICS security, evaluating Shodan's ability to identify Internet-connected ICS devices and assess if targeted attacks occur as a result of Shodan identification. In addition, this research evaluates the ability to limit device exposure to Shodan through service banner manipulation. Shodan's impact was evaluated by deploying four high-interaction, unsolicited honeypots over a 55 day period, each configured to represent Allen-Bradley programmable logic controllers (PLC). All …

Go to article

Directed Graph Cryptosystems, Kurt Anson Boberg Jan 2014

Directed Graph Cryptosystems, Kurt Anson Boberg

All Master's Theses

Cryptography is a necessary tool for secrecy in our increasingly connected and data-driven world. As advances are made in both mathematics and com­puter hardware design, existing cryptosystems must be improved or replaced to maintain privacy of sensitive data. In this paper we propose a novel cryptosystem based upon an algorithmic traversal of a directed graph (digraph). The sys­tem is resistant to the most common attacks on stream-type ciphers that do not use known-plaintext attacks. However, given a length n, the minimum number of vertices a digraph must contain to guarantee a cycle of at least n length is un­known, making …

Go to article

Meeting Minutes, Wku University Senate Nov 2013

Meeting Minutes, Wku University Senate

Faculty Senate

Meeting regarding meeting procedures, budget, faculty vacancies, accreditation, Information Technology policies, electronic mail, Colonnade plan, SITE evaluations, and faculty governance.

Go to article

Exploitation Of Rf-Dna For Device Classification And Verification Using Grlvqi Processing, Donald R. Reising Dec 2012

Exploitation Of Rf-Dna For Device Classification And Verification Using Grlvqi Processing, Donald R. Reising

Theses and Dissertations

This dissertation introduces a GRLVQI classifier into an RF-DNA fingerprinting process and demonstrates applicability for device classification and ID verification. Unlike MDA/ML processing, GRLVQI provides a measure of feature relevance that enables Dimensional Reduction Analysis (DRA) to enhance the experimental-to-operational transition potential of RF-DNA fingerprinting. Using 2D Gabor Transform RF-DNA fingerprints extracted from experimentally collected OFDM-based 802.16 WiMAX and 802.11 WiFi device emissions, average GRLVQI classification accuracy of %C greater than or equal to 90% is achieved using full and reduced dimensional feature sets at SNR greater than or equal to 10.0 dB and SNR greater than or equal to …

Go to article

Design And Analysis Of A Dynamically Configured Log-Based Distributed Security Event Detection Methodology, Michael R. Grimaila, Justin M. Myers, Robert F. Mills, Gilbert L. Peterson Jul 2012

Design And Analysis Of A Dynamically Configured Log-Based Distributed Security Event Detection Methodology, Michael R. Grimaila, Justin M. Myers, Robert F. Mills, Gilbert L. Peterson

Faculty Publications

Military and defense organizations rely upon the security of data stored in, and communicated through, their cyber infrastructure to fulfill their mission objectives. It is essential to identify threats to the cyber infrastructure in a timely manner, so that mission risks can be recognized and mitigated. Centralized event logging and correlation is a proven method for identifying threats to cyber resources. However, centralized event logging is inflexible and does not scale well, because it consumes excessive network bandwidth and imposes significant storage and processing requirements on the central event log server. In this paper, we present a flexible, distributed event …

Go to article

Computer Viruses, Darrin Mckenzie Jan 2012

Computer Viruses, Darrin Mckenzie

Senior Seminars

No abstract provided.

Go to article

Cloud Storage, Matthew G. Chaulklin Jan 2012

Cloud Storage, Matthew G. Chaulklin

Senior Seminars

Technology is forever changing in our world today. The way in which we receive information must match the convenience of our current technology. As of now most information that is stored is often restricted to the site of the server when one wants to access it. Cloud storage can change this process by allowing users anywhere to access the information they need. This technology is a solution to our storage problems as it is convenient for any user to obtain information. Unfortunately this technology has various large problems, like security, but hopefully in the future these can be solved. Overall, …

Go to article

An Empirical Analysis Of The Cascade Error Reconciliation Protocol For Quantum Key Distribution, Timothy I. Calver, Michael R. Grimaila, Jeffrey W. Humphries Oct 2011

An Empirical Analysis Of The Cascade Error Reconciliation Protocol For Quantum Key Distribution, Timothy I. Calver, Michael R. Grimaila, Jeffrey W. Humphries

Faculty Publications

Modern cryptography provides the means to securely communicate data between authorized entities by using mathematical transformations which require pre-shared cryptographic keys. The need to share key material with authorized entities in a secure, cost efficient and timely manner has driven efforts to develop new key distribution methods. A promising method is Quantum Key Distribution (QKD) which is considered to be “unconditionally secure” because it relies upon the immutable laws of quantum physics rather than computational complexity as the basis for its security. An important component of any QKD system is the error reconciliation protocol which is used to identify and …

Go to article

A Novel Malware Target Recognition Architecture For Enhanced Cyberspace Situation Awareness, Thomas E. Dube Sep 2011

A Novel Malware Target Recognition Architecture For Enhanced Cyberspace Situation Awareness, Thomas E. Dube

Theses and Dissertations

The rapid transition of critical business processes to computer networks potentially exposes organizations to digital theft or corruption by advanced competitors. One tool used for these tasks is malware, because it circumvents legitimate authentication mechanisms. Malware is an epidemic problem for organizations of all types. This research proposes and evaluates a novel Malware Target Recognition (MaTR) architecture for malware detection and identification of propagation methods and payloads to enhance situation awareness in tactical scenarios using non-instruction-based, static heuristic features. MaTR achieves a 99.92% detection accuracy on known malware with false positive and false negative rates of 8.73e-4 and 8.03e-4 respectively. …

Go to article

Detecting Software Attacks By Monitoring Electric Power Consumption Patterns, Grant A. Jacoby, Nathaniel J. Davis Iv, Randolph C. Marchany Jan 2011

Detecting Software Attacks By Monitoring Electric Power Consumption Patterns, Grant A. Jacoby, Nathaniel J. Davis Iv, Randolph C. Marchany

AFIT Patents

Software attacks such as worms and viruses are detected in an electronic device by monitoring power consumption patterns. In a first embodiment, software attacks are detected by an increase in power consumption. The increased power consumption can be caused by increased network traffic, or by increased activity in the microprocessor. Monitoring power consumption is particularly effective for detecting DOS/flooding attacks when the electronic device is in an idle state. In a second embodiment, a power consumption signal is converted to the frequency domain (e.g., by fast Fourier transform). The highest amplitude frequencies are identified. Specific software attacks produce characteristic frequencies …

Go to article

Statistical Tools For Linking Engine-Generated Malware To Its Engine, Edna Chelangat Milgo Dec 2009

Statistical Tools For Linking Engine-Generated Malware To Its Engine, Edna Chelangat Milgo

Theses and Dissertations

Malware-generating engines challenge typical malware analysts by requiring them to quickly extract and upload to their customers' machines, a signature for each of a possibly vast number of never-before-seen malware instances that an engine can generate in a short amount of time In this thesis we propose and evaluate two methods for linking variants of engine-generated malware to its engine. The proposed methods use the w-gram frequency vector (NFV) of the opcode mnemonics of an engine-generated malware in- stance as a feature vector for the instance. An NFV is a tuple that maps «-grams with their frequencies. The in-formation contained …

Go to article

Open Source Software In Health Information Systems: Opportunities And Challenges, Hashim Twaakyondo Jun 2008

Open Source Software In Health Information Systems: Opportunities And Challenges, Hashim Twaakyondo

Tanzania Journal of Engineering and Technology (TJET)

The paper presents results of a study seeking to identify constraining and motivating factors associated with the adoption and use of Free Open Source Software to computerise health Information Systems in a developing country. The study approach is interpretive research to case study with a triangulation of several qualitative data collection methods such as interviews, group discussions and document analysis. The findings indicate that using open source software has advantages and disadvantages. The advantages are low entry cost to adopting software, possibilities of software localization, avoiding being hostage of proprietary software and foster knowledge acquisition among software developers. The disadvantages …

Go to article

Socio-Economic Impacts Of Computer Viruses In Tanzania, M Victor Jun 2006

Socio-Economic Impacts Of Computer Viruses In Tanzania, M Victor

Tanzania Journal of Engineering and Technology (TJET)

This paper reports on a research project conducted with an objective of identifying and assessing various approaches used by different computer users (Management, System Administrators and end users) in Tanzania to combat computer viruses (CVs), and to assess users' awareness level on CVs. Specifically, the study aimed at assessing the awareness level on CVs to the Tanzanian business community; analyze the socio -economic impact caused by CVs in Tanzania and; assess existing methods, capacity and limitations on controlling CVs in Tanzania. Data was collected using both questionnaires and interview from financial institutions such as NBC and BOT, and telecommunications sector …

Go to article

Computer Network Security And Arl Libraries, Deeann Allison, Scott Childers Mar 2006

Computer Network Security And Arl Libraries, Deeann Allison, Scott Childers

University of Nebraska-Lincoln Libraries: Faculty Publications

This article reviews current recommendations for computer security practices for staff computing, summarizes current practices in United States Association of Research Libraries and proposes further areas to explore.

Go to article

Social Engineering In The Age Of Ai, Mohammad A. Saleh Nov 2004

Social Engineering In The Age Of Ai, Mohammad A. Saleh

Cybersecurity Undergraduate Research Showcase

The next great invention is artificial intelligence. AI has grown rapidly over the last 15 years and has brought both advantages and disadvantages to everyday society. One of the most concerning disadvantages highlighted in recent years is the rise of social engineering attacks. Social engineering comes in many different forms, making it difficult to identify at times. With the development of AI, these attacks have become even harder to detect, prevent, and stop. This research essay explores the different types of AI-driven social engineering attacks, how they occur, why they happen, and the impact they have on individuals and organizations.

Go to article

Review Of The Product Development Process And Information Flow In The Manufacturing Industry: Problems And A Possible Wav Forward, E Opiyo Jun 2004

Review Of The Product Development Process And Information Flow In The Manufacturing Industry: Problems And A Possible Wav Forward, E Opiyo

Tanzania Journal of Engineering and Technology (TJET)

No abstract provided.

Go to article

Internet Information Server Scanner : Scanning On Url Vulnerabilities, Yu Jin Tan Jan 2002

Internet Information Server Scanner : Scanning On Url Vulnerabilities, Yu Jin Tan

Student Works (2000-2009)

This dissertation analyzes weaknesses on web servers, focusing on Microsoft's Internet Information Server (HS). As part of the research, an HS scanner (HS-SCAN) has been implemented to probe only on URL vulnerabilities. The need for a vulnerability scanner stems from the alarming number of successful attacks on computer systems that are connected to the Internet. The security flaws threatening e-businesses and the Internet community has prompted bona fide defense measures. Internet firewalls - gateways controlling access between one network and all the others - became a must-have for any organization connecting to the Net. If the firewall is considered the …

Go to article

E-Jenayah Ancaman Alaf Digital, Ibrahim Mohamad Zaki Jan 2002

E-Jenayah Ancaman Alaf Digital, Ibrahim Mohamad Zaki

Student Works (2000-2009)

The Internet is the greatest technological innovation since the achievement of the industrial revolution, accomplished through amalgamation of information, communication and digital technology which then created the largest and widest ever computer networking system. Therefore, new sphere known as the Internet which is virtual in nature, also prominently name as cyber-world. Consequently, whole new structures of politicaL economy, social and culturally of society have been forced into us to accept the changes which then inaugurate ·with new electronic practices. Eventually, the Internet was created by the use of inter networking of the computing system throughout the world with help of …

Go to article

E-Pembelajaran Pakej Pembelajaran Enkripsi, Sarman Zulkurnain Jan 2002

E-Pembelajaran Pakej Pembelajaran Enkripsi, Sarman Zulkurnain

Student Works (2000-2009)

The existence of computers within the last three decades has opened the evolution of technology and knowledge. Executing variants works will become efficient using computers. This industry has developed and has to comply with consumer's demands and the evolutionary world of computers. Nevertheless, the misusing of this technology has effected more tight security measures to ensure the integrity of a technology remains. Hence, with the need of knowledge towards computer security, E- Pembelajaran: Pakej Pembelajaran Enkripsi (E- P: PPE) has been proposed to train students of Faculty of Computer Science and Information Technology (FCSIT) of encryption technics. Hopefully, E- P: …

Go to article

New Insights Into Business Continuity For Mcsb Systems Berhad, Farizah Zainuddin Jan 2002

New Insights Into Business Continuity For Mcsb Systems Berhad, Farizah Zainuddin

Student Works (2000-2009)

Business information availability is the lifeblood of a company and is the heart of an organisation's operation. Many companies invest a lot of money in developing reliable systems and infrastructure to accommodate the business information. But not many realise the need of business continuity until disaster is actually in front of them. This research paper will look how important is business continuity in an organisation. The study covered scopes of business impact analysis as well as step by step disaster recovery and backup planning process. The subject of the study is a Public Listed company in Malaysia, MCSB Systems Berhad. …

Go to article

Intrusion Detection Using Artificial Neural Network, Sze Kai Gan Jan 2002

Intrusion Detection Using Artificial Neural Network, Sze Kai Gan

Student Works (2000-2009)

According to this thesis title - Intrusion Detection Using Artificial Neural Network is whereby a neural network technology must be built inside the Intrusion Detection System (IDS). IDS is one of the security techniques, which is being used currently. It can be said that, Intrusion Detection System is a companion of the firewall, (of is beyond the firewall). The firewall is analog to the locker in (our houses to lock the windows and doors) to prevent intruders' break-in. Therefore, the IDS is a burglar alarm system to alert the user when an intruder successfully get through the firewall. In addition, …

Go to article

The Effectiveness Of Detection Methods In Intrusion Detection Systems, Hafiz Mohd Sarim Jan 2002

The Effectiveness Of Detection Methods In Intrusion Detection Systems, Hafiz Mohd Sarim

Student Works (2000-2009)

Access control mechanisms included in operating systems are not very effective in preventing intrusions by the most determined of attackers. An Intrusion Detection System (IDS) is a security software that is able to detect an intrusion when it occurs and can potentially prevent a system compromise from being completed. The actual detection is done by the detection method used by the IDS. Four detection methods are discussed and assessed in terms of their effectiveness in repelling intrusion types, vulnerability to classification errors; and also performance in practical implementation. Recommendations are made to improve the general effectiveness of the detection methods …

Go to article

Web Frauds And Possible Solutions, Hemant Joshi Mar 2000

Web Frauds And Possible Solutions, Hemant Joshi

IIMB Management Review

No abstract provided.

Go to article

System Login Authentication Using Voice Recognition And Other Ai Methods, Azizul Hasan Zati Hakim Jan 2000

System Login Authentication Using Voice Recognition And Other Ai Methods, Azizul Hasan Zati Hakim

Student Works (2000-2009)

As computer becomes a commodity in work places and households appliances used by all - be it male or female young or old - the issue of security and privacy are increasing from day to day. Today, every user wishes for a better way to protect sensitive data. For all the talk about beefing up system security, the most effective way to breach a user's personal files and applications is to guess his or her password. That's because in the interest of easy recall, familiar terms are most preferred by users in general when it come too remembering a password. …

Go to article

Packet Sniffer & Analyzer, Khoon Kok Ong Jan 2000

Packet Sniffer & Analyzer, Khoon Kok Ong

Student Works (2000-2009)

The communication of network is a complex process which cannot be seen by human beings. Even a computer that sit on a network can only knows the conversation within itself and others computer it talk to but not others computers· conversation that it didn't take part. Furthermore, the communication in network can be viewed as traffic which always triggers a lot of unsolved problems for computers to "talk. Therefore, to solve the problems we need to exactly know what really happened inside the network traffic. A variety of sniffing tools are invented for these purpose. All of these tools have …

Go to article

Enhanced Password-Based Authentication Protocol, Chee Kiam Lee Jan 2000

Enhanced Password-Based Authentication Protocol, Chee Kiam Lee

Student Works (2000-2009)

This dissertation introduces Enhanced Password-Based Authentication Protocol (E­PAP) System. E-PAP System combines asymmetric (public-key) and symmetric (secret-key) cryptography that allow two parties sharing a small shared secret to provide authentication service, exchange confidential and authenticated information over an insecure network like lntemet. E-PAP System also provides authentication service by using somelhing you know concept. It has some advantages over biometric which uses something you are concept and smancard that uses something you have concept, as it is free of equipment's physical limitations, accuracy and cost problem as well as other constraints. The core for E-PAP System is FreeSPEKE SDK, a …

Go to article

Application Of Vibrational Techniques In Determination Of Dynamic Properties Of Agricultural Products-State Of The Arton Of Vibrational Techniques In Determination Of Dynamic Properties Of Agricultural Products-State Of The Art, Silas Kajuna Dec 1999

Application Of Vibrational Techniques In Determination Of Dynamic Properties Of Agricultural Products-State Of The Arton Of Vibrational Techniques In Determination Of Dynamic Properties Of Agricultural Products-State Of The Art, Silas Kajuna

Tanzania Journal of Engineering and Technology (TJET)

Vibration is one of the techniques employed in the determination of dynamic properties of fruits and vegetables. It entails generation of a mechanical or acoustic vibrational signal which is propagated through the flesh of the agricultural material. A transducer is either attached or held close to the specimen to monitor the propagation of the signal through the specimen. The manner in which the signal is transmitted through the material is analyzed, and the dynamic properties of the specimen which relate to its firmness or its internal being are derived. The technique has been around for the past 30 years or …

Go to article

First Prev