7 citations · 17 across the 10 of their papers we have counts for
11 papers · 1 filter
Workplace Surveillance and Insider Threat Risk Management: Legal Limits and Privacy Harms
Haywood Gelman, John D. Hastings, Suvineetha Herath +1
Workplace surveillance is used by organizations to protect corporate assets and monitor employee productivity. This research presents two central arguments on workplace surveillanc…
Enhancing Attack Detection Capabilities in BACnet/IP Networks Using Machine-Learning Models
Derek Manzella, John D. Hastings
Building Automation Systems (BAS) manage critical building functions using protocols such as BACnet/IP, yet defenders have limited tooling and few labeled datasets for detecting BA…
Bridging the Smart City Cybersecurity Data Gap Through AI-Driven Synthetic Dataset Generation
Stephanie Polczynski, John D. Hastings, Varghese Vaidyan +1
Smart cities rely on interconnected cyber-physical systems that integrate sensors, IoT devices, cloud platforms, and AI-driven services and decision-making. While these systems enh…
Beyond Collection: Measuring the Detection Efficacy of Modern Security Logging Standards
Ryan Holeman, John Hastings, Varghese Mathew Vaidyan
Effective security logging is crucial for the timely and accurate detection of cyber threats; however, the relative effectiveness of various industry-standard logging frameworks re…
Gravity Falls: A Comparative Analysis of Domain-Generation Algorithm (DGA) Detection Methods for Mobile Device Spearphishing
Adam Dorian Wong, John D. Hastings
Mobile devices are frequent targets of eCrime threat actors through SMS spearphishing (smishing) links that leverage Domain Generation Algorithms (DGA) to rotate hostile infrastruc…
An Ethically Grounded LLM-Based Approach to Insider Threat Synthesis and Detection
Haywood Gelman, John D. Hastings, David Kenley
Insider threats are a growing organizational problem due to the complexity of identifying their technical and behavioral elements. A large research body is dedicated to the study o…
LibLMFuzz: LLM-Augmented Fuzz Target Generation for Black-box Libraries
Ian Hardgrove, John D. Hastings
A fundamental problem in cybersecurity and computer science is determining whether a program is free of bugs and vulnerabilities. Fuzzing, a popular approach to discovering vulnera…
A Systematic Review and Taxonomy for Privacy Breach Classification: Trends, Gaps, and Future Directions
Clint Fuchs, John D. Hastings
In response to the rising frequency and complexity of data breaches and evolving global privacy regulations, this study presents a comprehensive examination of academic literature…
Scalable and Ethical Insider Threat Detection through Data Synthesis and Analysis by LLMs
Haywood Gelman, John D. Hastings
Insider threats wield an outsized influence on organizations, disproportionate to their small numbers. This is due to the internal access insiders have to systems, information, and…
Toward an Insider Threat Education Platform: A Theoretical Literature Review
Haywood Gelman, John D. Hastings, David Kenley +1
Insider threats (InTs) within organizations are small in number but have a disproportionate ability to damage systems, information, and infrastructure. Existing InT research studie…
Safeguarding Virtual Healthcare: A Novel Attacker-Centric Model for Data Security and Privacy
Suvineetha Herath, Haywood Gelman, John Hastings +1
The rapid growth of remote healthcare delivery has introduced significant security and privacy risks to protected health information (PHI). Analysis of a comprehensive healthcare s…