Information Security Commons^™

National Cyber Security Licence Consultation Report: Stakeholder Consultation Workshops Consolidated Feedback Held Oct – Nov 2023, Nicola F. Johnson, Leslie F. Sikos, Ahmed Ibrahim, Marnie Mckee

Research outputs 2022 to 2026

The consultation workshops invited stakeholders to join a roundtable environment to comment on and discuss the Consultation Paper, shared by Project Lead Associate Professor Nicola Johnson, Edith Cowan University (ECU) in October 2023. The purpose of the Consultation Paper was to identify whether stakeholders agreed that the national cyber security licence the Research Team had developed to date was a best solution towards addressing K-12 students’ cyber security education needs, which was found to not presently be sufficient (see Johnson et al., 2022). Eight workshops were conducted over a month-long period held October to November 2023. 250 invitations were sent …

Genai In Rule-Based Systems For Iomt Security: Testing And Evaluation, Kulsoom S. Bughio, David M. Cook, Syed Afaq A. Shah

Research outputs 2022 to 2026

Generative AI (GenAI) represents a significant advancement in artificial intelligence research, offering numerous benefits and opening new avenues for innovation across various domains. In healthcare, Generative AI has shown promise in applications such as drug discovery, personalized medicine, and medical imaging. This paper examines the role of Generative AI in rule-based systems, where vulnerabilities are detected with the help of formal logic. In this context, the ruleset is generated and tested to evaluate the performance of rule-based systems with the aid of GenAI. The effectiveness of the GenAI tool was evaluated using a publicly available case study from a laboratory …

Secrecy Rate Maximization For Active Reconfigurable Intelligent Surface Assisted Mimo Systems, Bin Gao, Jingru Zhao, Shihao Yan, Shaozhang Xiao

Research outputs 2022 to 2026

Reconfigurable intelligent surface (RIS) is a promising technology for future 6G communications and has been used to enhance secrecy performance. However, the performance improvement is restricted by the 'double fading' effect of the reflection channel link. To address this issue, we introduce an active RIS design, where the reflecting elements of RIS not only adjust the phase shift but also amplify the reflected signal through the amplifier integrated into its elements. To obtain a satisfactory solution to the non-convex problem resulting from this design, the penalty dual decomposition based alternating gradient projection (PDDAPG) method is proposed. We compare the proposed …

The Impact Of Domain Name Server (Dns) Over Hypertext Transfer Protocol Secure (Https) On Cyber Security: Limitations, Challenges, And Detection Techniques, Muhammad Dawood, Shanshan Tu, Chuangbai Xiao, Muhammad Haris, Hisham Alasmary, Muhammad Waqas, Sadaqat Ur Rehman

Research outputs 2022 to 2026

The DNS over HTTPS (Hypertext Transfer Protocol Secure) (DoH) is a new technology that encrypts DNS traffic, enhancing the privacy and security of end-users. However, the adoption of DoH is still facing several research challenges, such as ensuring security, compatibility, standardization, performance, privacy, and increasing user awareness. DoH significantly impacts network security, including better end-user privacy and security, challenges for network security professionals, increasing usage of encrypted malware communication, and difficulty adapting DNS-based security measures. Therefore, it is important to understand the impact of DoH on network security and develop new privacy-preserving techniques to allow the analysis of DoH traffic …

Human-Empathy Accessibility Learning (Heal) Intervention Model Towards Critical Soft Skills Development For Career Readiness Among Computing Undergraduate Students, Jami Cotler, Eszter Kiss, Dmitry Burshteyn, Eben Afrifa-Yamoah

Research outputs 2022 to 2026

This pilot mixed methods study explores the impact of Human-Empathy Accessibility Learning (HEAL) interventions on soft skills development in undergraduate computing students, emphasizing their role in job readiness and perceived employability. HEAL interventions aimed to enhance accessibility awareness, focusing on motivation, empathy, and emotional intelligence. Participants were assigned to control and experiment groups, with qualitative findings showing empathetic growth in the experiment group. Quantitative results partially supported qualitative findings, indicating statistically significant changes across measures. Despite quantitative limitations, short-term empathy interventions showed potential benefits for job readiness. The study discusses implications of mixed findings and recommends future research directions.

Leveraging Finite-Precision Errors In Chaotic Systems For Enhanced Image Encryption, B. M. El-Den, Saad Aldosary, Haitham Khaled, Tarek M. Hassan, Walid Raslan

Research outputs 2022 to 2026

This research explores the application of chaotic systems in generating pseudo-random numbers for encryption protocols, offering a novel perspective on addressing the challenges posed by limited computer precision in cryptographic applications. Chaotic systems, while promising for encryption, often suffer from degradation in their chaotic properties when implemented on computers with finite precision. Previous studies have primarily aimed to mitigate this issue, with limited consideration of harnessing finite-precision errors as a potential source of randomness. In this study, we propose an innovative encryption method that leverages finite-precision errors within chaotic systems. The algorithm generates a keystream based on lower bound error …

Pdf Malware Detection: Toward Machine Learning Modeling With Explainability Analysis, G. M.Sakhawat Hossain, Kaushik Deb, Helge Janicke, Iqbal H. Sarker

Research outputs 2022 to 2026

The Portable Document Format (PDF) is one of the most widely used file types, thus fraudsters insert harmful code into victims' PDF documents to compromise their equipment. Conventional solutions and identification techniques are often insufficient and may only partially prevent PDF malware because of their versatile character and excessive dependence on a certain typical feature set. The primary goal of this work is to detect PDF malware efficiently in order to alleviate the current difficulties. To accomplish the goal, we first develop a comprehensive dataset of 15958 PDF samples taking into account the non-malevolent, malicious, and evasive behaviors of the …

Developing A Novel Ontology For Cybersecurity In Internet Of Medical Things-Enabled Remote Patient Monitoring, Kulsoom S. Bughio, David M. Cook, Syed A. A. Shah

Research outputs 2022 to 2026

IoT has seen remarkable growth, particularly in healthcare, leading to the rise of IoMT. IoMT integrates medical devices for real-time data analysis and transmission but faces challenges in data security and interoperability. This research identifies a significant gap in the existing literature regarding a comprehensive ontology for vulnerabilities in medical IoT devices. This paper proposes a fundamental domain ontology named MIoT (Medical Internet of Things) ontology, focusing on cybersecurity in IoMT (Internet of Medical Things), particularly in remote patient monitoring settings. This research will refer to similar-looking acronyms, IoMT and MIoT ontology. It is important to distinguish between the two. …

A Systematic Review Of K-12 Cybersecurity Education Around The World, Ahmed Ibrahim, Marnie Mckee, Leslie F. Sikos, Nicola F. Johnson

Research outputs 2022 to 2026

This paper presents a systematic review of K-12 cybersecurity education literature from around the world. 24 academic papers dated from 2013-2023 were eligible for inclusion in the literature established within the research protocol. An additional 19 gray literature sources comprised the total. A range of recurring common topics deemed as aspects of cybersecurity behavior or practice were identified. A variety of cybersecurity competencies and skills are needed for K-12 students to apply their knowledge. As may be expected to be the case with interdisciplinary fields, studies are inherently unclear in the use of their terminology, and this is compounded in …

Expanding Australia's Defence Capabilities For Technological Asymmetric Advantage In Information, Cyber And Space In The Context Of Accelerating Regional Military Modernisation: A Systemic Design Approach, Pi-Shen Seet, Anton Klarin, Janice Jones, Michael N. Johnstone, Violetta Wilk, Stephanie Meek, Summer O'Brien

Research outputs 2022 to 2026

Introduction. The aim of the project was to conduct a systemic design study to evaluate Australia'sopportunities and barriers for achieving a technological advantage in light of regional military technological advancement. It focussed on the three domains of (1) cybersecurity technology, (2) information technology, and (3) space technology.

Research process. Employing a systemic design approach, the study first leveraged scientometric analysis, utilising informetric mapping software (VOSviewer) to evaluate emerging trends and their implications on defence capabilities. This approach facilitated a broader understanding of the interdisciplinary nature of defence technologies, identifying key areas for further exploration. The subsequent survey study, engaging 828 …

Towards Blockchain-Based Secure Bgp Routing, Challenges And Future Research Directions, Qiong Yang, Li Ma, Shanshan Tu, Sami Ullah, Muhammad Waqas, Hisham Alasmary

Research outputs 2022 to 2026

Border Gateway Protocol (BGP) is a standard inter-domain routing protocol for the Internet that conveys network layer reachability information and establishes routes to different destinations. The BGP protocol exhibits security design defects, such as an unconditional trust mechanism and the default acceptance of BGP route announcements from peers by BGP neighboring nodes, easily triggering prefix hijacking, path forgery, route leakage, and other BGP security threats. Meanwhile, the traditional BGP security mechanism, relying on a public key infrastructure, faces issues like a single point of failure and a single point of trust. The decentralization, anti-tampering, and traceability advantages of blockchain offer …

Achieving Covert Communication With A Probabilistic Jamming Strategy, Xun Chen, Fujun Gao, Min Qiu, Jia Zhang, Feng Shu, Shihao Yan

Research outputs 2022 to 2026

In this work, we consider a covert communication scenario, where a transmitter Alice communicates to a receiver Bob with the aid of a probabilistic and uninformed jammer against an adversary warden's detection. The transmission status and power of the jammer are random and follow some priori probabilities. We first analyze the warden's detection performance as a function of the jammer's transmission probability, transmit power distribution, and Alice's transmit power. We then maximize the covert throughput from Alice to Bob subject to a covertness constraint, by designing the covert communication strategies from three different perspectives: Alice's perspective, the jammer's perspective, and …

Age Of Sensing Empowered Holographic Isac Framework For Nextg Wireless Networks: A Vae And Drl Approach, Apurba Adhikary, Avi Deb Raha, Yu Qiao, Md. Shirajum Munir, Monishanker Halder, Choong Seon Hong

School of Cybersecurity Faculty Publications

This paper proposes an artificial intelligence (AI) framework that leverages integrated sensing and communication (ISAC), aided by the age of sensing (AoS) to ensure the timely location updates of the users for a holographic MIMO (HMIMO)- enabled wireless network. The AI-driven framework guarantees optimal power allocation for efficient beamforming by activating the minimal number of grids from the HMIMO base station. An optimization problem is formulated to maximize the sensing utility function, aiming to maximize the signal-to-interference-plus-noise ratio (SINR) of the received signal, beam-pattern gains to improve the sensing SINR of reflected echo signals and maximizing the evidence lower bound …

Applications Of Ai/Ml In Maritime Cyber Supply Chains, Rafael Diaz, Ricardo Ungo, Katie Smith, Lida Haghnegahdar, Bikash Singh, Tran Phuong

School of Cybersecurity Faculty Publications

Digital transformation is a new trend that describes enterprise efforts in transitioning manual and likely outdated processes and activities to digital formats dominated by the extensive use of Industry 4.0 elements, including the pervasive use of cyber-physical systems to increase efficiency, reduce waste, and increase responsiveness. A new domain that intersects supply chain management and cybersecurity emerges as many processes as possible of the enterprise require the convergence and synchronizing of resources and information flows in data-driven environments to support planning and execution activities. Protecting the information becomes imperative as big data flows must be parsed and translated into actions …

Robustsentembed: Robust Sentence Embeddings Using Adversarial Self-Supervised Contrastive Learning, Javad Rafiei Asl, Prajwal Panzade, Eduardo Blanco, Daniel Takabi, Zhipeng Cai

School of Cybersecurity Faculty Publications

Pre-trained language models (PLMs) have consistently demonstrated outstanding performance across a diverse spectrum of natural language processing tasks. Nevertheless, despite their success with unseen data, current PLM-based representations often exhibit poor robustness in adversarial settings. In this paper, we introduce RobustSentEmbed, a self-supervised sentence embedding framework designed to improve both generalization and robustness in diverse text representation tasks and against a diverse set of adversarial attacks. Through the generation of high-risk adversarial perturbations and their utilization in a novel objective function, RobustSentEmbed adeptly learns high-quality and robust sentence embeddings. Our experiments confirm the superiority of RobustSentEmbed over state-of-the-art representations. Specifically, …

Mosaic: A Prune-And-Assemble Approach For Efficient Model Pruning In Privacy-Preserving Deep Learning, Yifei Cai, Qiao Zhang, Rui Ning, Chunsheng Xin, Hongyi Wu

Computer Science Faculty Publications

To enable common users to capitalize on the power of deep learning, Machine Learning as a Service (MLaaS) has been proposed in the literature, which opens powerful deep learning models of service providers to the public. To protect the data privacy of end users, as well as the model privacy of the server, several state-of-the-art privacy-preserving MLaaS frameworks have also been proposed. Nevertheless, despite the exquisite design of these frameworks to enhance computation efficiency, the computational cost remains expensive for practical applications. To improve the computation efficiency of deep learning (DL) models, model pruning has been adopted as a strategic …

Using Feature Selection Enhancement To Evaluate Attack Detection In The Internet Of Things Environment, Khawlah Harahsheh, Rami Al-Naimat, Chung-Hao Chen

Electrical & Computer Engineering Faculty Publications

The rapid evolution of technology has given rise to a connected world where billions of devices interact seamlessly, forming what is known as the Internet of Things (IoT). While the IoT offers incredible convenience and efficiency, it presents a significant challenge to cybersecurity and is characterized by various power, capacity, and computational process limitations. Machine learning techniques, particularly those encompassing supervised classification techniques, offer a systematic approach to training models using labeled datasets. These techniques enable intrusion detection systems (IDSs) to discern patterns indicative of potential attacks amidst the vast amounts of IoT data. Our investigation delves into various aspects …

Deapsecure Computational Training For Cybersecurity: Progress Toward Widespread Community Adoption, Wirawan Purwanto, Bahador Dodge, Karina Arcaute, Masha Sosonkina, Hongyi Wu

Electrical & Computer Engineering Faculty Publications

The Data-Enabled Advanced Computational Training Program for Cybersecurity Research and Education (DeapSECURE) is a non-degree training consisting of six modules covering a broad range of cyberinfrastructure techniques, including high performance computing, big data, machine learning and advanced cryptography, aimed at reducing the gap between current cybersecurity curricula and requirements needed for advanced research and industrial projects. Since 2020, these lesson modules have been updated and retooled to suit fully-online delivery. Hands-on activities were reformatted to accommodate self-paced learning. In this paper, we summarize the four years of the project comparing in-person and on-line only instruction methods as well as outlining …

Ensemble Learning With Sleep Mode Management To Enhance Anomaly Detection In Iot Environment, Khawlah Harahsheh, Rami Al-Naimat, Malek Alzaqebah, Salam Shreem, Esraa Aldreabi, Chung-Hao Chen

Electrical & Computer Engineering Faculty Publications

The rapid proliferation of Internet of Things (IoT) devices has underscored the critical need for energy-efficient cybersecurity measures. This presents the dual challenge of maintaining robust security while minimizing power consumption. Thus, this paper proposes enhancing the machine learning performance through Ensemble Techniques with Sleep Mode Management (ELSM) approach for IoT Intrusion Detection Systems (IDS). The main challenge lies in the high-power consumption attributed to continuous monitoring in traditional IDS setups. ELSM addresses this challenge by introducing a sophisticated sleep-awake mechanism, activating the IDS system only during anomaly detection events, effectively minimizing energy expenditure during periods of normal network operation. …

Irs-Enabled Noma Communication Systems: A Network Architecture Primer With Future Trends And Challenges, Haleema Sadia, Ahmad Kamal Hassan, Ziaul Haq Abbas, Ghulam Abbas, Muhammad Waqas, Zhu Han

Research outputs 2022 to 2026

Non-Orthogonal Multiple Access (NOMA) has already proven to be an effective multiple access scheme for 5th Generation (5G) wireless networks. It provides improved performance in terms of system throughput, spectral efficiency, fairness, and energy efficiency (EE). However, in conventional NOMA networks, performance degradation still exists because of the stochastic behavior of wireless channels. To combat this challenge, the concept of Intelligent Reflecting Surface (IRS) has risen to prominence as a low-cost intelligent solution for Beyond 5G (B5G) networks. In this paper, a modeling primer based on the integration of these two cutting-edge technologies, i.e., IRS and NOMA, for B5G wireless …