More Like this

1. Minitrack Introduction: Cybersecurity in the Age of Artificial Intelligence, AI for Cybersecurity, and Cybersecurity for AI

   Patton, M; Chen, H; Samtani, S; Zhu, H (January 2024, Proceedings of the 57th Hawaii International Conference on System Sciences)

   Cybersecurity and Artificial Intelligence (AI) are key domains whose intersection gives great promises and poses significant threats. Indeed, the National Academy of Science (NAS), the National Science Foundation (NSF), and othßer respected entities have noted the significant role that AI can play in cybersecurity, and the importance of ensuring the security of AI-enabled algorithms and systems. This minitrack focuses on AI and Cybersecurity that works in broader domains, collaborative inter-organizational realms, shared collaborative domains, or with collaborative technologies. The papers in this minitrack have the potential to offer interesting and impactful solutions to emerging areas, including unmanned aerial vehicles and open source software security. 

   more » « less
2. Introduction to the Minitrack on Cybersecurity in the Age of Artificial Intelligence, AI for Cybersecurity, and Cybersecurity for AI

   https://doi.org/10.24251/hicss.2025.045  

   Patton, Mark; Chen, Hsinchun; Samtani, Sagar; Zhu, Hongyi (January 2025, HICSS)
3. Introduction to the Minitrack on Cybersecurity in the Age of Artificial Intelligence, AI for Cybersecurity, and Cybersecurity for AI

   https://doi.org/10.24251/hicss.2024.064  

   Patton, Mark; Chen, Hsinchun; Samtani, Sagar; Zhu, Hongyi (January 2024, HICSS)
4. Managing Cybersecurity Risk Using Threat Based Methodology for Evaluation of Cybersecurity Architectures

   https://doi.org/10.1109/SIEDS52267.2021.9483736  

   Bokan, Branko; Santos, Joost (April 2021, 2021 Systems and Information Engineering Design Symposium (SIEDS))

   To manage limited resources available to protect against cybersecurity threats, organizations must use risk management approach to prioritize investments in protection capabilities. Currently, there is no commonly accepted methodology for cybersecurity professionals that considers one of the key elements of risk function - threat landscape - to identify gaps (blinds spots) where cybersecurity protections do not exist and where future investments are needed. This paper discusses a new, threat-based approach for evaluation of cybersecurity architectures that allows organizations to look at their cybersecurity protections from the standpoint of an adversary. The approach is based on a methodology developed by the Department of Defense and further expanded by the Department of Homeland Security. The threat-based approach uses a cyber threat framework to enumerate all threat actions previously observed in the wild and scores protections (cybersecurity architectural capabilities) against each threat action for their ability to: a) detect; b) protect against; and c) help in recovery from the threat action. The answers form a matrix called capability coverage map - a visual representation of protections coverage, gaps, and overlaps against threats. To allow for prioritization, threat actions can be organized in a threat heat map - a visual representation of threat actions' prevalence and maneuverability that can be overlaid on top of a coverage map. The paper demonstrates a new threat modeling methodology and recommends future research to establish a decision-making framework for designing cybersecurity architectures (capability portfolios) that maximize protections (described as coverage in terms of protect, detect, and respond functions) against known cybersecurity threats. 

   more » « less
5. Social robot teaches cybersecurity

   https://doi.org/10.1145/3397617.3397824  

   Chiou, Yan-Ming; Barnes, Tia; Mouza, Chrystalla; Shen, Chien-Chung (June 2020, Social robot teaches cybersecurity)

   Social robots have recently been gaining attention in the education field. Given their capabilities, researchers can use social robots in various ways that support human-robot interactions. In this paper, we present an interactive cybersecurity education program to teach children about foundation cybersecurity concepts using a social robot. To create child-robot interactions in cybersecurity education, we devised three processes. First, in collaboration with practicing teachers we developed an interactive story to support student engagement and learning of cybersecurity concepts. Second, we prototyped animations for the story on the social robot. Third, we use a mixed-methods approach to pilot test our cybersecurity education program. Our research highlights the potential of social robot use in education, both for child-robot interaction and K-12 cybersecurity education. 

   more » « less