1393 research outputs found
Sort by
Verifying X.509 Certificate Extensions
No full textCovert channels are used to hide the presence of information in another medium. Attackers have used covert channels to hide the transferring of malicious files, command-and-control traffic, and more. Previous research has shown X.509 certificate extensions can be used as a covert channel. This quasi-experiment utilizes Suricata, an open-source intrusion detection system, to verify specific X.509 certificate extensions that have been used as a covert channel. Several Suricata rules were generated and tested to determine the effectiveness in detecting the presence of a covert channel. All of the generated rules had a 100% true-positive rate, though some had significant impacts on the processor utilization on the IDS. It is possible to detect X.509 covert channels with a high success rate, though detailed verification of the entire X.509 certificate with lua scripting can be extremely resource intensive and unrealistic for high-bandwidth environments
Is Artificial Intelligence Attractive? An Empirical Study on User’s Intention to Use AI-Enabled Applications
Get PDFArtificial Intelligence (AI) technologies such as machine learning (ML), natural language processing (NLP), and image recognition, are being incorporated into a wide variety of applications. These AI-enabled applications (AI apps) promise to reshape people\u27s lives. However, despite the proliferation of AI-related research, very little research has focused on how AI apps\u27 unique characteristics affect an individual\u27s adoption behavior. This study examines factors influencing an individual\u27s intention to use AI apps with a proposed research model based on the Task Technology Fit (TTF) as the underlying theoretical framework. The research model is empirically evaluated using the survey data and SEM method. Theoretically, this study focuses on how the unique characteristics of AI apps influence the task-technology fit and drive the intention of use. The findings are expected to help AI app developers to evaluate the relative importance of AI app features which can provide insights into the technology characteristics and identify priorities for further research and development
Web Injection and Banking Trojan Malware -A Systematic Literature Review
No full textBanking trojan malware focuses on stealing credentials for financial services. A common technique used to facilitate this theft is web injection. Web injects work by modifying web page code or intercepting user input within a browser. Multiple papers in the literature discuss web injects and banking trojan malware; however, this paper extends the existing literature by answering key questions related to web inject usage in banking trojan malware. Specifically, this paper systematically analyzes the available literature to describe which threat actors use banking trojans, identify the malware families employing web injects, enumerate web injection techniques, and define the victims of banking trojans. To answer these questions, a 3-phase systematic literature review was conducted. In total 258 articles were reviewed and analyzed using a custom classification schema. The analysis revealed that web injects in banking malware trojans are a large threat in the cyber landscape
Moving data down the road: a systematic review of information privacy concerns in Internet-of-Vehicles (IoV) literature
Get PDFInternet-of-Things (IoT) technology reaches far and wide in the modern world. Many consumer products are now capable of connecting to networks in order to manage and move data that is created through their various capabilities. Automobiles are now being manufactured with the ability to connect to wireless networks. This capability allows these vehicles to transmit and receive data to and from their manufacturers. IoT technology implemented in automobiles and their accompanying infrastructure is considered the Internet-of-Vehicles (IoV) technology. The goal of this paper is to better understand the association between privacy concern and IoV through a systematic literature review with suggestions for future research. Through a systematic screening process, 7 articles were identified which studied the relationship between privacy and IoV technologies. All but one article found that privacy concern or perceived risk associated with data privacy was significant in IoV technologies. These findings suggest that privacy may play an important role in users’ decisions to adopt and use IoV technology. This article contributes to the growing knowledge of IoV technologies as they emerge in the automobile market
ICT: Attendance and Contact Tracing During a Pandemic
No full textThis paper proposes the use of a web tool to collect attendance for on-campus and online students. This allows for a single interface for tracking participation of students using either modality while also capturing position information of any on-campus students for use in contact tracing. While the need for contact tracing has been reduced in the years following 2020, the tool still quickly captures generic attendance information across modalities
Do AI-Generated Political Advertisements Create Positive or Negative Responses from Voters?
Get PDFArtificial intelligence (AI) is advancing at breakneck speeds, and it’s more important than ever that voters understand AI’s implications on the United States’ political landscape. Political campaigns can synthesize political advertisements using genera-tive AI, fabricating images and videos alike. The public often has difficulty distinguishing these advertisements from their genuine, non-AI counterparts—and deepfake technology improves exponentially, causing the public to struggle even more in identifying AI-generated advertisements.https://scholar.dsu.edu/research-symposium/1030/thumbnail.jp
Natural Language Processing in Lakhota
Get PDFWith the original intent to develop a translation tool between Lakota, an indigenous language spoken primarily in the upper great plains, and English, my project was ultimately unsuccessful due to a number of challenges. Hopefully however the lessons learned from this attempt will be valuable to future research and development of language technology for the Lakhota language
Mining Health Informatics Job Advertisements: Insights for Higher Education Programs and Job Seekers
Get PDFThis paper used web scraping and data mining to analyze 831 health informatics job advertisements on indeed.com. Results showed that 87% of jobs explicitly required a college degree in a related field, 41% of jobs preferred a graduate degree, while 29% preferred or required professional certification. The analysis showed that preferred skills were analytics problem solving, communication skills, oral communication, interpersonal skills, project management, statistics, and critical thinking. The analysis also showed that college degrees, certifications, and the above-mentioned skill set are in high demand for working in the field of health informatics, especially in states with large populations and strong economies. Our results inform curriculum development of health informatics programs in higher education, which helps map knowledge units across the curricula to bridge the skills gap and meet employers’ expectations. At the same time, the results help job seekers familiarize themselves with what employers seek in a successful candidate
Static Binary Rewriting for ROP Gadget Removal
Get PDFReturn-Oriented Programming (ROP) is an exploitation technique that is commonly used by malicious users. It works by leveraging return statements in binaries to gain control over the execution of programs. Some mitigations for ROP include changing the binary during compilation time, rewriting the binary after compilation, and adding runtime checks to the binary. The focus of this study was rewriting the binary after compilation. Rewriting during compilation time requires end users to have access to source code, which, in most cases, they will not. Adding runtime checks adds additional overhead to the target binary.
The areas this study aimed to improve in the binary rewriting space were twofold. The first was improving static binary rewriting. This was done by attempting to see if the amount of information needed to correctly rewrite a binary could be reduced compared to other tools. The second area was attempting to use static binary rewriting to reduce the number of potential ROP gadgets in a binary. The ROP gadgets that were targeted were those created by splitting an instruction that contains a return in them to create new ROP gadgets. This was chosen because most current tools focused on the safety of standard returns from function ends.
To determine if static binary rewriting could be used to reduce the amount of ROP gadgets created from mid-instruction ROP gadgets, a design science approach was taken. There were two artifacts that were created through two design cycles. The first artifact aimed to create a static binary rewriter that collected minimal amount of information from binaries. The second artifact built upon the first artifact and attempted to use it to remove instructions that contained a mid-instruction return. After the removal of the mid-instruction return, the second artifact inserted instructions that allowed for the same functionality of the binary, but without the return byte
Bypassing Modern CPU Protections With Function-Oriented Programming
Get PDFOver the years, code reuse attacks such as return-oriented programming (ROP) and jump-oriented programming (JOP) have been a primary target to gain execution on a system via buffer overflow, memory corruption, and code flow hijacking vulnerabilities. However, new CPU-level protections have introduced a variety of hurdles. ARM has designed the “Pointer Authentication” and “Branch Target Identification” mechanisms to handle the authentication of memory addresses and pointers, and Intel has followed through with its Shadow Stack and Indirect Branch Targeting mechanisms, otherwise known as Control-Flow Enforcement Technology. As intended, these protections make it nearly impossible to utilize regular code reuse methods such as ROP and JOP.
The inclusion of these new protections has left gaps in the system\u27s security where the use of function-based code reuse attacks are still possible. This research demonstrates a novel approach to utilizing Function-Oriented Programming (FOP) as a technique to utilize in such environments. The design and creation of the “FOP Mythoclast” tool to identify FOP gadgets within Intel and ARM environments demonstrates not only a proof of concept (PoC) for FOP, but further cements its ability to thrive in diverse constrained environments. Additionally, the demonstration of FOP within the Linux kernel showcases the ability of FOP to excel in complex and real-world situations. This research concludes with potential solutions for mitigating FOP without adversely affecting system performance