Information Security Commons^™

Assessor Experiences In Cmmc Level 2 Certification Assessments: An Interpretative Phenomenological Analysis Of Role Expectations, Samuel Heuchert, John Hastings

Research & Publications

The Cybersecurity Maturity Model Certification program requires that third-party assessments be conducted under a non-consultative model. The model is intended to ensure impartiality for organizations seeking certification. While this structure defines expectations for assessor behavior, assessor experiences and interpretations of these constraints remain underexamined. The study examines the lived experiences of CMMC-Certified Assessors and how they navigate role expectations within the non-consultative model. Using Role Conflict Theory as a guiding framework, the study applied Interpretative Phenomenological Analysis (IPA) to semi-structured interviews to explore how assessors make sense of their roles. The analysis identified experiential themes that describe how assessors construct …

Stop Blaming My Users: Illumination Of The Technocentric Mythos Bias, Ervin H. Frenzel, Richard Lightcap

Journal of Cybersecurity Education, Research and Practice

 Abstract -This conceptual essay addresses the need for systemic and systematic transdisciplinary analytical techniques within cybersecurity and technical security. This conceptual essay is contingent upon recognition that cybersecurity is not simply technical in nature, it does not need an adversary, and more importantly it is based upon systems engineering and systems thinking.  The essay contributes a socio-technical attribution chain and field-specific ontology/taxonomy which distinguish user-triggered events from root causes, latent conditions, technical debt, validation failures, governance failures, and attribution bias before assigning responsibility to end users. It systematically defines an ontology inclusive of developer technical debt, organizational debt arising from …

Next-Generation Democratic Cyber Statecraft - Balancing The Signal: Shutdown Shocks And Democratic Digital Governance, Scott M. Di Panni

School of Public Policy Capstones

This paper develops Next-Generation Democratic Cyber Statecraft (NG-DCS), a unified strategic doctrine for democratic governments to contest the cognitive domain against authoritarian adversaries. Drawing on twenty-six years of cross-national panel data (1999–2024) spanning 213 countries, game-theoretic modeling, and qualitative case analysis, the paper establishes three interconnected empirical and theoretical foundations. First, cross-national OLS regression across 160+ countries demonstrates that regime type is the dominant structural determinant of internet freedom (R²=0.615, β=2.513, p< 0.001), explaining more than twice the variance attributable to per-capita wealth (R²=0.268). Democratic governance, not economic development, produces open digital environments. Second, a two-way fixed effects (TWFE) difference-in-differences study exploiting government-ordered internet shutdowns as discrete policy interventions finds that digital restrictions causally degrade V-Dem governance quality by 0.21–0.38 standard deviations (p< 0.001 across all specifications). Treatment effects are immediate (β=−0.302 at k=0) and persist through five post-treatment years (β=−0.246 at k=+5), indicating structural rather than transitory governance damage. Parallel trends validation (p=0.352) and Callaway–Sant’Anna heterogeneity-robust estimation (ATT=−0.230, SE=0.077) support causal identification. Instrumental variable triangulation (2SLS β=−0.949, p=0.005) confirms that simultaneity was attenuating, not inflating, the primary estimates. Third, formal game-theoretic analysis reveals that the current U.S.–adversary equilibrium is (Restrain, Escalate)—the risk-dominant but Pareto-inferior outcome of a Stag Hunt structure. China, Russia, North Korea, and Venezuela each occupy structurally distinct positions (Stackelberg commitment, asymmetric two-level, autarky, and reactive trigger, respectively), requiring differentiated doctrinal responses rather than a uniform strategic playbook. Generative AI and algorithmic governance are shown to accelerate cognitive vulnerability by collapsing influence operation costs and exploiting engagement-optimized platform architectures that systematically degrade deliberative capacity in democratic populations.

Operationalizing Cyber-Routine Activities Theory For Senior Cybercrime Prevention: An Evaluation Of The Shield Training-The-Trainer Program, Kyung-Shick Choi, Insun Park, Mijin Kim, Ji Yae Bong

International Journal of Cybersecurity Intelligence & Cybercrime

Older adults face growing risks of cyber-enabled fraud, yet scalable, evidence-based prevention programs remain limited. Guided by Cyber-Routine Activities Theory (Cyber-RAT), this study evaluates the pilot implementation of the Seniors Harnessing Internet Education for Lasting Defense (SHIELD) Training-the-Trainer program, designed to prepare law enforcement officers and community leaders to deliver cybercrime prevention education to older adults. A key innovation of SHIELD is its integration of interactive game-based simulations, which allow participants to practice verification, refusal, and reporting behaviors in realistic cybercrime scenarios. Following the December 2025 pilot session in Boston, semi-structured interviews were conducted with 12 participants from law enforcement, …

From Authorization To Loss: A Blockchain Forensic Analysis Of Transaction-Level Mechanisms In Cryptocurrency Airdrop Scams, Chanwoo Shin, Kyung-Shick Choi

International Journal of Cybersecurity Intelligence & Cybercrime

Cryptocurrency airdrop scams have emerged as a rapidly growing form of cyber-enabled financial crime, yet remain underexplored in empirical research. This study examines how transaction-level mechanisms and offender strategies influence variation in monetary loss in airdrop scam incidents. Grounded in Cyber-Routine Activities Theory (Cyber-RAT), the study conceptualizes financial harm as occurring within decentralized environments where users’ online behaviors, particularly transaction authorization, intersect with limited digital capable guardianship. Data were drawn from 112 validated airdrop scam cases reported on Chainabuse.com between January and December 2025. Blockchain forensic analysis using Breadcrumbs was conducted to reconstruct transaction pathways, identify exchange interactions, and detect …

Cybercrime, Vulnerability And Digital Guardianship: Opportunity Structures And Prevention In A Changing Online Landscape, Mike Toro-Alvarez, Amy Lim

International Journal of Cybersecurity Intelligence & Cybercrime

No abstract provided.

Analyzing Modern Scam Typologies: From Pig-Butchering And Nigerian Advance-Fee Fraud To Crypto Airdrop Schemes, Katalin Parti, Sinyong Choi, Thomas Dearden

International Journal of Cybersecurity Intelligence & Cybercrime

Rapid advancements in digital infrastructure and decentralized networks have fundamentally altered the nature of contemporary cybercrime, making comprehensive empirical and technical analysis more crucial than ever. To address these challenges, this editorial summarizes the research contributions featured in this issue of the International Jour nal of Cybersecurity Intelligence and Cybercrime. The included papers examine the structural on-chain dynamics of sanctioned pig-butchering operations, the representational production and AI-driven evolution of the “Nigerian scam” label, the critical transaction-authorization factors driving losses in crypto airdrop schemes, and the optimization of sentence-transformer models for automated Host Intrusion Detection System (HIDS) alert enrichment. Together, these …

Three-Tier On-Chain Transaction Architecture In A Sanctions-Linked Pig-Butchering Network: A Blockchain-Forensics Case Study, Matthew Stern, Kyung-Shick Choi

International Journal of Cybersecurity Intelligence & Cybercrime

n October 2025, the U.S. Department of the Treasury’s Office of Foreign Assets Control (OFAC) sanctioned 29 Bitcoin addresses asso ciated with the Prince Group and Chen Zhi, providing an opportunity to examine the internal on-chain structure of a sanctions-linked pig-butchering network. This blockchain-forensics case study analyzes the group of 29 addresses using blockchain tracing, cross-plat form attribution checks across multiple commercial analytics platforms, exposure screening, and thematic analysis of transaction be havior. Because the case rests on OFAC designations and DOJ allegations, the traced flows are interpreted as patterns consistent with suspected laundering rather than adjudicated crimes; no fiat …

Attribution Post ‘Aura’ Loss: A Qualitative Discourse Analysis Of The Nigerian Scam Label And Fraud Attribution, Emaediong Akpan

International Journal of Cybersecurity Intelligence & Cybercrime

In this essay, I employ qualitative discourse analysis of eleven purposively selected literature to examine how “Nigerian scam” became an established yet detached signifier of advance-fee fraud in global discourse. I do not treat this association as a reflection of offender identity or national inclination. Instead, the analysis traces how attribution is produced through representational repetition, institu tional uptake, and the circulation of familiar narrative cues. Using qualitative discourse analysis and an interpretive approach, this paper distinguishes among the socio-technical conditions that enable fraud, the institutional processes that stabilize attribution, and the semiotic dynamics through which national categories acquire durability. …

Intelligence Process Of Marine Security: Model Construction And Case Deduction, Xuehui Wang, Feng Hu, Peiwen Wang

Journal of Scientific Information Research

[Purpose/significance]In recent years, our country has been increasingly threatened by security threats from the maritime direction. In this regard, it is necessary to strengthen the intelligence construction in the maritime security system and improve the effectiveness of intelligence in maritime security governance/decision-making.[Method/process]Comprehensively applying the methods of literature research, comparative analysis and case demonstration, on the basis of clarifying the connotation of relevant concepts, sorting out and evaluating the existing intelligence process models in the academic community, combined with the actual scenarios of maritime security incidents, construct an intelligence process model for maritime security assurance and take Fukushima nuclear sewage discharged …

Global Crossroads Of Cybercrime: Youth, Enterprise And State Vulnerabilities In The Digital Age, Christopher S. Kayser, Kyung-Shick Choi

International Journal of Cybersecurity Intelligence & Cybercrime

No abstract provided.

Cybercrime As A Threat To The Banking Sector: A Perspective From Commercial Banks In Bangladesh, Hasibul Hossain, Rezaul Karim Shohag, Nikhil Chandra Nath, Sushmita Das Dalia

International Journal of Cybersecurity Intelligence & Cybercrime

Cyber and technology related crimes are gradually increasing all over the world due to rapid transitions and transactions in the digital world and cyberspace. Cyber related threats are increasingly becoming universal, multi-faceted, sophisticated and transnational in this tech-driven age. Governments, law enforcement agencies, IT professionals, scholars, and researchers worldwide have been concerned about digital deviance and crime. The transition to this widespread cybercrime is particularly difficult for developing countries. Recently, the banking sectors in Bangladesh have seen the emerging threats to its system and reserves through cyberspace, e. g. cyber-attacks or taking illegal access. Cybercrime is becoming a threat to …

Need Of Paradigm Shift In Cybersecurity Implementation For Small And Medium Enterprises (Smes), Shekhar Pawar, Hemant Palivela

International Journal of Cybersecurity Intelligence & Cybercrime

The increasing digitization of small and medium enterprises (SMEs) has significantly increased their attack surface, creating opportunities for various cyberthreats. In the global market, there are various cybersecurity standards and frameworks available, but there are still many cyber news stories from each corner of the world talking about increasing sophisticated cyber-attacks among organizations. According to recent studies, one out of five cyberattacks is targeting SMEs. Even though SMEs are relatively smaller as individuals, they are responsible for maximum contribution towards the betterment of the global economy, including the highest role in GDP and various employment opportunities. As compared to large …

Navigating The Digital Frontier: New Perspectives On Cybercrime And Governance, Christopher S. Kayser, Thomas Dearden, Katalin Parti, Sinyong Choi

International Journal of Cybersecurity Intelligence & Cybercrime

No abstract provided.

Modus Operandi And Blockchain Analysis Of Romance Scams: Cryptocurrency-Driven Victimization, Amy Lim, Kyung-Shick Choi

International Journal of Cybersecurity Intelligence & Cybercrime

No abstract provided.

The Legal Response To The Intrusion Into Digital Identity In Social Media, Maria González-García Vinuela

International Journal of Cybersecurity Intelligence & Cybercrime

No abstract provided.

A Study Of Pattern Of Cybercrime Abuse Of Individual Internet Users In Umuahia North Lga, Abia State Of South-Eastern Nigeria, Ogochukwu Favour Nzeakor, Rita Ngozi Okafor, Chibuike Ndubuisi Nwoke

International Journal of Cybersecurity Intelligence & Cybercrime

Although a number of studies exist on cybercrime and its abuses, little is known about the pattern of cybercrime abuses individual Internet users experience in Nigeria, especially the south eastern region. Using data collected via various methods, this study examines the pattern of cybercrime abuses of individual Internet users in Umuahia, Abia State, of South Eastern Nigeria. The result of the analysis of 1,067 samples drawn from 223,134 Internet users in Umuahia North LGA of Abia Sate showed that: while most users are victims of stolen ICT-gadgets (19%), fraud related offences (17%), and hacking (15%); they rarely fall victims of …

The Impact Of Student Engagement Activities On Future Climate Change Adaptation: The Case Of Student Simulation Models, Bassel Mostafa Elkalaf

Future Journal of Social Science

This paper explores the critical role of student engagement in addressing the growing challenges of climate change, with a focus on the Model United Nations (MUN) as a case study. As climate-related security threats increase globally, educational platforms that prepare youth for effective leadership in climate politics are more essential than ever. MUN, a widely practiced student activity simulating global policy-making, provides a valuable opportunity for students to deepen their understanding of the interconnectedness between climate change, peace, and security. By participating in MUN simulations, students engage in debates, develop innovative solutions, and practice diplomatic skills, all while exploring the …

Toward An Insider Threat Education Platform: A Theoretical Literature Review, Haywood Gelman, John D. Hastings, David Kenley, Eleanor Loiacono

Research & Publications

Insider threats (InTs) within organizations are small in number but have a disproportionate ability to damage systems, information, and infrastructure. Existing InT research studies the problem from psychological, technical, and educational perspectives. Proposed theories include research on psychological indicators, machine learning, user behavioral log analysis, and educational methods to teach employees recognition and mitigation techniques. Because InTs are a human problem, training methods that address InT detection from a behavioral perspective are critical. While numerous technological and psychological theories exist on detection, prevention, and mitigation, few training methods prioritize psychological indicators. This literature review studied peer-reviewed, InT research organized by …

Integrating Humanities Into Cybersecurity Education: Enhancing Ethical, Historical, And Sociopolitical Understanding In Technical Training, Joseph Frusci

Journal of Cybersecurity Education, Research and Practice

The increasing complexity of cybersecurity challenges necessitates a holistic educational approach that integrates both technical skills and humanistic perspectives. This article examines the importance of infusing humanities disciplines such as history, ethics, political science, sociology, law, and anthropology—into cybersecurity education. Through a pilot course developed for Staten Island Technical High School, aligned with the New York State K-12 Computer Science and Digital Fluency Standards, students were introduced to an interdisciplinary curriculum that combined technical cybersecurity training with historical analysis, ethical reasoning, and sociopolitical context. The results of pre- and post-course assessments demonstrated significant improvements in critical thinking, ethical decision-making, and …

Cyber Victimization In The Healthcare Industry: Analyzing Offender Motivations And Target Characteristics Through Routine Activities Theory (Rat) And Cyber-Routine Activities Theory (Cyber-Rat), Yashna Praveen, Mijin Kim, Kyung-Shick Choi

International Journal of Cybersecurity Intelligence & Cybercrime

The integration of computer technology in healthcare has revolutionized patient care but has also introduced significant cyber risks. Despite the healthcare sector being a primary target for cyber-attacks, research on the dynamics of these threats and practical solutions remains limited. Understanding the complexities of cyberattacks in this sector is critical, as the impact extends beyond financial losses to directly affect patient care and the protection of sensitive information. This paper applies Routine Activities Theory (RAT) and Cyber Routine Activities Theory (C-RAT) to analyze high-tech cyber victimization case studies in healthcare. The analysis explores the motivations behind these attacks and identifies …

Understanding The Use Of Artificial Intelligence In Cybercrime, Sinyong Choi, Thomas Dearden, Katalin Parti

International Journal of Cybersecurity Intelligence & Cybercrime

Artificial intelligence is one of the newest innovations that offenders also exploit to satisfy their criminal desires. Although understanding cybercrimes associated with this relatively new technology is essential in developing proper preventive measures, little has been done to examine this area. Therefore, this paper provides an overview of the articles featured in the special issue of the International Journal of Cybersecurity Intelligence and Cybercrime, ranging from deepfake in the metaverse to social engineering attacks. This issue includes articles that were presented by the winners of the student paper competition at the 2024 International White Hat Conference.

Investigating The Intersection Of Ai And Cybercrime: Risks, Trends, And Countermeasures, Sanaika Shetty, Kyung-Shick Choi, Insun Park

International Journal of Cybersecurity Intelligence & Cybercrime

No abstract provided.

Integrated Model Of Cybercrime Dynamics: A Comprehensive Framework For Understanding Offending And Victimization In The Digital Realm, Troy Smith Phd

International Journal of Cybersecurity Intelligence & Cybercrime

This article introduces the Integrated Model of Cybercrime Dynamics (IMCD), a novel theoretical framework for examining the complex interplay between individual characteristics, online behavior, environmental factors, and outcomes related to cybercrime offending and victimization. The model incorporates key concepts from existing theories, empirical evidence, and interdisciplinary perspectives to provide a comprehensive framework. In contrast to traditional criminological theories, the proposed model integrates concepts from multiple disciplines to offer a holistic framework that captures the complexity of cybercrime and specifically caters for the uniqueness of cyberspace. The article will provide a detailed overview of the conceptual model, its theoretical underpinnings drawing …

Supporting South Korea’S Aging Population: How Ai And Iot Acceptance Connects The Young And Old, Bobby Im

Master's Projects and Capstones

In 2024, South Korea surpassed every other nation by becoming the country with the lowest fertility rate (below 0.7%). Population decline will hinder future ability to care for their aging population and although the government and private corporations are investing millions of dollars on developing Artificial Intelligence-Internet of Things (AI-IoT) devices to support the aging, the acceptance levels and the amount of family support required is undervalued. By examining AI-IoT’s current use and role in South Korea’s public health system this paper shows how intergenerational support helps optimize existing procedures and equipment, increases the level of acceptance and use, and …

A Study Of Cybersecurity Landscape In The United States: Trend, Regional Variations, And Socioeconomic Factors, Trang Thi Thu Horn

All-Inclusive List of Electronic Theses and Dissertations

The Internet has become an essential part of our daily lives. Cyberspace has emerged significantly with an enormous number of users, creating a lucrative hunting field for cybercriminals. The exponential growth of internet users and online activities, along with the increased sophistication of cybercrimes, is raising significant global concerns for individuals, organizations, and governments. This research aims to explore the cybersecurity landscape in the United States, investigate regional variations, and the potential impact of the COVID-19 pandemic on the number of cybercrimes. The study utilizes a mixed research method approach, including historical analysis and a Delphi study. Historical analysis studied …

Book Review: Tracers In The Dark: The Global Hunt For The Crime Lords Of Cryptocurrency, Marion Jones

International Journal of Cybersecurity Intelligence & Cybercrime

Doubleday released Andy Greenberg’s Tracers in the Dark: The Global Hunt for the Crime Lords of Cryptocurrency in November 2022. Through vivid case studies of global criminal investigations, the book dispels myths about the anonymizing power of cryptocurrency. The book details how the ability to identify cryptocurrency users and payment methods successfully brought down several large criminal empires, while also highlighting the continuous cat-and-mouse game between law enforcement officials and criminal actors using cryptocurrency. The book is an excellent resource for law enforcement officials, academics, and general cybersecurity practitioners interested in cryptocurrency-related criminal activities and law enforcement techniques.

Navigating The Digital Frontier: The Intersection Of Cybersecurity Challenges And Young Adult Life, Hannarae Lee

International Journal of Cybersecurity Intelligence & Cybercrime

Papers from this issue advocate for empowering young adults with knowledge and tools to navigate cyberspace safely, emphasizing the necessity of heightened cybersecurity measures and proactive education. As we advance into the digital abyss, this call becomes imperative, ensuring that the young adults' experience remains a journey of growth and enlightenment, unaffected by the shadows of unseen online threats.

The Need For A Cybersecurity Education Program For Internet Users With Limited English Proficiency: Results From A Pilot Study, Fawn T. Ngo, Rustu Deryol, Brian Turnbull, Jack Drobisz

International Journal of Cybersecurity Intelligence & Cybercrime

According to security experts, cybersecurity education and awareness at the user level are key in combating cybercrime. Hence, in the U.S., cybersecurity and Internet safety workshops, classes, and resources targeting children, adolescents, adults, and senior citizens abound. However, most cybercrime prevention programs are only available in English, thus, ignoring a substantial proportion of Internet users and potential cybercrime victims—Internet users with limited English proficiency (LEP). Yet, successfully combating cybercrime requires that all computer and Internet users, regardless of their language abilities and skills, have access to pertinent cybersecurity information and resources to protect themselves online. This paper presents the results …

Reducing Food Scarcity: The Benefits Of Urban Farming, S.A. Claudell, Emilio Mejia

Journal of Nonprofit Innovation

Urban farming can enhance the lives of communities and help reduce food scarcity. This paper presents a conceptual prototype of an efficient urban farming community that can be scaled for a single apartment building or an entire community across all global geoeconomics regions, including densely populated cities and rural, developing towns and communities. When deployed in coordination with smart crop choices, local farm support, and efficient transportation then the result isn’t just sustainability, but also increasing fresh produce accessibility, optimizing nutritional value, eliminating the use of ‘forever chemicals’, reducing transportation costs, and fostering global environmental benefits.

Imagine Doris, who is …