Information Security Commons^™

Developing An Ai-Powered Chatbot To Support The Administration Of Middle And High School Cybersecurity Camps, Jonathan He, Chunsheng Xin

KSU Proceedings on Cybersecurity Education, Research and Practice

Throughout the Internet, many chatbots have been deployed by various organizations to answer questions asked by customers. In recent years, we have been running cybersecurity summer camps for youth. Due to COVID-19, our in-person camp has been changed to virtual camps. As a result, we decided to develop a chatbot to reduce the number of emails, phone calls, as well as the human burden for answering the same or similar questions again and again based on questions we received from previous camps. This paper introduces our practical experience to implement an AI-powered chatbot for middle and high school cybersecurity camps …

A Survey Of Serious Games For Cybersecurity Education And Training, Winston Anthony Hill Jr., Mesafint Fanuel, Xiaohong Yuan, Jinghua Zhang, Sajad Sajad

KSU Proceedings on Cybersecurity Education, Research and Practice

Serious games can challenge users in competitive and entertaining ways. Educators have used serious games to increase student engagement in cybersecurity education. Serious games have been developed to teach students various cybersecurity topics such as safe online behavior, threats and attacks, malware, and more. They have been used in cybersecurity training and education at different levels. Serious games have targeted different audiences such as K-12 students, undergraduate and graduate students in academic institutions, and professionals in the cybersecurity workforce. In this paper, we provide a survey of serious games used in cybersecurity education and training. We categorize these games into …

Factors That Influence Hipaa Secure Compliance In Small And Medium-Size Health Care Facilities, Wlad Pierre-Francois, Indira Guzman

KSU Proceedings on Cybersecurity Education, Research and Practice

This study extends the body of literature concerning security compliance by investigating the antecedents of HIPPA security compliance. A conceptual model, specifying a set of hypothesized relationships between management support, security awareness, security culture; security behavior, and risk of sanctions to address their effect on HIPAA security compliance is presented. This model was developed based on the review of the literature, Protection Motivation Theory, and General Deterrence Theory. Specifically, the aim of the study is to examine the mediating role of risk of sanctions on HIPAA security compliance.

Towards An Assessment Of Pause Periods On User Habituation In Mitigation Of Phishing Attacks, Amy Antonucci, Yair Levy, Martha Snyder, Laurie Dringus

KSU Proceedings on Cybersecurity Education, Research and Practice

Social engineering is the technique in which the attacker sends messages to build a relationship with the victim and convinces the victim to take some actions that lead to significant damages and losses. Industry and law enforcement reports indicate that social engineering incidents costs organizations billions of dollars. Phishing is the most pervasive social engineering attack. While email filtering and warning messages have been implemented for over three decades, organizations are constantly falling for phishing attacks. Prior research indicated that attackers use phishing emails to create an urgency and fear response in their victims causing them to use quick heuristics, …

Cyber-Assets At Risk (Car): Monetary Impact Of Personally Identifiable Information Data Breaches On Companies, Omer Ilker Poyraz

Engineering Management & Systems Engineering Theses & Dissertations

Cyber-systems provide convenience, ubiquity, economic advantage, and higher efficiency to both individuals and organizations. However, vulnerabilities of the cyber domain also offer malicious actors with the opportunities to compromise the most sensitive information. Recent cybersecurity incidents show that a group of hackers can cause a massive data breach, resulting in companies losing competitive advantage, reputation, and money. Governments have since taken some actions in protecting individuals and companies from such crime by authorizing federal agencies and developing regulations. To protect the public from losing their most sensitive records, governments have also been compelling companies to follow cybersecurity regulations. If companies …

Measuring Privacy Concerns With Government Surveillance And Right-To-Be-Forgotten In Nomological Net Of Trust And Willingness-To-Share, Gaurav Bansal, Fiona Fui-Hoon Nah

Research Collection School Of Computing and Information Systems

In the post Snowden revelations era, concerns related to government surveillance and oversight have come to the forefront. The ability of the Internet to remember “everything” (or forget anything) also raises a privacy concern associated with the “right to be forgotten”. Hence, in this paper, we propose and examine privacy concerns by extending the Hong and Thong’s (2013) model with the addition of two dimensions: right to be forgotten as well as government surveillance and oversight. We tested two different measurement models using privacy concerns as a second-order and a third-order construct within a nomological net that includes trusting beliefs …

Email Data Breach Analysis And Prevention Using Hook And Eye System, Shubhankar Jayant Jathar

Electronic Theses, Projects, and Dissertations

Due to the recent COVID-19 outbreak, there were a lot of data leaks from the health sector. This project is about the increase in data breach incidents that are taking place. In this project, There is an analysis of different types of breaches that are found online and are practiced to steal valuable information. Talking about different aspects that lead to data breaches and which are the main sector or main epicenter for data leaks. The analysis tells that most of the data breaches are done using emails and to overcome this limitation a system has been designed that will …

Evaluating And Securing Text-Based Java Code Through Static Code Analysis, Jeong Yang, Young Lee, Amanda Fernandez, Joshua Sanchez

Journal of Cybersecurity Education, Research and Practice

As the cyber security landscape dynamically evolves and security professionals work to keep apace, modern-day educators face the issue of equipping a new generation for this dynamic landscape. With cyber-attacks and vulnerabilities substantially increased over the past years in frequency and severity, it is important to design and build secure software applications from the group up. Therefore, defensive secure coding techniques covering security concepts must be taught from beginning computer science programming courses to exercise building secure applications. Using static analysis, this study thoroughly analyzed Java source code in two textbooks used at a collegiate level, with the goal of …

Malaware Defensive: A Game To Train Users To Combat Malware, Tyler Moon, Tamirat Abegaz, Bryson Payne, Abi Salimi

Journal of Cybersecurity Education, Research and Practice

Several research findings indicate that basic cyber hygiene can potentially deter the majority of cyber threats. One of the ways cybersecurity professionals can prepare users to ensure proper hygiene is to help them develop their ability to spot the difference between normal and abnormal behavior in a computer system. Malware disrupts the normal behavior of a computer system. The lack of appropriate user training has been one of the main reasons behind the exposure of computer systems to threats, from social engineering to viruses, trojans, and ransomware. Basic knowledge about common behavioral characteristics of malware could help users identify potentially …

The Mental Health Of Black Men: Stabilizing Trauma With Emotional Intelligence, Davis Brandford

School of Professional Studies

The purpose of this study is to explore the relationship between the impact of historical trauma and barriers on African-American males and the effects of emotional intelligence in reducing traumatic experiences. This research study is based on previous research and studies that explores the historical review of African- American oppression, trauma in black males, and mental health in the African American community. This study will utilize the historical trauma and emotional intelligence theories to explore barriers that African Americans have experienced over time and the role emotional intelligence can play to reduce trauma. It also explores the relevance of historical …

Crisis Communication And Executive Leadership: Ethical Shortcomings In Government, Daniel Davidoff

School of Professional Studies

This research thesis project is an analysis of how and why governments fail in their attempts at crisis communication. The hypotheses tested are: there exists a negative correlation between unethical leadership and successful crisis communication practices. And governments are more likely to experience these failures due to ethical disconnects in modern politics. Research includes a review of relevant academic literature regarding crisis communication theory, as well as the ethical framework that can be applied to that theory. Cases considered are Hurricane Katrina, the choking death of Eric Garner, and the COVID-19 global pandemic. The research project concludes with a recommendation …

Becoming A Trauma Informed Care Organization, Katie Robery

School of Professional Studies

The Brockton Area Mutli Services Inc or BAMSI is a private, non-profit human services organization providing services to adults and children with developmental disabilities, mental illness, behavioral health, and public health needs. Founded in 1975, BAMSI is in the business of “bringing people and services together.” BAMSI transforms lives by building the capacity of individuals, families, organizations, and communities to learn, thrive, and achieve their goals. BAMSI services promote the recovery, resiliency, and self-determination of the people we serve. As a human services leader, we strive to be the provider of choice. (Duffy, 2019) With an emphasis on respect and …

Diversity And Inclusion In The Workplace; Benefits, Challenges And Strategies For Success, Margaret Leone

School of Professional Studies

In this case study I have explored the topic of diversity and inclusion in the workplace and learned how it can transform a business. When D&I is a serious business strategy supported by senior management it can help recruit and retain top talent, increase profits, and unleash creativity among other benefits. It is important to have leadership that is inclusive so they can set the tone for their staff

This case study evaluates the D&I culture at The Children’s Study Home (CHS) and explores best practices for improvement. CHS is a non-profit human service agency in Western MA, that’s mission …

Young People, Social Media, And Impacts On Well-Being, Andreana Nop

School of Professional Studies

Millennials and Generation Z were born into an age where social media and digital technology have been integrated in nearly all aspects of their lives. While social media has proven to be a valuable communication tool in connecting with each other and sharing information, the long-term psychosocial effects are beginning to become more apparent as social media matures. This study analyzes what these effects are and how communication is impacted for these young people. It questions how young people can leverage social media and decrease harm. The study will be conducted through a literature review and analysis. Its goal is …

Managing Burnout And Secondary Traumatic Stress In Human Service Organizations, Naomi Ingram

School of Professional Studies

This Case Study explores how burnout and secondary traumatic stress impact staffing, service delivery, and organizational effectiveness in a human service agency. The Case Study is focused around Ascentria Care Alliance’s Children & Family Services in Massachusetts, which encompasses three foster care programs: the Unaccompanied Refugee Minor (URM), Division of Children’s Services (DCS), and Intensive Foster Care (IFC) programs. Both individual and organizational approaches are needed to most effectively address burnout and secondary traumatic stress. Individual workers need to build resilience factors such as self-compassion and mindfulness, set appropriate boundaries with clients, engage in ongoing training, support, consultation, and supervision, …

Rest Homes: Their Value On Massachusetts Healthcare Continuum, Ronald Pawelski

School of Professional Studies

In Massachusetts, rest homes provide cost effective care for elderly residents in a community setting. Rest homes, however, are not well-understood and the rest home industry itself suffers greatly, not only from a lack of understanding of the services they provide, but also from the strain on their financial resources due to both competition from other healthcare options and insufficient reimbursement rates for residents’ care.

The paper explores the financial challenges facing the industry and outlines the data that speaks to the value of the rest home care option for both the residents themselves and Massachusetts state healthcare budget. It …

A Case Study On The Best Practices Of The Facilitating Organization For Peer Recovery Support Services In The State Of New Hampshire, Maggie Ringey

School of Professional Studies

In working with the Facilitating Organization for Peer Recovery Support Services through Harbor Homes, I have found that the Recovery Community Organizations that receive support through the FO provide valuable services that help individuals that struggle with substance use disorder achieve and maintain long term sobriety and recovery. The RCOs throughout New Hampshire bridge gaps in services and treatments that are left untouched by traditional clinical methods and through regular check ins, participants at the RCOs have reported that the services provided resulted in positive outcomes in their lives. Throughout the course of this research, I found that the RCOs …

Elder Isolation In Immigrant Communities, Jessica Da Silva

School of Professional Studies

This paper examined loneliness, as a measurement of perceived social isolation, in older immigrant adults. Previous research shows that older adults are more likely to experience social isolation and loneliness. Both of which have a direct correlation with their overall health (Wilson & Molton, 2010, Cacioppo et al., 2002) and mortality rates (Holt-Lunstad et al, 2015). Another international study found that immigrants in particular are at a higher risk for experiencing loneliness (Government of Canada, 2018). In this study, 35 immigrants and non-immigrants participants answered a survey which included 20 questions from the UCLA Loneliness Scale Version 3 (Russel, 1996). …

Dallas, Tx: The Staggering Wealth Gap, Macy Golman

School of Professional Studies

In the summer of 2019, I had the privilege of serving as an AmeriCorps member with an organization called Equal Heart. One of Equal Heart’s main initiatives was to provide meals to children in underserved populations, to make sure that without school in session, these children would still be receiving food. Unfortunately, in many instances, without these meals, many of the children we served would likely not know when they would be eating their next fulfilling meal. There were certain pockets of Dallas that we would travel to everyday, places that were fifteen minutes maximum from my house, but places …

Pmkt: Privacy-Preserving Multi-Party Knowledge Transfer For Financial Market Forecasting, Zhuoran Ma, Jianfeng Ma, Yinbin Miao, Kim-Kwang Raymond Choo, Ximeng Liu, Xiangyu Wang, Tengfei Yang

Research Collection School Of Computing and Information Systems

While decision-making task is critical in knowledge transfer, particularly from multi-source domains, existing knowledge transfer approaches are not generally designed to be privacy preserving. This has potential legal and financial implications, particularly in sensitive applications such as financial market forecasting. Therefore, in this paper, we propose a Privacy-preserving Multi-party Knowledge Transfer system (PMKT), based on decision trees, for financial market forecasting. Specifically, in PMKT, we leverage a cryptographic-based model sharing technique to securely outsource knowledge reflected in decision trees of multiple parties, and design a secure computation mechanism to facilitate privacy-preserving knowledge transfer. An encrypted user-submitted request from the target …

Data Breach Consequences And Responses: A Multi-Method Investigation Of Stakeholders, Hamid Reza Nikkhah

Graduate Theses and Dissertations

The role of information in today’s economy is essential as organizations that can effectively store and leverage information about their stakeholders can gain an advantage in their markets. The extensive digitization of business information can make organizations vulnerable to data breaches. A data breach is the unauthorized access to sensitive, protected, or confidential data resulting in the compromise of information security. Data breaches affect not only the breached organization but also various related stakeholders. After a data breach, stakeholders of the breached organizations show negative behaviors, which causes the breached organizations to face financial and non-financial costs. As such, the …

The Future Of Work Now: Cyber Threat Attribution At Fireeye, Thomas H. Davenport, Steven M. Miller

Research Collection School Of Computing and Information Systems

One of the most frequently-used phrases at business events these days is “the future of work.” It’s increasingly clear that artificial intelligence and other new technologies will bring substantial changes in work tasks and business processes. But while these changes are predicted for the future, they’re already present in many organizations for many different jobs. The job and incumbent described below is an example of this phenomenon. It’s a clear example of an existing job that’s been transformed by AI and related tools.

Divergent Student Views Of Cybersecurity, Susan E. Ramlo, John B. Nicholas

Journal of Cybersecurity Education, Research and Practice

Cybersecurity is a worldwide issue and concern. Prior studies indicate that many people do not use cybersecurity best practices. Although these prior studies used large-scale surveys or interviews, this study used Q methodology [Q] because Q provides greater insight than Likert-format surveys. In fact, Q was created to scientifically study subjectivity. Within a Q study, various stages as well as philosophical, epistemological, and ontological principles represent a complete methodology. At first, Q researchers collect items that represent the broad range of communications about the topic (called the concourse). Although the items can be pictures, scents, or other means of communication, …

Teaching About The Dark Web In Criminal Justice Or Related Programs At The Community College And University Levels., Scott H. Belshaw, Brooke Nodeland, Lorrin Underwood, Alexandrea Colaiuta

Journal of Cybersecurity Education, Research and Practice

Increasingly, criminal justice practitioners have been called on to help solve breaches in cyber security. However, while the demand for criminal justice participation in cyber investigations increases daily, most universities are lagging in their educational and training opportunities for students entering the criminal justice fields. This article discusses the need to incorporate courses discussing the Dark Web in criminal justice. A review of existing cyber-criminal justice programs in Texas and nationally suggests that most community colleges and 4-year universities have yet to develop courses/programs in understanding and investigating the Dark Web on the internet. The Dark Web serves as the …

An Assessment Of Practical Hands-On Lab Activities In Network Security Management, Te-Shun Chou, Nicholas Hempenius

Journal of Cybersecurity Education, Research and Practice

With the advancement in technology over the past decades, networks have become increasingly large and complex. In the meantime, cyberattacks have become highly sophisticated making them difficult to detect. These changes make securing a network more challenging than ever before. Hence, it is critical to prepare a comprehensive guide of network security management for students assist them in becoming network security professionals.

The objective of this paper is to introduce a variety of techniques related to network security management, such as Simple Network Management Protocol (SNMP), event management, security policy management, risk management, access control, and remote monitoring. With the …

Editorial

Journal of Cybersecurity Education, Research and Practice

Editorial.

Editorial, Michael E. Whitman, Herbert J. Mattord, Hossain Shahriar

Journal of Cybersecurity Education, Research and Practice

No abstract provided.

Gdom: Granulometry For The Detection Of Obfuscated Malware, John A. Aruta, N. Paul Schembari

Journal of Cybersecurity Education, Research and Practice

We describe the results of a master's thesis in malware detection and discuss the connection to the learning goals of the project. As part of the thesis, we studied obfuscation of malware, conversion of files into images, image processing, and machine learning, a process of benefit to both the student and faculty.

Malware detection becomes significantly more difficult when the malicious specimen is obfuscated or transformed in an attempt to avoid detection. However, computer files have been shown to exhibit evidence of structure when converted into images, so with image processing filters such as granulometry, it is possible to generate …

The Social Media Machines: An Investigation Of The Effect Of Trust Moderated By Disinformation On Users’ Decision-Making Process, Zulma Valedon Westney

CCAC Theses and Dissertations

Social media networking sites (SMNS) have become a popular communications medium where users share information, knowledge, and persuasion. In less than two decades, social media's (SM) dominance as a communication medium can't be disputed, for good or evil. Combined with the newly found immediacy and pervasiveness, these SM applications' persuasive power are useful weapons for organizations, angry customers, employees, actors, and activists bent on attacking or hacking other individuals, institutions, or systems. Consequently, SM has become the preferred default mechanism of news sources; however, users are unsure if the information gathered is true or false. According to the literature, SMNS …

Quantum Computing: Principles And Applications, Yoshito Kanamori, Seong-Moo Yoo

Journal of International Technology and Information Management

The development of quantum computers over the past few years is probably one of the significant advancements in the history of quantum computing. D-Wave quantum computer has been available for more than eight years. IBM has made its quantum computer accessible via its cloud service. Also, Microsoft, Google, Intel, and NASA have been heavily investing in the development of quantum computers and their applications. The quantum computer seems to be no longer just for physicists and computer scientists but also for information system researchers. This paper introduces the basic concepts of quantum computing and describes well-known quantum applications for non-physicists. …