Cybersecurity Commons^™

Out-Of-Band Anomaly Detection For Real Time Operating Systems, Jeffrey K. Holifield

Graduate Theses and Dissertations (2019 - present)

Real Time Operating Systems (RTOS) are increasing present throughout the industrial, business, defense, and healthcare spaces. These lightweight and efficient operating systems are designed to run on embedded, resource constrained devices, often within cyber-physical systems (CPS). A defining characteristic ofRTOSs is that they are deterministic. Tasks are scheduled to run on fixed timelines within guaranteed execution windows. In Industry 4.0 applications for example, sensors must receive and process inputs within a fixed schedule to ensure products are properly manufactured. This requires guaranteed service at fixed time periods. To accomplish this, RTOSs must conform to worst case execution times (WCETs) as …

Broadband Resilience By Zero Trust Community Network Policy Design, Lee W. Mcknight, Danielle Smith

The Lender Center for Social Justice

This paper proposes a Zero Trust framework for broadband policy design to enhance community network resilience. It provides a governance and policy perspective for ensuring secure, equitable broadband access.

Exploring Adversarial Threats To Neuralhash: A Perceptual Hashing Algorithm, Gurleen Kaur

Student Theses

Perceptual hashing algorithms are algorithms that generate content-based image hashes by extracting perceptual features from the images. Unlike cryptographic hashes, which exhibit significant changes with even slight input alterations, perceptual hashes do not change when modifications like compression, color correction and brightness are applied to the images. These hashes are designed to remain similar for inputs that are visually or perceptually alike, which has led to their widespread application in detecting duplicate images, finding similar images for reverse image search and to detecting inappropriate content of Child sexual abuse (CSAM) images by comparing image hashes with dataset of known perceptual …

Zero Trust Architecture For Electric Transportation Systems: A Systematic Survey And Deep Learning Framework For Replay Attack Detection, Grace Muriithi, Behnaz Papari, Ali Arsalan, Laxman Timilsina, Alex Muriithi, Elutunji Buraimoh, Asif Khan, Gokhan Ozkan, Christopher Edrington, Akram Papari

Montclair State University Scholarship & Creative Works

Modern and autonomous hybrid electric vehicles (HEVs), as complex cyber-physical systems, represent a key innovation in the future of transportation. However, the increasing interconnectivity and reliance on digital components expose these vehicles to significant cybersecurity risks. To address these challenges, Zero Trust Architecture (ZTA) has emerged as a promising security framework. Operating on the principle of ‘never trust, always verify,’ ZTA offers a comprehensive approach to ensuring continuous trust verification in HEV systems. Despite its potential, the application of ZTA within cyber-physical vehicular systems remains underexplored, and its practical benefits and limitations are not yet fully understood by the engineering …

Securing Ai-Generated Code, Andreas E. Nelson

Scholarly Horizons: University of Minnesota, Morris Undergraduate Journal

The increasing use of AI for code generation presents significant security challenges, as these tools often lack inherent security awareness and can produce vulnerable code. This paper investigates these security risks, outlining common types of vulnerabilities (such as injection flaws and improper resource handling) found in AI-generated code. It further explores and evaluates mitigation techniques aimed at im-proving code security, including model fine-tuning and adversarial strategies like Security Verifier Enhanced Neural Steering (SVEN). Findings indicate that while current methods offer promising ways to reduce vulnerabilities, ongoing research and development are crucial for the secure and responsible deployment of AI in …

Digital Forensics And Ai: Artifact Analysis And Using Ai In The Forensics Domain, Clinton Joel Walker

LSU Doctoral Dissertations

Digital Forensics (DF) is a field of forensic science focusing on the acquisition, authentication, and analysis of digital evidence while maintaining integrity of that data. DF analysts use forensic tools to parse large volumes of data for investigations and depend on them for identification of pertinent digital evidence in vast amounts of data. Keeping up with innovations and ever-expanding data volumes is a constant challenge for these investigators. The prevalence of Artificial Intelligence (AI) in everyday computing is rapidly expanding, with the use of Machine Learning (ML) and Large Language Models (LLM)s becoming increasingly commonplace. Innovations in technology bring new …

Application Of Hyflex In The Application Security Module, Vanessa Ayala-Rivera

Case studies: Digital Education

No abstract provided.

An Evening With Mobile Hyflex, Peter Alexander

Case studies: Digital Education

Network Security is a 10-credit module taught on the part-time Bachelor of Science in Computing in Digital Forensics & Cyber Security course in TU Dublin. While the overall course is mainly delivered online, there are some topics in this particular module which benefit from having a hands-on interactive element. The challenge though with facilitating learners to have that interactive experience is that the ones who cannot travel to campus should not be excluded. The mobile Hyflex project helped address this challenge by giving students both on campus and online a comparable interactive experience. Changes made to practice (100-150 words).

Enhancing Proof-Of-Learning Security Against Spoofing Attacks Using Model Watermarking, Ozgur Ural

Doctoral Dissertations and Master's Theses

With the rapid expansion of machine learning (ML) technologies across diverse domains such as healthcare, finance, and autonomous systems, ensuring secure and trustworthy training methodologies has become more critical than ever. Proof-of-Learning (PoL) has recently emerged as a foundational mechanism for verifying the computational effort invested in training ML models, thereby certifying the authenticity and reproducibility of the training process. Yet PoL, when deployed in isolation, remains vulnerable to sophisticated spoofing attacks that manipulate its subset-verification pathways and tolerance parameters. In parallel, model watermarking has become indispensable for safeguarding intellectual property and detecting unauthorized model usage. Motivated by these complementary …

The Effectiveness Of Scenario-Based Cybersecurity Day Camps In Southern Rural Appalachia, Anna P. Rodgers-Stine, Tania Williams

Journal of Cybersecurity Education, Research and Practice

As the emphasis on cybersecurity instruction in the K12 environment continues to expand, furthering access to cybersecurity education is paramount across the United States. While designated cybersecurity courses are not available in many schools, the implementation of cybersecurity camps may help to bridge the gap and increase student interest in and awareness of cybersecurity as a field. From 2021 through 2024, cybersecurity day camps were held in a region in rural southern Appalachia with the goal of increasing student interest and access to cybersecurity topics. Through the creation and implementation of these camps, it was found that scenario-based cybersecurity day …

Exploring The Translation Lookaside Buffer (Tlb) For Low-Level Task Differentiation And Classification, Cristian Agredo, Daniel F. Koranek, Christine M. Schubert, Jose A. Gutierrez Del Arroyo, Tor J. Langehaug, Scott R. Graham

Faculty Publications

The primary focus of modern Central Processing Unit (CPU) technologies is performance improvement, with security often considered a secondary concern. As a result, vulnerabilities within the system are overlooked. While significant research, both offensive and defensive, has been conducted on CPU caches, relatively little attention has been given to the Translation Lookaside Buffer (TLB) due to its perceived lack of data granularity. Prior studies have typically combined multiple Hardware Performance Counters (HPCs) or relied on timing analysis to extract meaningful insights. In contrast, this study introduces a novel methodology that leverages only TLB related HPCs for multi-task classification, without incorporating …

Context-Switch Attacks: Understanding And Mitigating The Threat To Llm Applications, Sydney Holder, Bivin Sadler

SMU Data Science Review

Large Language Models (LLMs) are transforming conversational AI, yet their dependence on prompt-supplied context exposes them to context-switch attacks that covertly steer dialogue toward sensitive or malicious ends. A 70 one-sided conversation transcript evaluation set was constructed spanning various fraudulent scenarios. Each transcript embeds adversarial patterns drawn while preserving natural conversational flow. We introduce a hybrid defense that pairs a BERT-based semantic-drift detector (cosine-similarity threshold = 0.70) with a curated keyword and hack-phrase scanner to counter these threats. In aggregate, the system delivered 100 % recall, intercepting every simulated phishing or data-harvesting attempt. The keyword layer achieved perfect precision, generating …

Diversifying Cybersecurity: Evaluation Of An Internet Of Things (Iot)-Based Cybersecurity Training Course Designed To Bridge The Diversity Gap, Maureen Namukasa, Bhoomin B. Chauhan, Carlie Swords, Curtice Gough, Weronika Dymanus, Catherine Diresta, John Vitali, Vivek Sharma, T J. Oconnor, Meredith Carroll

Aeronautics Faculty Publications

This study aimed to evaluate the effectiveness of an eight-module Cybersecurity course at increasing the learning outcomes of middle and high school students with little to no experience, including underrepresented minorities (URMs) in Cybersecurity. Twice we administered and evaluated the Cybersecurity course, which included hands-on IoT-based activities, utilizing collaborative learning, scaffolding, and representation-based learning strategies. Using a quasi-experimental, within-subjects, repeated measures design, each participant experienced a pretest, the course, and a post-test to evaluate the impact on learners’ self-efficacy, interest, and knowledge. The results revealed that (1) at pre-test, female (p = .001) and in one course administration minority …

Video Game Hacking, A General Problem With Generalized Solutions, Luke Rowe

Master's Theses

As video games continue to get more popular and lucrative, the number of malicious actors seeking to exploit them grows with it. As this industry expands, so does the importance of securing games against cheating and abuse. This thesis aims to educate developers to help mitigate the abuse of video games by these malicious actors. The goal of this thesis is to provide a foundational framework for thinking like a hacker and how to make games harder to abuse once a hacker bypasses conventional anti-cheat software.

This thesis outlines some of the most common cheating methods and provides general context …

Exploiting Compiler-Introduced Vulnerabilities In C: A Cross-Compiler And Cross-Architecture Analysis Of Undefined Behavior, Erik Mccutchen

Master's Theses

Compilers are a critical component in generating secure software across engineering disciplines. However, languages like C that permit undefined behavior introduce a fundamental tension between the compiler’s interpretation of undefined behavior and the security of the generated code. This tension can result in security vulnerabilities that, from the programmer's perspective, are ``created'' by the compiler. The widespread use of these languages, combined with the complexity of modern optimizations and limited developer visibility into compiler behavior, makes these vulnerabilities both pervasive and difficult to detect.

Building on prior work, this thesis refines a dataset of C code snippets that exhibit Compiler-Introduced …

Property Testing Ai: An Efficient Frontier, Paul Sopher Lintilhac

Dartmouth College Ph.D Dissertations

In this dissertation, we take a step towards addressing the major problem of a lack of standardized and rigorous approaches to testing and evaluation of AI systems. Taking inspiration from both the fields of Property Testing and Property Based Testing (for programs), we develop a novel taxonomy of partially overlapping classes of properties of AI systems, including simple properties, compound properties, higher order properties, data relation properties, and architecture-utility properties. We argue that this taxonomy categorizes a diverse set of AI traits -- including accuracy, fairness, robustness, monotonicity, point-wise and global privacy properties, sensitivity, and more -- according to the …

Spos: An Attestation Solution For The Detection And Mitigation Of Point Of Sale Malware, Damian Singh Dhesi

Master's Theses

Securing 95% of card present transactions, accounting for billions of transactions a year, has made EMV the premier protocol for card-based payment. Created by and named after Europay, Mastercard, and Visa, the EMV protocol provides multiple solutions to resolve security concerns with the outdated, swipe-based, magnetic stripe payment. Such solutions are Chip and PIN which provides a more secure transaction at a significant time cost and EMV contactless which provides improved security to Chip and PIN at greater ease of use with its quick, tap-to-pay based payment. However, regardless of how secure the EMV protocol makes the card side of …

Efficient Gan-Based Adversarial Example Generation Against Ml-Based Network Intrusion Detection Systems, Darren D. Hartono

Master's Theses

In the realm of network security, Network Intrusion Detection Systems (NIDS) are essential for identifying and mitigating malicious activities targeting networked devices. Traditionally, these systems have relied on signature-based and anomaly-based detection techniques. However, the increasing complexity and adapt- ability of cyber threats have driven the adoption of Machine Learning (ML) ap- proaches in modern NIDS, significantly improving their ability to detect a wider range of attack vectors. Despite these advancements, ML-based NIDS remain vulnerable to adversarial examples—deliberately crafted inputs designed to mislead models and trigger incorrect classifications. Originally identified in the field of computer vision, adversarial examples now pose …

Some Studies On Information Set Decoding Algorithms And Universal Hash Functions, Sreyosi Bhattacharyya

Doctoral Theses

This thesis presents some studies on Information Set Decoding algorithms and Universal Hash Functions. In the context of Information Set Decoding (ISD) the thesis studies time/memory trade-off of ISD algorithms and in the context of universal hash functions, the thesis studies design and efficient implementations of polynomial hash functions defined over prime order fields. A cornerstone of ISD algorithms is the algorithm proposed by Stern and it introduced the meet-in-the-middle collision search approach to ISD algorithms. Though this algorithm is more efficient in terms of asymptotic time complex- ity than the preceding algorithms proposed by Prange, Lee and Brickell and …

Dsa-Api: Data Standardization Automation Using Ai-Powered Apis, Andrew Asher Turner

Master's Theses

The common factor with current implementations of Artificial Intelligence (AI) is data. Companies are constantly looking for new ways to analyze data, but it comes in various formats: Text, Comma Separated Value (CVE), JavaScript Object Notation (JSON), Extensible Markup Language (XML), and Excel. How can AI be adapted to standardize formats for data analysis, integration, and digestion efficiently? Published research acknowledged that Machine Learning (ML) and AI can provide an automated method to speed up this process and limit the human decision-making error. With the advancement in AI, Application Programming Interfaces (APIs) prompt the idea that they can take in …