Cybersecurity Commons^™

Container Runtime Vulnerability Mitigation Using User Namespace Isolation, Alexander Edsell

Electronic Theses, Projects, and Dissertations

Although containers have revolutionized application deployment by allowing for rapid and consistent deployment, their growing adoption has also raised significant security concerns. Each container is an isolated instance of an operating system that comes pre-packaged with the users desired applications. With multiple containers running on a host machine, an adversary can potentially break out of the container into the host machine. This project investigates the effectiveness of user namespace isolation as a security mechanism to mitigate container escape vulnerabilities that target the container’s runtime.

The research questions are: Question 1, does user namespace isolation mitigate container runtime vulnerabilities that target …

The Effects Of Covid-19 Lockdowns On Cybersecurity, Natalie Sanders

Electronic Theses, Projects, and Dissertations

The COVID-19 pandemic and subsequent lockdowns forced many Americans to quickly adapt to working from home, many of which had never done so in the past. In addition, organizations were forced to modify security policies and protocols to allow for remote access to sensitive information. The rapid change in security policies as well as the sudden growth of remote access during the pandemic presented a broader landscape for cyber criminals to attack. In this report, we review the number and type of cyberattacks reported from two (2) years before the pandemic through two (2) years after (1998 through 2023), to …

Exploring Secure Methods For Ensuring Data Integrity: A Theoretical Analysis Of Cryptographic And Detection Techniques, Haryam Garcia Martinez

Electronic Theses, Projects, and Dissertations

This study investigates cryptographic methods to ensure data integrity within cloud environments, with a particular focus on comparing the security, performance, and efficiency of MD5 and SHA-256 hash algorithms. Data integrity is critical for protecting sensitive information, especially in sectors like healthcare, where cloud storage solutions are increasingly prevalent. Through a theoretical analysis, the study evaluates the advantages and limitations of MD5 and SHA-256, emphasizing SHA-256’s stronger security capabilities in preventing collision attacks compared to MD5, albeit with higher resource consumption.

The literature review draws from recent advancements in cryptography, blockchain, and artificial intelligence (AI) technologies, presenting a comprehensive view …

Fortifying Ai-Iot Food Supply Chains: Addressing Third-Party Cybersecurity Vulnerabilities, Ashwin Chudasama

Electronic Theses, Projects, and Dissertations

The integration of Artificial Intelligence (AI) and the Internet of Things (IoT) technologies within food supply chains has led to significant operational efficiencies but has also introduced cybersecurity vulnerabilities, especially from third-party vendors supplying critical software and hardware. This study explores these vulnerabilities and evaluates multi-layered defense strategies to mitigate the cybersecurity risks they introduce. The research questions guiding this study are: (Q1) How do third-party vendors contribute to cybersecurity vulnerabilities within AI-IoT systems in the food industry? (Q2) How can multi-layered defense strategies effectively mitigate the cybersecurity risks introduced by these vendors?

Using a systematic literature review (SLR) approach …

Real-Time Network Simulations For Ml/Dl Ddos Detection Using Docker, Luis D. Garcia

Master's Theses

As the integration of artificial intelligence (AI) within cybersecurity continues to

grow, machine learning (ML) and deep learning (DL) models are increasingly used to

detect cyber attacks. However, these models are rarely evaluated in real-time attack

scenarios to see how subtle changes from the real networking environment can affect

their predictions. To address this issue, we propose a scalable, platform-independent

Docker testbed specifically designed for simulating real-time Distributed Denial of

Service (DDoS) attack scenarios that allows researchers to deploy and evaluate their

pre-trained, ML and DL detection models. Our framework is simple to configure

and can run across Intel and …

Hybrid Deep Learning-Based Model For Eclipse Attack Detection On Ethereum Network, Dhanasak Bhumichai

Graduate Theses and Dissertations (2019 - present)

An eclipse attack is a significant cyber threat targeting the network layer of blockchain platforms. Detecting eclipse attacks is challenging for several reasons. First, there are no available datasets for training and testing models. Second, comprehensive studies identifying features to detect eclipse attacks are lacking. Additionally, the amount of eclipse network traffic is much smaller than that of normal network traffic, which leads to imbalanced samples. Moreover, the characteristics of eclipse network traffic closely resemble those of normal traffic, causing overlapping samples, which makes it challenging for traditional classifiers to learn how to identify eclipse attacks. To address these challenges, …

Protocol Transformations Across Osi Network Stack Layers For Attack, Evasion, And Defense, Nathan Tusing

All Dissertations

Network endpoints frequently contend with errors and deviations within protocols. Many factors account for these deviations including noise, tampering, and algorithm implementations. Intermediate nodes are expected to modify instantiated protocols and not guarantee correctness. This ability to modify traffic enables all sides of network security to alter security and performance properties of protocols, and we define this intermediary modification of an instantiated protocol as a transformation. Protocol transformations traverse layers of the OSI reference model and changes a protocol's time series byte sequence. Within this thesis, we show that this framework applies to multiple domains and protocols. Common examples of …

Digital Humanities: Using Computational Methods On Literature To Understand Human-Water Relations, Ariel Yang

Cybersecurity Undergraduate Research Showcase

By using computational techniques to analyze literature, deeper insights can be gained into human-water relationships across different historical and cultural contexts. Natural Language Processing (NLP) and other data science methods can explore applications of traditional ecological knowledge (TEK) and underlying emotions or beliefs in literature to help understand sustainability. Protecting this sensitive cultural data through ethical applications can further secure future implementations of policies, urban planning, and environmental relationships.

Security Vulnerabilities In Mobile Operating Systems Used In Iot Devices: An Examination Of Current Challenges And Countermeasures, Isain Cortes Jr.

Cybersecurity Undergraduate Research Showcase

No abstract provided.

Drone Vs. Drone, Mariah Smith

Cybersecurity Undergraduate Research Showcase

This paper focuses on the problems that drones pose to digital and physical infrastructure, as well as potential solutions to combat these issues. One solution is incorporating drone usage into ethical hacking. These drone-based attacks are affecting not only economic spaces but also seemingly high-security areas such as prison systems. It is only a matter of time before critical infrastructure is targeted. Conversely, by simulating drone attacks, drones equipped with complex hacking tools and sensors can detect unauthorized pathways and infiltrate networks for the greater good. Incorporating these new practices would enhance digital and physical protection. "Drone vs. Drone" highlights …

A Dynamical Systems Approach For Modeling Malware Propagating Through A Network And Potential Solutions Towards Mitigating Spread, James Johnson

Cybersecurity Undergraduate Research Showcase

Many people draw close parallels between malware propagating through a network and an epidemic spreading through a population. Epidemics are often modeled by a Susceptible-Infected-Recovered (SIR) model, in which a similar system of equations can model the spread of a virus through a computer network, and can be simplified when making assumptions about the network itself and its fixed number of nodes and edges. In this instance, malware propagating in a network also should reflect the network it is propagating through, in which the dynamical system will factor in the nodes of the network and their properties. The system itself …

Enhancing 3d Knowledge-Based Authentication In Vr By Having Fun, William James Doyle V, Christopher Kreider

Cybersecurity Undergraduate Research Showcase

In the modern era of cyber attacks, and an ever-changing online world, safety and security must constantly evolve to fit the current standards. In virtual reality (VR) simple keyboard-typed passwords are a thing of the past. These passwords are complicated and frustrating to input. Along with the creation of VR, it also opened the door to a new era of password-based authentication. Using these systems' technology, password inputting can be a fun experience. These passwords are not only easier, and less frustrating to input, but as shown in previous studies, they can also be faster while still being secure. In …

First Amendment Roadblock? Regulating The Misuse Of Generative Ai Technologies: Impersonation And Appropriation Of Likeness Without Permission, Muhammad Rabiu

Cybersecurity Undergraduate Research Showcase

This paper initially explores the misuse of generative AI technologies, particularly their role in impersonating or appropriating individuals' likeness without consent. It will then analyze technical and legal mitigation strategies and propose recommendations to address this issue in light of the First Amendment’s constitutional Freedom of Speech provision.

From Classroom To Cloud: Why Cybersecurity Education Is Crucial For Tomorrow's Learners, Kiori Edwards

Cybersecurity Undergraduate Research Showcase

This paper examines the transformative impact of cloud computing on education, highlighting how cloud technologies are reshaping teaching and learning environments, making education more accessible, flexible, and collaborative. It also explores the critical importance of incorporating cybersecurity education into school curricula. As digital devices and cloud-based platforms become integral to students' daily lives, they are increasingly vulnerable to cyber threats. This paper argues that early cybersecurity education, starting at the elementary level, is essential for equipping future generations with the knowledge and skills needed to navigate the digital world safely, protect their personal information, and avoid cybercrime.

Phishing Emails: An Evolving Cyberattack, Brooke Waltz

Cybersecurity Undergraduate Research Showcase

This paper describes the history of phishing attacks and how they turned into cyberattacks, focusing on companies. Over the course of 34 years, phishing has been evolving at an alarming rate, especially with AI now coming into play. As phishing attacks have become more prominent towards companies, there has been an increase in financial loss and data breaches, resulting in a loss of trust in companies. With this loss, companies are trying to find solutions to this problem. Some notable attacks were the RSA breach in 2011, the Texas Energy Company in 2014, and the ILOVEYOU virus in 2000. They …

Hacker, Their Actions, And Fear Appeal: A First Look Through The Lens Of Children, Rizu Paudel, Mahdi Nasrullah Al-Ameen

Computer Science Student Research

With the increasing use of computers and smartphones by children, their online safety has become a major concern due to the lack of security awareness. Prior studies pointed to children's poor password habit and vague perceptions on the significance of passwords. While users must be sufficiently motivated to perform a target behavior, a little study to date, focused on understanding how we can encourage children towards strong password creation. As we begin to address this gap, we examined children's perceptions of adversary's actions that instill fear in the context of password compromise. Our semi-structured interviews with 20 children (aged between …

Human Capital Development : Bridging The Skills Gap In The Maritime Administration Of Namibia, Agnes Matheus

World Maritime University Dissertations

No abstract provided.

An Evaluation Of The Legal Framework For Seizure And Detention Of Ships For Maritime Law Enforcement In Nigeria, Adetayo Yusuf Adesokan

World Maritime University Dissertations

No abstract provided.

Bridging The Protection Gap: Innovative Approaches To Shield Older Adults From Ai-Enhanced Scams, Ld Herrera, London Van Sickle, Ashley L. Podhradsky

Research & Publications

Artificial Intelligence (AI) is rapidly gaining popularity as individuals, groups, and organizations discover and apply its expanding capabilities. Generative AI creates or alters various content types including text, image, audio, and video that are realistic and challenging to identify as AI-generated constructs. However, guardrails preventing malicious use of AI are easily bypassed. Numerous indications suggest that scammers are already using AI to enhance already successful scams, improving scam effectiveness, speed and credibility, while reducing detectability of scams that target older adults, who are known to be slow to adopt new technologies. Through hypothetical cases analysis of two leading scams, the …

Challenges, Countermeasures, And Forward-Looking Technologies For Cyber Society Governance From System Security Perspective, Hongbin Pei, Jingxin Hai, Pinghui Wang, Xiaohong Guan

Bulletin of Chinese Academy of Sciences (Chinese Version)

With the rapid development and widespread application of artificial intelligence and information technologies, the cyber society has evolved into a new form featuring human-machine integration, mass interaction, and intelligent interconnection. While transforming human life and production, it has also brought security risks such as cyberattacks, privacy breaches, online rumors, and information cocoons, posing serious challenges to social order. Cyber society governance has thus become a key component of national governance modernization. This study proposes the STC governance paradigm from a system security perspective, covering three key dimensions: security (cyber infrastructure security), trustworthiness (credibility of cyber entity identities), and controllability (content …