Legal Studies Commons^™

Technique-Level Normalization For Cybersecurity Intelligence: An Empirical Evaluation Of Att&Ck Attribution From Hids Alerts Using Fine-Tuned Transformers And Metadata Re-Ranking, Emad Sherif

International Journal of Cybersecurity Intelligence & Cybercrime

Cybercrime investigations increasingly depend on the ability to interpret large volumes of automated security events. For organizations without dedicated security operations centres, a situation common among small and medium enterprises, the manual translation of raw alerts into structured threat intelligence represents a critical bottleneck that slows investigative triage and limits cross-case comparability. This paper evaluates an automated enrichment pipeline designed to address this bottleneck by mapping security events to standardised adversary behaviour labels drawn from the MITRE ATT&CK framework, supporting both operational response and cybercrime investigation workflows. We compare three pipeline configurations, a general-purpose encoder model, a cybersecurity domain-adapted variant, …

Stop Blaming My Users: Illumination Of The Technocentric Mythos Bias, Ervin H. Frenzel, Richard Lightcap

Journal of Cybersecurity Education, Research and Practice

 Abstract -This conceptual essay addresses the need for systemic and systematic transdisciplinary analytical techniques within cybersecurity and technical security. This conceptual essay is contingent upon recognition that cybersecurity is not simply technical in nature, it does not need an adversary, and more importantly it is based upon systems engineering and systems thinking.  The essay contributes a socio-technical attribution chain and field-specific ontology/taxonomy which distinguish user-triggered events from root causes, latent conditions, technical debt, validation failures, governance failures, and attribution bias before assigning responsibility to end users. It systematically defines an ontology inclusive of developer technical debt, organizational debt arising from …

Digital Bodily Autonomy: Consent Issues, Labor Displacement, And Legal Understandings Of Ai Generated Deepfake Pornography, Mariah Barrett

Undergraduate Theses, Capstones, and Recitals

In the United States, nonconsensual pornographic deepfakes are becoming an increasingly prevalent problem as AI deepfake creation software improves and becomes widely available. Despite this, patchwork legislation across the country is inconsistent and conflicting regarding this issue. In this paper, I explore the background of pornography and obscenity laws and demonstrate how these frameworks are not properly constructed to apply to the digital sphere. Then, I address major themes within deepfake literature such as consent issues, bodily autonomy, labor displacement, and verifiable identity as a commodity through the case study of OnlyFans. I explore current and proposed legislation within the …

Adversarial Robustness Of Perceptual Hashing Systems: A Unified Security Evaluation Framework, Avijit Roy

Student Theses

Social network platforms, child safety organizations, and image provenance systems use perceptual hashing to identify known child sexual abuse material (CSAM), support content moderation and reverse image search, and verify image integrity. Perceptual hashing works by producing similar fingerprints for visually similar images, even after common transformations such as compression, resizing, or minor brightness changes. This useful similarity-preserving property also creates an adversarial attack surface, as attackers can use AI-assisted or conventional image manipulation techniques to move a hash across a matching threshold while maintaining visual similarity, often without access to specialized hardware.

The security failures produced by adversarial attacks …

Operational Responsibility In Ai Governance: A User-Centric Liability Framework, Zhengyang Chen

Faculty Publications

Who bears responsibility when artificial intelligence systems cause harm? This question has become central to AI ethics and governance. Most existing approaches focus on developers, yet this faces serious practical and theoretical problems. Drawing on tort law, agency law, and philosophy of technology, this paper argues that AI should be understood as an instrument whose outputs remain the responsibility of human operators rather than developers. We call this 'user-centric governance.' Placing accountability with deployers promotes public trust by creating clear lines of responsibility, a concern that governance approaches have often overlooked. It preserves democratic accountability by keeping human actors answerable …

Volume 17, Christian O’Neill, Kyara Greene, Savva Sidorov, Laura Bisaillon, Luke Clemmer, Hannah Gordon, Kitt Benson, Taylor Blount, Rachel Danzitz, Nicholas Duellman, Chase Gionis, Hima Fernando, Seth Franzyshen, Onyx Gonzalez, Bryan Lin, Samantha Start, Ysabel Wells, Maggie Duncan

Incite: The Journal of Undergraduate Scholarship

Introduction Dr. Amorette Barber, Director, Office of Student Research

From the Editor Dr. Hannah Dudley-Shotwell

Cover Artist’s Statement Maggie Duncan

On Mentoring Dr. Yulia Uryadova

Ukrainian Resistance in the Face of Russification: Nestor Makhno and Anarchism

by Christian O’Neill

Life Vest by Kyara Greene

Isolation and 16S rRNA Identification of Bacteria from Fire Department Connection Pipe by Savva Sidorov

The Effectiveness of Planned Exercise in Reducing ADHD Symptoms in Children by Laura Bisaillon & Luke Clemmer

Linguistic Analysis on Confidence and Communication Strategies with Disparities Between Sign Fluency and Hearing Impairment by Hannah Gordon

Freedmen in Indian Territory by Kitt …

Ai's Double Edged Sword: Fighting Against Synthetic Csam, Shekhinah Adra Green

Cybersecurity Undergraduate Research Showcase

The rapid advancements in generative artificial intelligence has introduced new challenges in the production and distribution of synthetic child sexual abuse material (CSAM). AI has the capabilities of creating highly realistic imagery and videos, which  raises serious legal and ethical concerns, increasing the risk of harm, exploitation, and revictimization.

This paper discusses the legal improvements needed in order to lower the change of legal loopholes, how digital forensic analyst use advanced tools to identify and investigate synthetic material, and different methods to start the reduction of synthetic CSAM.

Romance Scam Reporting And Support: Help-Seeking Timing, Trust, And Escalation, Ld Herrera

Research & Publications

Built on social engineering and identity deception, romance scams often create financial loss and distress. For victims, it can be difficult to know where to go, what information is needed, and what outcomes are realistic. This paper reports results from an anonymous survey of people who were targeted by or experienced a romance scam (completed surveys: n=386), focusing on (1) when and whether victims first reach out for help, (2) perceived difficulty and confidence in navigating support, (3) how trust relates to expectations of assistance, and (4) how loss severity relates to transfer-method complexity. When help was sought, it was …

The Psychology Behind Ai-Generated Phishing And Social Engineering Attacks, A’Shya Reynolds

School of Cybersecurity Master's Level Projects and Papers

Cybercrime has evolved significantly with the integration of artificial intelligence (AI), transforming traditional phishing and social engineering attacks into highly sophisticated and personalized threats. While early phishing attempts relied on generic messaging and low success rates, modern AI-driven attacks leverage advanced data analytics, natural language processing, and behavioral prediction to manipulate victims more effectively.

This research examines how cybercriminals utilize AI to enhance psychological manipulation techniques in phishing and social engineering attacks, increasing victim susceptibility. Drawing from interdisciplinary literature in cybersecurity and psychology, this study explores key psychological mechanisms, including cognitive biases, emotional triggers, and decision-making processes that influence victim …

Ransomware As Organization: A Comparative Analysis Of Corporate And Criminal Structures In Conti, George Urling

Theses, Dissertations and Capstones

Cybercriminal groups continue to pose major threats to global cybersecurity. One of the most common types of cybercriminal groups are, “Ransomware-as-a-Service (RaaS)" groups, who create and sell ransomware. While research is conducted into the development of ransomware, there is limited reporting on the organizational structure and habits of RaaS groups. In 2022, prominent RaaS group Conti had their chat logs leaked, with the logs ranging from 2020 to 2022. This study seeks to provide a deeper understanding of RaaS group structures by utilizing the Conti leaked logs as a case study. The study, entitled “Ransomware as Organization: A Comparative Analysis …

Operationalizing Cyber-Routine Activities Theory For Senior Cybercrime Prevention: An Evaluation Of The Shield Training-The-Trainer Program, Kyung-Shick Choi, Insun Park, Mijin Kim, Ji Yae Bong

International Journal of Cybersecurity Intelligence & Cybercrime

Older adults face growing risks of cyber-enabled fraud, yet scalable, evidence-based prevention programs remain limited. Guided by Cyber-Routine Activities Theory (Cyber-RAT), this study evaluates the pilot implementation of the Seniors Harnessing Internet Education for Lasting Defense (SHIELD) Training-the-Trainer program, designed to prepare law enforcement officers and community leaders to deliver cybercrime prevention education to older adults. A key innovation of SHIELD is its integration of interactive game-based simulations, which allow participants to practice verification, refusal, and reporting behaviors in realistic cybercrime scenarios. Following the December 2025 pilot session in Boston, semi-structured interviews were conducted with 12 participants from law enforcement, …

From Authorization To Loss: A Blockchain Forensic Analysis Of Transaction-Level Mechanisms In Cryptocurrency Airdrop Scams, Chanwoo Shin, Kyung-Shick Choi

International Journal of Cybersecurity Intelligence & Cybercrime

Cryptocurrency airdrop scams have emerged as a rapidly growing form of cyber-enabled financial crime, yet remain underexplored in empirical research. This study examines how transaction-level mechanisms and offender strategies influence variation in monetary loss in airdrop scam incidents. Grounded in Cyber-Routine Activities Theory (Cyber-RAT), the study conceptualizes financial harm as occurring within decentralized environments where users’ online behaviors, particularly transaction authorization, intersect with limited digital capable guardianship. Data were drawn from 112 validated airdrop scam cases reported on Chainabuse.com between January and December 2025. Blockchain forensic analysis using Breadcrumbs was conducted to reconstruct transaction pathways, identify exchange interactions, and detect …

Cybercrime, Vulnerability And Digital Guardianship: Opportunity Structures And Prevention In A Changing Online Landscape, Mike Toro-Alvarez, Amy Lim

International Journal of Cybersecurity Intelligence & Cybercrime

No abstract provided.

Analyzing Modern Scam Typologies: From Pig-Butchering And Nigerian Advance-Fee Fraud To Crypto Airdrop Schemes, Katalin Parti, Sinyong Choi, Thomas Dearden

International Journal of Cybersecurity Intelligence & Cybercrime

Rapid advancements in digital infrastructure and decentralized networks have fundamentally altered the nature of contemporary cybercrime, making comprehensive empirical and technical analysis more crucial than ever. To address these challenges, this editorial summarizes the research contributions featured in this issue of the International Jour nal of Cybersecurity Intelligence and Cybercrime. The included papers examine the structural on-chain dynamics of sanctioned pig-butchering operations, the representational production and AI-driven evolution of the “Nigerian scam” label, the critical transaction-authorization factors driving losses in crypto airdrop schemes, and the optimization of sentence-transformer models for automated Host Intrusion Detection System (HIDS) alert enrichment. Together, these …

Three-Tier On-Chain Transaction Architecture In A Sanctions-Linked Pig-Butchering Network: A Blockchain-Forensics Case Study, Matthew Stern, Kyung-Shick Choi

International Journal of Cybersecurity Intelligence & Cybercrime

n October 2025, the U.S. Department of the Treasury’s Office of Foreign Assets Control (OFAC) sanctioned 29 Bitcoin addresses asso ciated with the Prince Group and Chen Zhi, providing an opportunity to examine the internal on-chain structure of a sanctions-linked pig-butchering network. This blockchain-forensics case study analyzes the group of 29 addresses using blockchain tracing, cross-plat form attribution checks across multiple commercial analytics platforms, exposure screening, and thematic analysis of transaction be havior. Because the case rests on OFAC designations and DOJ allegations, the traced flows are interpreted as patterns consistent with suspected laundering rather than adjudicated crimes; no fiat …

Attribution Post ‘Aura’ Loss: A Qualitative Discourse Analysis Of The Nigerian Scam Label And Fraud Attribution, Emaediong Akpan

International Journal of Cybersecurity Intelligence & Cybercrime

In this essay, I employ qualitative discourse analysis of eleven purposively selected literature to examine how “Nigerian scam” became an established yet detached signifier of advance-fee fraud in global discourse. I do not treat this association as a reflection of offender identity or national inclination. Instead, the analysis traces how attribution is produced through representational repetition, institu tional uptake, and the circulation of familiar narrative cues. Using qualitative discourse analysis and an interpretive approach, this paper distinguishes among the socio-technical conditions that enable fraud, the institutional processes that stabilize attribution, and the semiotic dynamics through which national categories acquire durability. …

Selected Artificial Intelligence Provisions In U.S. Fiscal Year 2025 National Defense Authorization Act, Bert Chapman

Libraries Faculty and Staff Presentations

The 2025 Fiscal Year National Defense Authorization Act contains multiple provisions relating to artificial intelligence (AI). These congressionally mandated provisions direct various sections of the Department of Defense (DOD) and individual U.S. armed service branches to execute congressional intent for AI policymaking. Examples of such intent include identifying and planning DOD's AI workforce, demonstrating AI biotechnology applications for national security, improving the human usability of AI systems, and establishing an AI security center. This presentation will note that reports on these initiatives must be prepared for relevant congressional oversight committees, and, in many cases, are in many cases, publicly released …

Deepfakes On Trial: Developing A High-Accuracy, Court-Admissible Ai Pipeline For Deepfake Detection In Corporate Fraud Litigation, Aiden J. Green

Honors College Theses

As deepfake technology advances, cybercriminals are increasingly using AI-generated videos and audios to impersonate executives and carry out sophisticated CEO fraud schemes. These synthetic forgeries target human trust and corporate communication systems, creating an urgent need for forensic tools capable of authenticating digital evidence with legal accuracy. This thesis presents a forensic-grade AI deepfake detection pipeline designed for this purpose, emphasizing courtroom admissibility, reproducibility, and evidentiary integrity. Built entirely with free, opensource tools, the framework combines metadata analysis, AI-powered spectrogram analysis, neural artifact detection, and facial manipulation recognition into a transparent workflow that accurately identifies synthetic media. It was trained …

Volume 16, Maggie Duncan, Madeline Little, Alicia Hoffman, Megan Livesay, Gabrielle Quaresma, Serenity Allen, Laina Pfountz, Ainslie Allred, Sabrina Robles, Nicholas J. Duellman, Trinity L. Deguzman, Melissa H. Savage, Margaret Dudley, Jocelyn Escobar, Olivia Hildreth, Olivia Hopkins, Benjamin Gettier, Lee Kassay, Jade Riddle, Ashley Seiders

Incite: The Journal of Undergraduate Scholarship

Introduction Dr. Amorette Barber, Director, Office of Student Research

From the Editor Dr. Hannah Dudley-Shotwell

Artist’s Statement Maggie Duncan

On Mentoring Dr. Lee Millar Bidwell

The Hujum Campaign in Uzbekistan and its Consequences by Madeline Little

Wet Cupping Compared to Dry Needling for Treatment of Patients with Low Back Pain: A Critically Appraised Topic by Alicia Hoffman and Megan Livesay

Optimization of eDNA Air Sampling Via 3D Printed Fan by Gabrielle Quaresma

Beyond the Classroom: A Qualitative Study of Teacher Attrition and Retention by Serenity Allen and Laina Pfountz

The Treatment of Subacromial Impingement Syndrome with Platelet-Rich plasma Injections Verses …

Global Crossroads Of Cybercrime: Youth, Enterprise And State Vulnerabilities In The Digital Age, Christopher S. Kayser, Kyung-Shick Choi

International Journal of Cybersecurity Intelligence & Cybercrime

No abstract provided.

Cybercrime As A Threat To The Banking Sector: A Perspective From Commercial Banks In Bangladesh, Hasibul Hossain, Rezaul Karim Shohag, Nikhil Chandra Nath, Sushmita Das Dalia

International Journal of Cybersecurity Intelligence & Cybercrime

Cyber and technology related crimes are gradually increasing all over the world due to rapid transitions and transactions in the digital world and cyberspace. Cyber related threats are increasingly becoming universal, multi-faceted, sophisticated and transnational in this tech-driven age. Governments, law enforcement agencies, IT professionals, scholars, and researchers worldwide have been concerned about digital deviance and crime. The transition to this widespread cybercrime is particularly difficult for developing countries. Recently, the banking sectors in Bangladesh have seen the emerging threats to its system and reserves through cyberspace, e. g. cyber-attacks or taking illegal access. Cybercrime is becoming a threat to …

Need Of Paradigm Shift In Cybersecurity Implementation For Small And Medium Enterprises (Smes), Shekhar Pawar, Hemant Palivela

International Journal of Cybersecurity Intelligence & Cybercrime

The increasing digitization of small and medium enterprises (SMEs) has significantly increased their attack surface, creating opportunities for various cyberthreats. In the global market, there are various cybersecurity standards and frameworks available, but there are still many cyber news stories from each corner of the world talking about increasing sophisticated cyber-attacks among organizations. According to recent studies, one out of five cyberattacks is targeting SMEs. Even though SMEs are relatively smaller as individuals, they are responsible for maximum contribution towards the betterment of the global economy, including the highest role in GDP and various employment opportunities. As compared to large …

A New Deepfake Detection Method With No-Reference Image Quality Assessment To Resist Image Degradation, Jiajun Jiang, Wen-Chao Yang, Chung-Hao Chen, Timothy Young

Electrical & Computer Engineering Faculty Publications

Deepfake technology, which utilizes advanced AI models such as Generative Adversarial Networks (GANs), has led to the proliferation of highly convincing manipulated media, posing significant challenges for detection. Existing detection methods often struggle with the low-quality or compressed press, which is prevalent on social media platforms. This paper proposes a novel Deepfake detection framework that leverages No-Reference Image Quality Assessment (NRIQA) techniques, specifically, BRISQUE, NIQE, and PIQUE, to extract quality-related features from facial images. These features are then classified using a Support Vector Machine (SVM) with various kernel functions. We evaluate our method under both intra-dataset and cross-dataset settings. For …

Analyzing Visual Attention In Virtual Crime Scene Investigations Using Eye-Tracking And Vr: Insights For Cognitive Modeling, Wen-Chao Yang, Chih-Hung Shih, Jiajun Jiang, Sergio Pallas Enguita, Chung-Hao Chen

Electrical & Computer Engineering Faculty Publications

Understanding human perceptual strategies in high-stakes environments, such as crime scene investigations, is essential for developing cognitive models that reflect expert decision-making. This study presents an immersive experimental framework that utilizes virtual reality (VR) and eye-tracking technologies to capture and analyze visual attention during simulated forensic tasks. A 360° panoramic crime scene, constructed using the Nikon KeyMission 360 camera, was integrated into a VR system with HTC Vive and Tobii Pro eye-tracking components. A total of 46 undergraduate students aged 19 to 24–23, from the National University of Singapore in Singapore and 23 from the Central Police University in Taiwan—participated …

Navigating The Digital Frontier: New Perspectives On Cybercrime And Governance, Christopher S. Kayser, Thomas Dearden, Katalin Parti, Sinyong Choi

International Journal of Cybersecurity Intelligence & Cybercrime

No abstract provided.

Modus Operandi And Blockchain Analysis Of Romance Scams: Cryptocurrency-Driven Victimization, Amy Lim, Kyung-Shick Choi

International Journal of Cybersecurity Intelligence & Cybercrime

No abstract provided.

The Legal Response To The Intrusion Into Digital Identity In Social Media, Maria González-García Vinuela

International Journal of Cybersecurity Intelligence & Cybercrime

No abstract provided.

A Study Of Pattern Of Cybercrime Abuse Of Individual Internet Users In Umuahia North Lga, Abia State Of South-Eastern Nigeria, Ogochukwu Favour Nzeakor, Rita Ngozi Okafor, Chibuike Ndubuisi Nwoke

International Journal of Cybersecurity Intelligence & Cybercrime

Although a number of studies exist on cybercrime and its abuses, little is known about the pattern of cybercrime abuses individual Internet users experience in Nigeria, especially the south eastern region. Using data collected via various methods, this study examines the pattern of cybercrime abuses of individual Internet users in Umuahia, Abia State, of South Eastern Nigeria. The result of the analysis of 1,067 samples drawn from 223,134 Internet users in Umuahia North LGA of Abia Sate showed that: while most users are victims of stolen ICT-gadgets (19%), fraud related offences (17%), and hacking (15%); they rarely fall victims of …

Key Technology Foresight And Policy Recommendation For Information Technology Enabling Smart Justice, Yirong Wu, Shuo Liu

Bulletin of Chinese Academy of Sciences (Chinese Version)

Fair justice is the last line of defense for maintaining social fairness and justice, and promoting the construction of smart justice is an important means to improve the efficiency and fairness of judicial work. Currently, China’s smart judiciary is in a critical stage of upgrading its intelligence in areas such as investigation, trial, supervision, and judicial execution, empowered by information technology. The application of information technology in national governance faces order dilemmas and security risks, with the establishment of corresponding laws and regulations demonstrating noticeable lag. Designating to meet the demand of information technology supporting the construction of smart justice …

Cyber Victimization In The Healthcare Industry: Analyzing Offender Motivations And Target Characteristics Through Routine Activities Theory (Rat) And Cyber-Routine Activities Theory (Cyber-Rat), Yashna Praveen, Mijin Kim, Kyung-Shick Choi

International Journal of Cybersecurity Intelligence & Cybercrime

The integration of computer technology in healthcare has revolutionized patient care but has also introduced significant cyber risks. Despite the healthcare sector being a primary target for cyber-attacks, research on the dynamics of these threats and practical solutions remains limited. Understanding the complexities of cyberattacks in this sector is critical, as the impact extends beyond financial losses to directly affect patient care and the protection of sensitive information. This paper applies Routine Activities Theory (RAT) and Cyber Routine Activities Theory (C-RAT) to analyze high-tech cyber victimization case studies in healthcare. The analysis explores the motivations behind these attacks and identifies …