Cybersecurity Commons^™

Analysis Of Cybersecurity Threats And Mitigation Strategies: Theory In To Practice, Project Proposal, Fransly Dutervil

Student Academic Conference

Cybersecurity threats pose significant risks to individuals and organizations, leading to data breaches, financial losses, and operational disruptions. This presentation explores key threats such as malware, phishing, DDoS attacks, insider threats, and zero-day exploits. It also discusses mitigation strategies, including network security measures, multi-factor authentication, encryption, and incident response planning. Through case studies of real-world cyber incidents, we highlight lessons learned and best practices to strengthen security defenses. The goal is to enhance awareness and promote proactive cybersecurity measures in an increasingly digital world.

Leveraging Benford’S Law And Machine Learning For Financial Fraud Detection, Benjamin R. Fu

Cybersecurity Undergraduate Research Showcase

Financial fraud, particularly credit card fraud, continues to pose substantial challenges to financial institutions due to its increasing frequency and impact on consumer trust. While traditional rule-based methods have provided foundational defenses, their limitations in scalability and adaptability have accelerated the adoption of machine learning (ML) techniques. Concurrently, Benford’s Law—a statistical principle often used in forensic accounting—has demonstrated efficacy in detecting anomalies within naturally occurring numerical datasets. This study explores a hybrid fraud detection approach that integrates Benford’s Law with supervised machine learning algorithms, including Logistic Regression, Random Forest, and k-Nearest Neighbors. Using the publicly available European credit card fraud …

Phishing Attacks And Prevention, Ruth Johnson

Cybersecurity Undergraduate Research Showcase

Phishing attacks have been the number one leading cause of identity theft and financial theft since 1990. The internet is one of the leading places where individuals’ identity is stolen. Many businesses and government agencies have been at risk of cyber phishing attacks from foreign countries. Attacks on Several U.S. federal government agencies have been hit in a global cyberattack by Russian cybercriminals that exploit a vulnerability in widely used software, according to a top us cybersecurity agency (Lyngaas, Government hit cyber-attacks, 2023).

Phishing attacks are cybercrimes where one or many individuals steal sensitive information like passwords, credit card information, …

How Can We Improve Our Security Measures To Safeguard Against Cyber Threats?, Mattea Trotter-Hicks

Cybersecurity Undergraduate Research Showcase

Many people face the issue of having their information stolen without their knowledge of what is happening. I understand that some people don’t pay attention to everything when it comes to making sure their information is being secured properly. There must be set stages for those who don’t know technology as well and will need help with knowing what to do. There are many stories of people going through issues with getting hacked or scammed out of their money or important information. We are going to dive into finding ways to fix the outcome of others knowing what to do …

Securing Biometric Data, Alyssa F. Carroll

Cybersecurity Undergraduate Research Showcase

Biometric data has been widely adopted across various sectors, including digital identity, artificial intelligence (AI), border control, digital wallets, and national identification systems. While biometric identifiers—such as fingerprints, retina scans, and facial recognition—offer reliable and convenient authentication, they also raise significant concerns regarding privacy and security. This paper examines how biometric data is stored, the vulnerabilities it faces, and the most effective methods for safeguarding it. By highlighting the critical importance of biometric data protection, this study reviews current research on approaches, strategies, and policies that enhance security while preserving the functionality and efficiency of biometric systems.

Bringing Different Disciplines And Competitions In Your Classroom, Eric Chan-Tin, Mohammed Abuhamad

Computer Science: Faculty Publications and Other Works

It is well-known that cybersecurity does not belong only to computer science/engineering. Other disciplines such as Psychology, Criminal Justice, Sociology, and Political Science can have a great impact in cybersecurity research and education. Students taking only courses are at a disadvantage and should be encouraged to participate in cybersecurity competitions to obtain real-world skills. This lightning talk will look at incorporating two aspects in an interdisciplinary cybersecurity program/curriculum: 1) different disciplines and majors such as Psychology, Criminal Justice, Political Science, Sociology into the cybersecurity program; and 2) including cybersecurity competitions as an integral part of the cybersecurity classroom and curriculum. …

48 - Improving Worship Experience: A Secure Application For Generating Worship Questions Using Ai, Hind Aldabagh, Rhys Ferris

Undergraduate Research Symposium

Improving worship Experience: A Secure application for generating worship questions using AI

Rhys Ferris

Under the direction of Hind Aldabagh, School of Cybersecurity

Generating discussion questions for family worship time during the week based on sermon notes presents an innovative and helpful tool to assist pastors in developing worship questions. Instead of using ChatGPT, hosting a small AI model with Mistral provides an alternative solution that better suits our project.

Using prompt engineering, a custom prompt was created within the statement of faith to guide the AI in reading the text file of the sermon notes. The front end consists …

47 - Enhancing Patient Experience: A Secure Self-Service Kiosk For Prescription Status In Pharmacies, Raneem Alarian

Undergraduate Research Symposium

Creating secure and dependable pharmacy kiosk systems is essential for improving both patient satisfaction and the overall efficiency of pharmacy operations. Patients often experience frustration due to long wait times at the pharmacy counter, especially when prescriptions are not ready. As a licensed pharmacy technician, I have witnessed this issue firsthand, which led me to develop a software solution developed to improve pharmacy workflow. This project focuses on the design and execution of a client-server application for a self-service pharmacy kiosk, enabling patients to securely check the status of their prescriptions before they reach the counter. Developed using Visual Studio …

From Adversarial Attacks To Robust Classifiers - A Study In Social Media Spam Detection - Black Box & White Box, Jonathan Jose Penaloza Rumie

Undergraduate Theses

Adversarial attacks pose a significant threat to the reliability of machine learning-based spam detection systems in social media. This undergraduate thesis, "From Adversarial Attacks to Robust Classifiers: A Study in Social Media Spam Detection – Black Box & White Box," systematically examines the impact of both black-box and white-box adversarial attacks on a range of spam classifiers, including Logistic Regression, Decision Trees, Random Forests, K-Nearest Neighbors, Bagging, Gradient Boosting, and Support Vector Machines. Leveraging a novel dataset derived from Twitter spam messages and enhanced with adversarial perturbations such as synonym replacement and character-level modifications, this study evaluates classifier performance under …

Optimizing Llm X86 Assembly Code Comprehension Through Fine-Tuning, Darrin Michael Lea

LSU Master's Theses

Reverse engineering is a cybersecurity process that focuses on understanding the underlying functionality of software or malware. This is an arduous process that demands large amounts of time and effort from cybersecurity practitioners. Large Language Models (LLMs) offer a potential solution to this problem. LLMs have worked their way into various fields of cybersecurity in recent years, including incident response and malware classification. However, LLMs have historically struggled with low-level code comprehension: a necessary part of reverse engineering. While LLMs can generate code and explain its function on the surface level, they struggle to grasp the wider context. In this …

Ceker: A Generalizable Llm Framework For Literature Analysis With A Case Study In Unikernel Security, Alex Wollman, John Hastings

Research & Publications

Literature reviews are a critical component of formulating and justifying new research, but are a manual and often time-consuming process. This research introduces a novel, generalizable approach to literature analysis called CEKER which uses a three-step process to streamline the collection of literature, the extraction of key insights, and the summarized analysis of key trends and gaps. Leveraging Large Language Models (LLMs), this methodology represents a significant shift from traditional manual literature reviews, offering a scalable, flexible, and repeatable approach that can be applied across diverse research domains. A case study on unikernel security illustrates CEKER's ability to generate novel …

Impact Of Data Snooping On Deep Learning Models For Locating Vulnerabilities In Lifted Code, Gary Mccully, John Hastings, Shengjie Xu

Research & Publications

This study examines the impact of data snooping on neural networks used to detect vulnerabilities in lifted code, and builds on previous research that used word2vec and unidirectional and bidirectional transformer-based embeddings. The research specifically focuses on how model performance is affected when embedding models are trained with datasets, which include samples used for neural network training and validation. The results show that introducing data snooping did not significantly alter model performance, suggesting that data snooping had a minimal impact or that samples randomly dropped as part of the methodology contained hidden features critical to achieving optimal performance. In addition, …

Cyber Safe, Hiram Franco, Laurene Robinson, Joshua Do, Enrique Martinez, Han Vu

Posters - 2025

With the rapid rise of cyber threats, understanding malware behavior is more crucial than ever. Millions of new malware variants emerge annually, compromising personal data, financial information, and entire networks. While no system is entirely immune, cybersecurity education can help mitigate risks. CYBERSAFE is a sandbox malware analyzer designed to enhance malware detection and analysis skills. By running malware samples in a controlled virtual environment, users can observe real-time file modifications, network activity, and system changes. The tool also includes interactive exercises and quizzes to reinforce learning. CYBERSAFE bridges the gap between theory and practice, providing hands-on experience to help …

Resilient Learning For Anomaly Detection In Smart Living Systems, Sahar Abedzadeh

Dissertations

Cyber-Physical Systems (CPS) rely on anomaly-based detection methods to ensure the integrity and security of critical infrastructures such as smart grids, smart water metering systems, and advanced metering infrastructures (AMI). Anomaly detection methods are commonly used to identify deviations from normal system behavior by establishing learned profiles and thresholdbased distinctions between benign and anomalous events. However, conventional frameworks often fail to account for adversarial data poisoning attacks, unlabeled unsafe events, and environmental noise—factors that distort training data, degrade detection accuracy, and increase false alarms. This dissertation proposes a resilient learning framework that mitigates these biases by integrating quantile regression, M-estimation …

Advancing Devsecops In Smes: Challenges And Best Practices For Secure Ci/Cd Pipelines, Jayaprakashreddy Cheenepalli, John Hastings, Khandaker Mamun Ahmed, Chad Fenner

Research & Publications

This study evaluates the adoption of DevSecOps among small and medium-sized enterprises (SMEs), identifying key challenges, best practices, and future trends. Through a mixed methods approach backed by the Technology Acceptance Model (TAM) and Diffusion of Innovations (DOI) theory, we analyzed survey data from 405 SME professionals, revealing that while 68% have implemented DevSecOps, adoption is hindered by technical complexity (41%), resource constraints (35%), and cultural resistance (38%). Despite strong leadership prioritization of security (73%), automation gaps persist, with only 12% of organizations conducting security scans per commit. Our findings highlight a growing integration of security tools, particularly API security …

Cybermapping Solutions: A Unified Approach In Us/Nato Military Applications And Development, Nicholas Macrino

Electrical & Computer Engineering Projects for D. Eng. Degree

[First paragraph] Cyber threats are evolving in complexity and frequency, posing significant challenges for cybersecurity professionals in identifying, categorizing, and responding to attacks in real time. Unlike traditional warfare, where battlefield awareness is based on fixed geographic warfare, cyber operations involve abstract attack vectors, non-linear threat escalation, and rapidly changing network conditions. Modern cyber threats, such as advanced persistent threats (APTs), polymorphic malware, and distributed denial-of-service (DDoS) attacks, require adaptive visualization techniques that provide real-time awareness and facilitate rapid decision-making. However, existing symbology standards, such as MIL-STD-2525D, were not designed to accommodate the dynamic nature of cyber warfare. The inability …

Enhancing Iot Security Using Lightweight Machine Learning Algorithms: A Comprehensive Approach Using Ensemble Learning, Feature Selection, And Federated Transfer Learning, Khawlah Harahsheh

Electrical & Computer Engineering Theses & Dissertations

The rapid expansion of the Internet of Things (IoT) has introduced significant security vulnerabilities due to the resource-constrained nature of IoT devices and their exposure to cyber threats. Traditional security solutions are often infeasible due to the high computational and storage demands they impose. This dissertation presents a lightweight, AI-driven security framework that enhances IoT network resilience by integrating feature selection, ensemble learning, and federated transfer learning while maintaining data privacy and minimizing computational overhead.

The proposed framework consists of three primary components: Feature Selection for Intrusion Detection, which optimizes performance by reducing redundant data and improving detection accuracy with …

Weapons Of Mass Disruption: How Small States Use Cyber To Resist Larger Powers, Russell Alexander Korb

Graduate Program in International Studies Theses & Dissertations

This paper examines the ways in which small states can engage larger actors using cyber- attacks. Since the end of both World Wars, small states have increased in both numbers and relevance, with strong international institutions and norms against military aggression allowing small states to gain legitimacy by the very act of participating in the international system. However, although small states can now do more than simply choose a larger, stronger benefactor to ward off their enemies, they still cannot defy larger powers outright due to the still- dramatic difference in capabilities between them. Those small states interested in confronting …

Ransomware In Healthcare: Threats, Impacts, And Mitigation Strategies, Mackenzie Dotson, Kasi Gorli, Alberto Coustasse

Management Faculty Research

Excerpt: The growing digitalization of healthcare has exposed hospitals to significant cybersecurity threats, particularly ransomware attacks. The Health Sector Cybersecurity Coordination Center (HC3) reported that as of mid-2024, there were 730 cyber-attacks worldwide against healthcare institutions, with 530 targeting the U.S. (AHA, 2024). Half of these incidents involved ransomware, a type of malware that restricts access to critical data until a ransom is paid (HHS, 2021). Hospitals are attractive targets for cybercriminals due to their essential role in patient care. Cybercriminals exploit vulnerabilities in hospital networks, often causing severe operational and financial damage. Factors such as understaffed IT teams, outdated …

Cyber Threats In Healthcare: The Ransomware Epidemic, Mackenzie Dotson, Kasi Gorli, Alberto Coustasse

Management Faculty Research

In this presentation, we will delve into the growing ransomware crisis in healthcare, examining how these cyber threats disrupt hospital operations, jeopardize patient safety, and impose significant financial burdens. From understanding how ransomware infiltrates hospital systems to exploring real-world case studies, we will uncover the devastating impact of these attacks. Our discussion will also focus on mitigation strategies, cybersecurity best practices, and policy recommendations to safeguard healthcare institutions from future threats.