Information Security Commons^™

Automating Cyber Analytics, Matthew Zaber

Computer Science and Engineering Theses and Dissertations

Model based security metrics are a growing area of cyber security research concerned with measuring the risk exposure of an information system. These metrics are typically studied in isolation, with the formulation of the test itself being the primary finding in publications. As a result, there is a flood of metric specifications available in the literature but a corresponding dearth of analyses verifying results for a given metric calculation under different conditions or comparing the efficacy of one measurement technique over another. The motivation of this thesis is to create a systematic methodology for model based security metric development, analysis, …

The Prom Problem: Fair And Privacy-Enhanced Matchmaking With Identity Linked Wishes, Dwight Horne

Computer Science and Engineering Theses and Dissertations

In the Prom Problem (TPP), Alice wishes to attend a school dance with Bob and needs a risk-free, privacy preserving way to find out whether Bob shares that same wish. If not, no one should know that she inquired about it, not even Bob. TPP represents a special class of matchmaking challenges, augmenting the properties of privacy-enhanced matchmaking, further requiring fairness and support for identity linked wishes (ILW) – wishes involving specific identities that are only valid if all involved parties have those same wishes.

The Horne-Nair (HN) protocol was proposed as a solution to TPP along with a …

Exploring Attacks And Defenses In Additive Manufacturing Processes: Implications In Cyber-Physical Security, Nicholas Deily

McKelvey School of Engineering Graduate Student Theses & Dissertations

Many industries are rapidly adopting additive manufacturing (AM) because of the added versatility this technology offers over traditional manufacturing techniques. But with AM, there comes a unique set of security challenges that must be addressed. In particular, the issue of part verification is critically important given the growing reliance of safety-critical systems on 3D printed parts. In this thesis, the current state of part verification technologies will be examined in the con- text of AM-specific geometric-modification attacks, and an automated tool for 3D printed part verification will be presented. This work will cover: 1) the impacts of malicious attacks on …

A Multi-Input Deep Learning Model For C/C++ Source Code Attribution, Richard J. Tindell Ii

Masters Theses, 2020-current

Code stylometry is applying analysis techniques to a collection of source code or binaries to determine variations in style. The variations extracted are often used to identify the author of the text or to differentiate one piece from another.

In this research, we were able to create a multi-input deep learning model that could accurately categorize and group code from multiple projects. The deep learning model took as input word-based tokenization for code comments, character-based tokenization for the source code text, and the metadata features described by A. Caliskan-Islam et al. Using these three inputs, we were able to achieve …

The Use Of Digital Millenium Copyright Act To Stifle Speech Through Non-Copyright Related Takedowns, Miller Freeman

Seattle Journal of Technology, Environmental, & Innovation Law

In 1998, Congress passed the Digital Millennium Copyright Act. This law provided new methods of protecting copyright in online media. These protections shift the normal judicial process that would stop the publication of infringing materials to private actors: the online platforms. As a result, online platforms receive notices of infringement and issue takedowns of allegedly copyrighted works without the judicial process which normally considers the purpose of the original notice of infringement. In at least one case, discussed in detail below, this has resulted in a notice and takedown against an individual for reasons not related to the purpose of …

Superb: Superior Behavior-Based Anomaly Detection Defining Authorized Users' Traffic Patterns, Daniel Karasek

Master of Science in Computer Science Theses

Network anomalies are correlated to activities that deviate from regular behavior patterns in a network, and they are undetectable until their actions are defined as malicious. Current work in network anomaly detection includes network-based and host-based intrusion detection systems. However, network anomaly detection schemes can suffer from high false detection rates due to the base rate fallacy. When the detection rate is less than the false positive rate, which is found in network anomaly detection schemes working with live data, a high false detection rate can occur. To overcome such a drawback, this paper proposes a superior behavior-based anomaly detection …

On The Explanation And Implementation Of Three Open-Source Fully Homomorphic Encryption Libraries, Alycia Carey

Computer Science and Computer Engineering Undergraduate Honors Theses

While fully homomorphic encryption (FHE) is a fairly new realm of cryptography, it has shown to be a promising mode of information protection as it allows arbitrary computations on encrypted data. The development of a practical FHE scheme would enable the development of secure cloud computation over sensitive data, which is a much-needed technology in today's trend of outsourced computation and storage. The first FHE scheme was proposed by Craig Gentry in 2009, and although it was not a practical implementation, his scheme laid the groundwork for many schemes that exist today. One main focus in FHE research is the …

The Mental Health Of Black Men: Stabilizing Trauma With Emotional Intelligence, Davis Brandford

School of Professional Studies

The purpose of this study is to explore the relationship between the impact of historical trauma and barriers on African-American males and the effects of emotional intelligence in reducing traumatic experiences. This research study is based on previous research and studies that explores the historical review of African- American oppression, trauma in black males, and mental health in the African American community. This study will utilize the historical trauma and emotional intelligence theories to explore barriers that African Americans have experienced over time and the role emotional intelligence can play to reduce trauma. It also explores the relevance of historical …

Regulating Personal Data Usage In Covid-19 Control Conditions, Mark Findlay, Nydia Remolina

Centre for AI & Data Governance (2019-2025)

As the COVID-19 health pandemic ebbs and flows world-wide, governments and private companies across the globe are utilising AI-assisted surveillance, reporting, mapping and tracing technologies with the intention of slowing the spread of the virus. These technologies have capacity to amass and share personal data for community control and citizen safety motivations that empower state agencies and inveigle citizen co-operation which could only be imagined outside times of real and present personal danger. While not cavilling with the short-term necessity for these technologies and the data they control, process and share in the health regulation mission (provided that the technology …

Crisis Communication And Executive Leadership: Ethical Shortcomings In Government, Daniel Davidoff

School of Professional Studies

This research thesis project is an analysis of how and why governments fail in their attempts at crisis communication. The hypotheses tested are: there exists a negative correlation between unethical leadership and successful crisis communication practices. And governments are more likely to experience these failures due to ethical disconnects in modern politics. Research includes a review of relevant academic literature regarding crisis communication theory, as well as the ethical framework that can be applied to that theory. Cases considered are Hurricane Katrina, the choking death of Eric Garner, and the COVID-19 global pandemic. The research project concludes with a recommendation …

Becoming A Trauma Informed Care Organization, Katie Robery

School of Professional Studies

The Brockton Area Mutli Services Inc or BAMSI is a private, non-profit human services organization providing services to adults and children with developmental disabilities, mental illness, behavioral health, and public health needs. Founded in 1975, BAMSI is in the business of “bringing people and services together.” BAMSI transforms lives by building the capacity of individuals, families, organizations, and communities to learn, thrive, and achieve their goals. BAMSI services promote the recovery, resiliency, and self-determination of the people we serve. As a human services leader, we strive to be the provider of choice. (Duffy, 2019) With an emphasis on respect and …

Diversity And Inclusion In The Workplace; Benefits, Challenges And Strategies For Success, Margaret Leone

School of Professional Studies

In this case study I have explored the topic of diversity and inclusion in the workplace and learned how it can transform a business. When D&I is a serious business strategy supported by senior management it can help recruit and retain top talent, increase profits, and unleash creativity among other benefits. It is important to have leadership that is inclusive so they can set the tone for their staff

This case study evaluates the D&I culture at The Children’s Study Home (CHS) and explores best practices for improvement. CHS is a non-profit human service agency in Western MA, that’s mission …

Young People, Social Media, And Impacts On Well-Being, Andreana Nop

School of Professional Studies

Millennials and Generation Z were born into an age where social media and digital technology have been integrated in nearly all aspects of their lives. While social media has proven to be a valuable communication tool in connecting with each other and sharing information, the long-term psychosocial effects are beginning to become more apparent as social media matures. This study analyzes what these effects are and how communication is impacted for these young people. It questions how young people can leverage social media and decrease harm. The study will be conducted through a literature review and analysis. Its goal is …

Managing Burnout And Secondary Traumatic Stress In Human Service Organizations, Naomi Ingram

School of Professional Studies

This Case Study explores how burnout and secondary traumatic stress impact staffing, service delivery, and organizational effectiveness in a human service agency. The Case Study is focused around Ascentria Care Alliance’s Children & Family Services in Massachusetts, which encompasses three foster care programs: the Unaccompanied Refugee Minor (URM), Division of Children’s Services (DCS), and Intensive Foster Care (IFC) programs. Both individual and organizational approaches are needed to most effectively address burnout and secondary traumatic stress. Individual workers need to build resilience factors such as self-compassion and mindfulness, set appropriate boundaries with clients, engage in ongoing training, support, consultation, and supervision, …

Rest Homes: Their Value On Massachusetts Healthcare Continuum, Ronald Pawelski

School of Professional Studies

In Massachusetts, rest homes provide cost effective care for elderly residents in a community setting. Rest homes, however, are not well-understood and the rest home industry itself suffers greatly, not only from a lack of understanding of the services they provide, but also from the strain on their financial resources due to both competition from other healthcare options and insufficient reimbursement rates for residents’ care.

The paper explores the financial challenges facing the industry and outlines the data that speaks to the value of the rest home care option for both the residents themselves and Massachusetts state healthcare budget. It …

A Case Study On The Best Practices Of The Facilitating Organization For Peer Recovery Support Services In The State Of New Hampshire, Maggie Ringey

School of Professional Studies

In working with the Facilitating Organization for Peer Recovery Support Services through Harbor Homes, I have found that the Recovery Community Organizations that receive support through the FO provide valuable services that help individuals that struggle with substance use disorder achieve and maintain long term sobriety and recovery. The RCOs throughout New Hampshire bridge gaps in services and treatments that are left untouched by traditional clinical methods and through regular check ins, participants at the RCOs have reported that the services provided resulted in positive outcomes in their lives. Throughout the course of this research, I found that the RCOs …

Elder Isolation In Immigrant Communities, Jessica Da Silva

School of Professional Studies

This paper examined loneliness, as a measurement of perceived social isolation, in older immigrant adults. Previous research shows that older adults are more likely to experience social isolation and loneliness. Both of which have a direct correlation with their overall health (Wilson & Molton, 2010, Cacioppo et al., 2002) and mortality rates (Holt-Lunstad et al, 2015). Another international study found that immigrants in particular are at a higher risk for experiencing loneliness (Government of Canada, 2018). In this study, 35 immigrants and non-immigrants participants answered a survey which included 20 questions from the UCLA Loneliness Scale Version 3 (Russel, 1996). …

Dallas, Tx: The Staggering Wealth Gap, Macy Golman

School of Professional Studies

In the summer of 2019, I had the privilege of serving as an AmeriCorps member with an organization called Equal Heart. One of Equal Heart’s main initiatives was to provide meals to children in underserved populations, to make sure that without school in session, these children would still be receiving food. Unfortunately, in many instances, without these meals, many of the children we served would likely not know when they would be eating their next fulfilling meal. There were certain pockets of Dallas that we would travel to everyday, places that were fifteen minutes maximum from my house, but places …

Secure And Efficient Models For Retrieving Data From Encrypted Databases In Cloud, Sultan Ahmed A Almakdi

Graduate Theses and Dissertations

Recently, database users have begun to use cloud database services to outsource their databases. The reason for this is the high computation speed and the huge storage capacity that cloud owners provide at low prices. However, despite the attractiveness of the cloud computing environment to database users, privacy issues remain a cause for concern for database owners since data access is out of their control. Encryption is the only way of assuaging users’ fears surrounding data privacy, but executing Structured Query Language (SQL) queries over encrypted data is a challenging task, especially if the data are encrypted by a randomized …

Cyber Security’S Influence On Modern Society, Nicholas Vallarelli

Honors College Theses

The world of cyber security is evolving every day, and cyber-criminals are trying to take advantage of it to gain as much money and power as possible. As the Internet continues to grow, more people around the world join the Internet. The purpose of this is to see how much of an importance cyber security has and how cyber-criminals are able to utilize the cyberworld for their own personal gain. Research has been done on how the cyberworld got where it is today. Additionally, individual research has been done in an effort to learn how to hack. A hack lab …