Cybersecurity Commons^™

Leveraging Large Language Models To Create Learner Personas For Training Design, N. Lovett, M. Yang, K. Herman, B. Li, M. Sosonkina, W. Purwanto, P. Jiang, M. H. Wu

Electrical & Computer Engineering Faculty Publications

This case examines the innovative use of Large Language Models (LLMs) to generate learner personas for developing learner-centered cybersecurity training materials when direct access to initial learner data is not available. The team developed a nine-stage iterative process for creating and refining AI-generated personas to address this constraint, integrating ethical review, stakeholder feedback, and action research principles. The process expanded upon Kouprie and Visser’s (2009) empathic design framework to ensure cultural responsiveness and mitigate potential biases in LLM outputs. Through multiple refinement cycles, initial generic personas evolved into detailed, context-rich archetypes which informed the development of effective and context-responsive training …

Enhancing Cyber Situational Awareness Through Dynamic Adaptive Symbology: The Dass Framework, Nicholas Macrino, Sergio Pallas Enguita, Chung-Hao Chen

Electrical & Computer Engineering Faculty Publications

The static nature of traditional military symbology, such as MIL-STD-2525D, hinders effective real-time threat detection and response in modern cybersecurity operations. This research introduces the Dynamic Adaptive Symbol System (DASS), a novel framework enhancing cyber situational awareness in military and enterprise environments. The DASS addresses static symbology limitations by employing a modular Python 3.10 architecture that uses machine learning-driven threat detection to dynamically adapt symbol visualization based on threat severity and context. Empirical testing assessed the DASS against a MIL-STD-2525D baseline using active cybersecurity professionals. Results show that the DASS significantly improves threat identification rates by 30% and reduces response …

T3-Ciders: Fostering A Community Of Practice In Ci-And Data Enabled Cybersecurity Research Through A Train-The-Trainer Program, Wirawan Purwanto, Mohan Yang, Peng Jiang, Masha Sosonkina

Electrical & Computer Engineering Faculty Publications

We present a training program named T³-CIDERS, the Train- The-Trainer approach to fostering cyberinfrastructure (CI)- and Data-Enabled Research in CyberSecurity. T³-CIDERS is a train-the-trainer program for advanced cyberinfrastructure (CI) skills that is designed to be synergistic with research, teaching, and learning activities in cybersecurity and cyber-related disciplines. The participants, termed 'future trainers' (FTs), are trained in effective instructional design and CI hands-on materials from DeapSECURE, developed in a previous CyberTraining program. T³-CIDERS aims to enhance cybersecurity research and education through broader adoption of advanced CI techniques such as artificial intelligence, big data, parallel programming, and platforms like high-performance computing (HPC) …

Action This Day: The Mathematics And Machinations That Bested The German Enigma, Jonah Weinbaum

Dartmouth College Master’s Theses

This thesis presents a comprehensive and chronological overview of cryptographic techniques designed to break Enigma, beginning in 1932 and culminating in the creation of the Turing-Welchman Bombe. We discuss the mathematical theory and electromechanical implements used to decode one of history's greatest ciphers.

Reexamining the Bombe through the lens of modern group theory, we critique Alan Turing's estimation of the number of "stops" that the Bombe produces for various plaintext-ciphertext pairing structures. To address its limitations, we introduce a new framework for estimating the number of stops by extending John Dixon's theorem concerning the probability that uniformly distributed elements of …

Data Injustice In Global Justice, Asaf Lubin, Cherry Tang

Articles by Maurer Faculty

In May 2020, the United Nations Secretary-General unveiled a sweeping “Data Strategy for Action by Everyone, Everywhere,” seeking to unlock the UN’s “full data potential.” The International Criminal Court’s Office of the Prosecutor followed suit, declaring in 2023 its intent to acquire advanced cyber forensic tools so as to hold the “widest range of digital evidence globally.” Across international institutions, data-driven governance has become the norm, with humanitarian agencies and tribunals transforming into “data hubs and information clearinghouses.” This Article critiques the unfettered datafication of global justice by international courts and organizations. These entities have aggressively expanded their data-driven operations …

Grosafe: In-Classroom Technology-Enabled Solution To Build Societal Resilience Against Child Grooming, Christina Thorpe, Fiona Jennings

Conference Papers

GroSafe is an innovative initiative developed by TU Dublin in partnership with the ISPCC to address the critical issue of child grooming. By leveraging cutting-edge digital technologies, GroSafe focuses on educating children, caregivers, and educators to recognise, report, and prevent grooming behaviours. It integrates a 3D educational gaming environment with adaptive learning tools, enabling safe and effective engagement for children, including those with diverse learning needs. Designed to align with Ireland’s SPHE curriculum, GroSafe empowers schools and communities to tackle grooming through early intervention and resilience building.

Toward An Insider Threat Education Platform: A Theoretical Literature Review, Haywood Gelman, John D. Hastings, David Kenley, Eleanor Loiacono

Research & Publications

Insider threats (InTs) within organizations are small in number but have a disproportionate ability to damage systems, information, and infrastructure. Existing InT research studies the problem from psychological, technical, and educational perspectives. Proposed theories include research on psychological indicators, machine learning, user behavioral log analysis, and educational methods to teach employees recognition and mitigation techniques. Because InTs are a human problem, training methods that address InT detection from a behavioral perspective are critical. While numerous technological and psychological theories exist on detection, prevention, and mitigation, few training methods prioritize psychological indicators. This literature review studied peer-reviewed, InT research organized by …

Safeguarding Virtual Healthcare: A Novel Attacker-Centric Model For Data Security And Privacy, Suvineetha Herath, Haywood Gelman, John Hastings, Yong Wang

Research & Publications

The rapid growth of remote healthcare delivery has introduced significant security and privacy risks to protected health information (PHI). Analysis of a comprehensive healthcare security breach dataset covering 2009-2023 reveals their significant prevalence and impact. This study investigates the root causes of such security incidents and introduces the Attacker-Centric Approach (ACA), a novel threat model tailored to protect PHI. ACA addresses limitations in existing threat models and regulatory frameworks by adopting a holistic attacker-focused perspective, examining threats from the viewpoint of cyber adversaries, their motivations, tactics, and potential attack vectors. Leveraging established risk management frameworks, ACA provides a multi-layered approach …

Microsegmented Cloud Network Architecture Using Open-Source Tools For A Zero Trust Foundation, Sunil Arora, John Hastings

Research & Publications

This paper presents a multi-cloud networking architecture built on zero trust principles and micro-segmentation to provide secure connectivity with authentication, authorization, and encryption in transit. The proposed design includes the multi-cloud network to support a wide range of applications and workload use cases, compute resources including containers, virtual machines, and cloud-native services, including IaaS (Infrastructure as a Service), PaaS (Platform as a service). Furthermore, open-source tools provide flexibility, agility, and independence from locking to one vendor technology. The paper provides a secure architecture with micro-segmentation and follows zero trust principles to solve multi-fold security and operational challenges.

Mitigating Code Reuse Attacks On Risc-V Binaries: Minimizing Gadget Availability Using The Compressed Extension, Heitor Vieira

Theses and Dissertations

Embedded systems are vital in civilian and military applications, requiring high performance and security. The open RISC-V Instruction Set Architecture (ISA) offers significant advantages, including security through community review and strategic independence in microchip supplies. Brazil’s recent partnership with RISC-V highlights its potential for national technological sovereignty. However, RISC-V is not inherently resistant to code reuse attacks (CRAs), highlighting the need to integrate security measures early in development. The RISC-V Compressed extension, while beneficial for optimizing performance and code flexibility, introduces security trade-offs. As RISC-V adoption grows, particularly in critical systems, addressing these security challenges from the start is crucial …

Real-Time Network Simulations For Ml/Dl Ddos Detection Using Docker, Luis D. Garcia

Master's Theses

As the integration of artificial intelligence (AI) within cybersecurity continues to

grow, machine learning (ML) and deep learning (DL) models are increasingly used to

detect cyber attacks. However, these models are rarely evaluated in real-time attack

scenarios to see how subtle changes from the real networking environment can affect

their predictions. To address this issue, we propose a scalable, platform-independent

Docker testbed specifically designed for simulating real-time Distributed Denial of

Service (DDoS) attack scenarios that allows researchers to deploy and evaluate their

pre-trained, ML and DL detection models. Our framework is simple to configure

and can run across Intel and …

Exploring Secure Methods For Ensuring Data Integrity: A Theoretical Analysis Of Cryptographic And Detection Techniques, Haryam Garcia Martinez

Electronic Theses, Projects, and Dissertations

This study investigates cryptographic methods to ensure data integrity within cloud environments, with a particular focus on comparing the security, performance, and efficiency of MD5 and SHA-256 hash algorithms. Data integrity is critical for protecting sensitive information, especially in sectors like healthcare, where cloud storage solutions are increasingly prevalent. Through a theoretical analysis, the study evaluates the advantages and limitations of MD5 and SHA-256, emphasizing SHA-256’s stronger security capabilities in preventing collision attacks compared to MD5, albeit with higher resource consumption.

The literature review draws from recent advancements in cryptography, blockchain, and artificial intelligence (AI) technologies, presenting a comprehensive view …

Fortifying Ai-Iot Food Supply Chains: Addressing Third-Party Cybersecurity Vulnerabilities, Ashwin Chudasama

Electronic Theses, Projects, and Dissertations

The integration of Artificial Intelligence (AI) and the Internet of Things (IoT) technologies within food supply chains has led to significant operational efficiencies but has also introduced cybersecurity vulnerabilities, especially from third-party vendors supplying critical software and hardware. This study explores these vulnerabilities and evaluates multi-layered defense strategies to mitigate the cybersecurity risks they introduce. The research questions guiding this study are: (Q1) How do third-party vendors contribute to cybersecurity vulnerabilities within AI-IoT systems in the food industry? (Q2) How can multi-layered defense strategies effectively mitigate the cybersecurity risks introduced by these vendors?

Using a systematic literature review (SLR) approach …

The Effects Of Covid-19 Lockdowns On Cybersecurity, Natalie Sanders

Electronic Theses, Projects, and Dissertations

The COVID-19 pandemic and subsequent lockdowns forced many Americans to quickly adapt to working from home, many of which had never done so in the past. In addition, organizations were forced to modify security policies and protocols to allow for remote access to sensitive information. The rapid change in security policies as well as the sudden growth of remote access during the pandemic presented a broader landscape for cyber criminals to attack. In this report, we review the number and type of cyberattacks reported from two (2) years before the pandemic through two (2) years after (1998 through 2023), to …

Protocol Transformations Across Osi Network Stack Layers For Attack, Evasion, And Defense, Nathan Tusing

All Dissertations

Network endpoints frequently contend with errors and deviations within protocols. Many factors account for these deviations including noise, tampering, and algorithm implementations. Intermediate nodes are expected to modify instantiated protocols and not guarantee correctness. This ability to modify traffic enables all sides of network security to alter security and performance properties of protocols, and we define this intermediary modification of an instantiated protocol as a transformation. Protocol transformations traverse layers of the OSI reference model and changes a protocol's time series byte sequence. Within this thesis, we show that this framework applies to multiple domains and protocols. Common examples of …

Enhancing Password Security And Memorability Using Machine Learning And Linguistic Patterns, Jared Wise

LSU New Orleans Theses and Dissertations

In the digital age, text-based passwords remain a primary method for securing online accounts. Yet, users frequently face a dilemma between creating passwords that are easy to remember and sufficiently secure against cyberattacks. This research introduces an approach to password generation that bridges this gap by utilizing linguistic patterns, particularly song lyrics, to develop highly secure and naturally memorable passwords. Using large lyric datasets gained from web scrapes from popular song lyric websites (AZ Lyrics, Genius), features are extracted from a corpus of over 5 million lyrics using sentence structure and natural language processing in a novel way. In using …

A Web Application For Comparing Llm And Knowledge Graph Performance On Cybersecurity Queries, Major Schwartz

Honors Theses

The evolution of cybersecurity has led to a spike in digital threats, both in frequency and complexity, necessitating advanced, intelligent solutions to protect sensitive information. Traditional defense mechanisms are increasingly inadequate, pushing cybersecurity professionals to seek innovative approaches for threat detection, response, and data analysis. This thesis investigates the integration of Large Language Models (LLMs) and Knowledge Graphs into cybersecurity workflows to address these challenges. Specifically, it explores the development of a web application that enables real-time, interactive use of state-of-the-art LLMs, such as OpenAI’s GPT-4 and similar models, for improved threat response and workflow efficiency. Built with a React …

Phantom Jam Sybil Attack In Connected Vehicular Networks, Ahmed Ali Elamin Mohamed

Masters Theses and Doctoral Dissertations

Vehicular Ad-hoc Networks (VANETs) are vulnerable to Sybil attacks, mostly due to the lack of encryption in BSMs. In VANETs, multiple digital certificates (pseudonyms) are assigned to each vehicle to ensure their privacy. However, malicious nodes can exploit these pseudonyms to create ghost vehicles, inducing fake traffic jams and disturbance to other vehicles which may lead to accidents. In this work, we have developed the first sophisticated sybil attack, in which an attacker uses legitimate pseudonyms to create multiple ghost vehicles. These ghost vehicles transmit realistic kinematic data, using trajectory formulas and road maps. Additionally, the ghost vehicles randomly simulate …

A Comparative Study Of Patterns, Causes, And Impacts Of Data Breaches Across Geographical Regions And Time Frames, Bhavish Balsara

Electronic Theses, Projects, and Dissertations

The rise of digital technologies and interconnected systems has made data breaches a growing global concern. This culmination project explores the patterns, causes, and impacts of data breaches across various countries with varying levels of economic development and cybersecurity infrastructure from 2020 to 2023. This research aims to provide insights into the global landscape of data breaches and how they have evolved in recent years. The research questions are: (Q1) How do data breach patterns differ between countries with different levels of economic development and cybersecurity infrastructure? (Q2) What patterns and trends can be identified in data breaches when analyzing …

Container Runtime Vulnerability Mitigation Using User Namespace Isolation, Alexander Edsell

Electronic Theses, Projects, and Dissertations

Although containers have revolutionized application deployment by allowing for rapid and consistent deployment, their growing adoption has also raised significant security concerns. Each container is an isolated instance of an operating system that comes pre-packaged with the users desired applications. With multiple containers running on a host machine, an adversary can potentially break out of the container into the host machine. This project investigates the effectiveness of user namespace isolation as a security mechanism to mitigate container escape vulnerabilities that target the container’s runtime.

The research questions are: Question 1, does user namespace isolation mitigate container runtime vulnerabilities that target …