Data Driven Trade-Off Analysis For Cybersecurity,
2024
University of Cincinnati
Data Driven Trade-Off Analysis For Cybersecurity, Goskel Kucukkaya, Murat Ozer, Murat Balci, Emrah Ugurlu
Engineering Management & Systems Engineering Faculty Publications
Trade-off analysis, a specialization of systems engineering, addresses design criteria like security, cost, performance, and compliance. Monte Carlo simulations are commonly employed to generate impact scenarios for trade-off analysis combined with solution alternatives that accommodate industry-specific considerations and uncertainties. In the cyber domain, this paper proposes a methodology for data-driven trade-off analysis in cybersecurity, leveraging industry reports as primary data sources using confidentiality, integrity, and availability as trade-off analysis objectives. Distribution functions are derived to manage and model uncertainties for various industries. The approach given in this study aims to facilitate informed choices and to enhance cybersecurity decision making and …
Tapped In: The Rise Of Mobile Malware,
2024
Christopher Newport University
Tapped In: The Rise Of Mobile Malware, Chrystofuer Davenport
Cybersecurity Undergraduate Research Showcase
As the world of technology continues to evolve and become more advanced with our life, so do the dangers and threats that are determined to hinder that development. Malware continues to be a danger to internet surfers or people with access to technology. At first it was an issue that existed only with computers but since the evolution of smartphones in the early twenty-first century, mobile devices have been a target for multiple malware viruses. It’s important to be aware of what different viruses are capable of doing and how to avoid them when they are encountered. Even though computers …
A Prototype Application For The Measurement Of Data Breach Event Intensity,
2024
Eastern Michigan University
A Prototype Application For The Measurement Of Data Breach Event Intensity, James Palazzolo
Master's Theses and Doctoral Dissertations
The data breach phenomenon is not new. People have valued information, its protection, and its security for centuries. A data breach is the loss of control over one’s information. In contemporary society (circa 2024), a data breach can occur in several ways: through accidental disclosure, negligence, or malicious action. Likewise, the study of the data breach phenomenon is not new. As with other studies, this research effort seeks to expand the current body of knowledge concerning data breaches. However, unlike previous research, we adopt a novel approach to further our understanding of the phenomenon. By employing topological and phenomenological thinking, …
A Defensive Strategy Against Android Adversarial Malware Attacks,
2024
University of Dschang
A Defensive Strategy Against Android Adversarial Malware Attacks, Fabrice Setephin Atedjio, Jean-Pierre Lienou, Frederica F. Nelson, Sachin S. Shetty, Charles A. Kamhoua
VMASC Publications
Due to the popularity of Android mobile devices over the past ten years, malicious Android applications have significantly increased. Systems utilizing machine learning techniques have been successfully applied for Android malware detection to counter the constantly changing Android malware threats. However, attackers have developed new strategies to circumvent these systems by using adversarial attacks. An attacker can carefully craft a malicious sample to deceive a classifier. Among the evasion attacks, there is the more potent one, which is based on solid optimization constraints: the Carlini-Wagner attack. Carlini-Wagner is an attack that uses margin loss, which is more efficient than cross-entropy …
Enhancing Cyber Resilience Through Traffic Generation Patterns In Complex Networks: A Study On Cascading Failures,
2024
University of Dschang
Enhancing Cyber Resilience Through Traffic Generation Patterns In Complex Networks: A Study On Cascading Failures, Aymar Le Père Tchimwa Bouom, Jean-Pierre Lienou, Wilson Ejuh Geh, Frederica Nelson, Sachin Shetty, Charles Kamhoua
VMASC Publications
Network resilience is the capacity of a network to maintain and restore its fundamental operations during or after a failure. This paper investigates the resilience of communication networks with heterogeneous nodes, with host nodes that generate and receive packets and routers that only forward packets. We focus on how traffic generation patterns, defined as the distribution of data packet creation across hosts, affect network resilience. While previous studies identified optimal host placements that balance traffic loads and enhance network performance, this research explores how traffic generation patterns influence network resilience, particularly during cascading failures, where the failure of one node …
Heuristic Machine Learning Approaches For Identifying Phishing Threats Across Web And Email Platforms,
2024
Dr. Mahalingam College of Engineering and Technology
Heuristic Machine Learning Approaches For Identifying Phishing Threats Across Web And Email Platforms, Ramprasath Jayaprakash, Krishnaraj Natarajan, J. Alfred Daniel, Chandru Vignesh Chinnappan, Jayant Giri, Hong Qin, Saurav Mallik
Data Science Faculty Publications
Life has become more comfortable in the era of advanced technology in this cutthroat competitive world. However, there are also emerging harmful technologies that pose a threat. Without a doubt, phishing is one of the rising concerns that leads to stealing vital information such as passwords, security codes, and personal data from any target node through communication hijacking techniques. In addition, phishing attacks include delivering false messages that originate from a trusted source. Moreover, a phishing attack aims to get the victim to run malicious programs and reveal confidential data, such as bank credentials, one-time passwords, and user login credentials. …
Machine Learning Based Intrusion Detection Framework For Can Bus Vulnerabilities In Modern Vehicles,
2024
West Virginia University
Machine Learning Based Intrusion Detection Framework For Can Bus Vulnerabilities In Modern Vehicles, Obinna C. Agbo
Graduate Theses, Dissertations, and Problem Reports (ETD)
The Controller Area Network (CAN) bus is a crucial communication backbone in modern vehicles, connecting various Electronic Control Units (ECUs). However, inherent design weaknesses such as the lack of encryption and authentication make CAN networks vulnerable to cyber-attacks, including spoofing, Denial of Service (DoS), and fuzzing attacks. This thesis thoroughly evaluates these vulnerabilities and the limitations of existing security frameworks like Message Authentication Codes (MACs) and encryption, advocating for the adoption of Intrusion Detection Systems (IDS) as a more practical solution for CAN bus security. The proposed IDS leverages advanced machine learning techniques to accurately detect intrusions, even under complex …
Passperfect: A Secure One Time Password Authentication System,
2024
University of North Florida
Passperfect: A Secure One Time Password Authentication System, Charlene H. Crawshaw
UNF Graduate Theses and Dissertations
Most organizations have established strong password policies and standards to ensure the confidentiality, integrity, and availability of their data, applications, and critical systems. Even with rigorous implementations and layered approaches such as utilizing multifactor authentications, there are still flaws and vulnerabilities as they have a high dependency on the user adhering to them. In conjunction with these policies, a strong security awareness program should be implemented to educate the end user about strong password hygiene. In this work, we design and implement a secure one-time password (OTP) system, “PassPerfect”, to provide a method of enforcing a strong set of password …
Towards Trust And Reputation As A Service In Society 5.0,
2024
Old Dominion University
Towards Trust And Reputation As A Service In Society 5.0, Stephan Olariu, Ravi Mukkamala, Meshari Aljohani
Computer Science Faculty Publications
Our paper was inspired by the recent Society 5.0 initiative of the Japanese Government which seeks to create a sustainable human-centric society by putting to work recent advances in technology. One of the key challenges in implementing Society 5.0 is providing trusted and secure services for everyone to use. Motivated by this challenge, this paper makes three contributions that we summarize as follows: Our first main contribution is to propose a novel blockchain and smart contract-based trust and reputation service design to reduce the uncertainty associated with buyer feedback in marketplaces that we expect to see in Society 5.0. Our …
Qctaas (Quality Cloud Teaching As A Service): An Immersive Framework For Teaching Cloud Computing For Cybersecurity Majors,
2024
The University of Texas Rio Grande Valley
Qctaas (Quality Cloud Teaching As A Service): An Immersive Framework For Teaching Cloud Computing For Cybersecurity Majors, Mahmoud K. Quweider, Liyu Zhang, Alexis Aaron De La Cruz
Informatics and Engineering Systems Faculty Publications
Abstract Cloud Computing and Cybersecurity are at the heart of our recently created new bachelor-level degree in cybersecurity that addresses the national need for cybersecurity specialists. Cloud Computing involves many service models, including IaaS, PaaS, and SaaS, and many deployment models including Public, Private, and Hybrid clouds. Within the services and deployment models lies many concepts and practical implementations that a Cyber-analyst needs to master. We have adopted an immersive approach to teaching Cloud Computing services that introduces standard concepts based on clearly defined objectives from national certification authorities such as CompTIA Cloud+, covering all major services offered by the …
An Enhanced Real-Time Intrusion Detection Framework Using Federated Transfer Learning In Large-Scale Iot Networks,
2024
Old Dominion University
An Enhanced Real-Time Intrusion Detection Framework Using Federated Transfer Learning In Large-Scale Iot Networks, Khawlah Harahsheh, Malek Alzaqebah, Chung-Hao Chen
Electrical & Computer Engineering Faculty Publications
The exponential growth of Internet of Things (IoT) devices has introduced critical security challenges, particularly in scalability, privacy, and resource constraints. Traditional centralized intrusion detection systems (IDS) struggle to address these issues effectively. To overcome these limitations, this study proposes a novel Federated Transfer Learning (FTL)-based intrusion detection framework tailored for large-scale IoT networks. By integrating Federated Learning (FL) with Transfer Learning (TL), the framework enhances detection capabilities while ensuring data privacy and reducing communication overhead. The hybrid model incorporates convolutional neural networks (CNNs), bidirectional gated recurrent units (BiGRUs), attention mechanisms, and ensemble learning. To address the class imbalance, Synthetic …
A Critical Computing Curriculum Design Case: Exploring Tribal Sovereignty For Middle School Students,
2023
Utah State University
A Critical Computing Curriculum Design Case: Exploring Tribal Sovereignty For Middle School Students, Kristin A. Searle, Aubrey Rogowski, Colby Tofel-Grehl, Mengying Jiang
Journal of Computer Science Integration
We report on our efforts to design an integrated computing curriculum for middle school students in Montana that is in line with the Kapor Center’s focus on culturally sustaining-revitalizing pedagogies. Montana provides a unique context for doing this work because a state constitutional mandate requires all K-12 students to learn about tribal histories and cultures through Indian Education For All (IEFA). IEFA centers around seven essential understandings about Indigenous peoples in Montana that are integrated across content areas. In addition, implementation of Montana’s CS standards began in the 2021–2022 school year. In the curricular design, we sought to bring together …
Employing An Abolitionist, Critical Race Pedagogy In Cs: Centering The Voices, Experiences And Technological Innovations Of Black Youth,
2023
University of California, Los Angeles
Employing An Abolitionist, Critical Race Pedagogy In Cs: Centering The Voices, Experiences And Technological Innovations Of Black Youth, Tiera Tanksley
Journal of Computer Science Integration
This paper proposes a pedagogical extension of culturally responsive praxis called abolitionist, critical race pedagogy in CS. To showcase the power and potentiality of this pedagogy, this paper examines the experiences of 2 cohorts of Black high school students (n = 30) who participated in a critical race technology course that was taught during the dual pandemic of COVID-19 and anti-Black racism. The goal of this summer course was to employ an abolitionist, critical race pedagogy in CS to foster Black students’ ability to critically examine the ubiquity of anti-Black racism within the socio-technical architectures (e.g. code, data, algorithms and …
Culturally Responsive-Sustaining Computational Thinking: Enactment In Elementary Classrooms,
2023
Massey University
Culturally Responsive-Sustaining Computational Thinking: Enactment In Elementary Classrooms, Victoria Macann, Aman Yadav
Journal of Computer Science Integration
Technology has increasingly permeated many aspects of everyday life and this evolution raises the need for individuals to understand how the digital world works and what opportunities and risks it brings (Nouri, Zhang, Mannila & Norén, 2019). For this to be an experience for everyone, we need to rethink how we integrate computational thinking (CT) and provide teachers with tools to center their students’ identities, experiences, and cultures in the classroom. In this paper, we present two case studies of primary (elementary) teachers from a full primary (student ages 5–13) semi-rural school in the North Island of New Zealand that …
Exploring The Nexus Of Cybersecurity Leadership, Human Factors, Emotional Intelligence, Innovative Work Behavior, And Critical Leadership Traits,
2023
Embry-Riddle Aeronautical University
Exploring The Nexus Of Cybersecurity Leadership, Human Factors, Emotional Intelligence, Innovative Work Behavior, And Critical Leadership Traits, Sharon L. Burton, Darrell Norman Burrell, Calvin Nobles, Laura A. Jones
Publications
Data shows that 12% of leaders are rated as 'very effective' at leadership. This research emphasizes the importance of understanding human behavior and its impact on leadership effectiveness, innovative work behavior (IWB), and the ability to respond to complex cyber threats, particularly in the realm of cybersecurity leadership. Emotional intelligence (EI), a key human factor, is highlighted as a crucial element that can stimulate cognitive absorption, leading to innovative work behavior and improved innovation efficiency (IE). This underscores the need for leaders to not only be technically proficient but also emotionally intelligent to effectively manage their teams and respond to …
Teacher Candidates’ Conceptions And Practices Of Computational Thinking For Equity,
2023
California State University, Dominguez Hills
Teacher Candidates’ Conceptions And Practices Of Computational Thinking For Equity, Heather F. Clark, Symone A. Gyles, Imelda Nava-Landeros
Journal of Computer Science Integration
This study documents novice science and math teachers’ developing pedagogical approaches to integrating computational thinking (CT) and data into their courses to support educational equity and social justice. The 10 novice teacher candidates (TCs) studied were part of an urban teacher residency program that empowered them with an asset-based pedagogy we describe as “CT for Equity.” Drawing on coursework and interviews as data, we asked three questions: What are teachers’ conceptions of CT? What are their CT instructional practices? And how did their students respond to those practices? To explore conceptions of CT, we used Kafai et al.’s (2020) articulation …
Understanding How To Diversify The Cybersecurity Workforce: A Qualitative Analysis,
2023
Florida Institute of Technology
Understanding How To Diversify The Cybersecurity Workforce: A Qualitative Analysis, Maria Chaparro Osman, Maureen Namukasa, Cherrise Ficke, Isabella Piasecki, Tj Oconnor, Meredith Carroll
Aeronautics Faculty Publications
A robust cybersecurity workforce is critical for protection against a range of malicious attacks. However, it has been noted that there are many vacancies and a shortage of individuals entering the cybersecurity workforce. The workforce shortage has been partially attributed to the lack of diversity in the cybersecurity domain, with women, African Americans, and Hispanics remaining underrepresented in educational and professional settings. Using a qualitative approach, this work sought to investigate what led underrepresented minorities currently involved in cybersecurity to the industry, with the goal of determining methods to attract underrepresented minorities and diversify the workforce. A thematic analysis was …
Smart Homes And You: Iot Device Data Risks In An Ever-Changing World,
2023
Columbus State University
Smart Homes And You: Iot Device Data Risks In An Ever-Changing World, Autumn Person
Theses and Dissertations
Social media applications are increasingly seen as a national security threat and a cause for concern because they can be used to create user profiles on government personnel and on US citizens. These profiles could be used for big data and artificial intelligence purposes of interest to foreign governments. With the rise of big data and AI being used, foreign governments could use this data for a variety of purposes that can affect normal everyday citizens, not just high value personnel. IoT (Internet of Things) devices that the population uses everyday can also pose the same threat. These devices can …
Docker Technology For Small Scenario-Based Excercises In Cybersecurity,
2023
Columbus State University
Docker Technology For Small Scenario-Based Excercises In Cybersecurity, Zeinab Ahmed
Theses and Dissertations
This study aims to better prepare students for cybersecurity roles by providing practical tools that bridge the gap between theory and real-world applications. We investigate the role of small scenario-based exercises for students’ understanding of cybersecurity concepts. In particular, we assess the use of Docker technology to deliver training that includes a simple small scenario on html code injection. The effectiveness of scenario-based learning has long been defined and by using SBL, we are going to create hands-on activity that involves the fundamental topics in cybersecurity using Docker technology, allowing students to see the exploitation of the vulnerabilities and defense …
Asset-Based Approaches To Multilingual Students’ Computer Science Identity Development,
2023
University of California, Irvine
Asset-Based Approaches To Multilingual Students’ Computer Science Identity Development, Sharin Rawhiya Jacob, Mark Warschauer
Journal of Computer Science Integration
While computer science identity development has been examined in several studies, there is much to learn about the development of multilingual students’ computer science (CS) identities. To develop strong CS identities, multilingual students must engage in culturally and linguistically sustaining curriculum, pedagogy, and interaction that draws from their rich and varied resources. This theoretical paper is grounded in a justice-centered, asset-based framework that views the traditions and practices in students’ cultures and communities as strong contributors to knowledge construction in STEM. We draw on multiple studies exploring multilingual student CS identity development to better understand how their personal, familial, community-based, …
