More Like this

1. Authentic Learning on DevOps Security with Labware: Git Hooks To Facilitate Automated Security Static Analysis

   Rahman, Md_Mostafizur; Barek, Md_Abdul; Akter, Mst_Shapna; Riad, ABM_Kamrul_Islam; Rahman, Md_Abdur; Shahriar, Hossain; Rahman, Akond; Wu, Fan (July 2024, Proc. of The 48th IEEE International Conference on Computers, Software, and Applications (COMPSAC 2024))

   This paper presents an innovative approach to DevOps security education, addressing the dynamic landscape of cybersecurity threats. We propose a student-centered learning methodology by developing comprehensive hands-on learning modules. Specifically, we introduce labware modules designed to automate static security analysis, empowering learners to identify known vulnerabilities efficiently. These modules offer a structured learning experience with pre-lab, hands-on, and post-lab sections, guiding students through DevOps concepts and security challenges. In this paper, we introduce hands-on learning modules that familiarize students with recognizing known security flaws through the application of Git Hooks. Through practical exercises with real-world code examples containing security flaws, students gain proficiency in detecting vulnerabilities using relevant tools. Initial evaluations conducted across educational institutions indicate that these hands-on modules foster student interest in software security and cybersecurity and equip them with practical skills to address DevOps security vulnerabilities. 

   more » « less
2. Authentic Learning on DevOps Security with Labware: Git Hooks To Facilitate Automated Security Static Analysis

   Rahman, Md_Mostafizur; Barek, Md_Abdul; Akter, Mst_Shapna; Riad, Abm_Kamrul_Islam; Rahman, Md_Abdur; Shahriar, Hossain; Rahman, Akond; Wu, Fan (July 2024, Proc. of The 48th IEEE International Conference on Computers, Software, and Applications (COMPSAC 2024))

   This paper presents an innovative approach to DevOps security education, addressing the dynamic landscape of cybersecurity threats. We propose a student-centered learning methodology by developing comprehensive hands-on learning modules. Specifically, we introduce labware modules designed to automate static security analysis, empowering learners to identify known vulnerabilities efficiently. These modules offer a structured learning experience with pre-lab, hands-on, and post-lab sections, guiding students through DevOps concepts and security challenges. In this paper, we introduce hands-on learning modules that familiarize students with recognizing known security flaws through the application of Git Hooks. Through practical exercises with real-world code examples containing security flaws, students gain proficiency in detecting vulnerabilities using relevant tools. Initial evaluations conducted across educational institutions indicate that these hands-on modules foster student interest in software security and cybersecurity and equip them with practical skills to address DevOps security vulnerabilities. 

   more » « less
3. Authentic Learning on Machine Learning for Cybersecurity

   https://doi.org/10.1145/3545947.3576245  

   Lo, Dan; Shahriar, Hossain; Qian, Kai; Whitman, Michael; Wu, Fan; Thomas, Cassandra (March 2022, Proceedings of the 54th ACM Technical Symposium on Computer Science Education (SIGCSE))

   The primary goal of the authentic learning approach is to engage and motivate students in learning real world problem solving. We report our experience in developing k-nearest neighbor (KNN) classification for anomaly user behavior detection, one of the authentic machine learning for cybersecurity (ML4Cybr) learning modules based on 10 cybersecurity (CybrS) cases with machine learning (ML) solutions. All portable labs are made available on Google CoLab. So students can access and practice these hands-on labs anywhere and anytime without software installation and configuration which will engage students in learning concepts immediately and getting more experience for hands-on problem solving skills. 

   more » « less
4. Case Study-Based Approach of Quantum Machine Learning in Cybersecurity: Quantum Support Vector Machine for Malware Classification and Protection

   https://doi.org/10.1109/COMPSAC57700.2023.00161  

   Akter, Mst Shapna; Shahriar, Hossain; Iqbal Ahamed, Sheikh; Datta Gupta, Kishor; Rahman, Muhammad; Mohamed, Atef; Rahman, Mohammad; Rahman, Akond; Wu, Fan (June 2023, 2023 IEEE 47th Annual Computers, Software, and Applications Conference (COMPSAC))

   Quantum machine learning (QML) is an emerging field of research that leverages quantum computing to improve the classical machine learning approach to solve complex real world problems. QML has the potential to address cybersecurity related challenges. Considering the novelty and complex architecture of QML, resources are not yet explicitly available that can pave cybersecurity learners to instill efficient knowledge of this emerging technology. In this research, we design and develop QML-based ten learning modules covering various cybersecurity topics by adopting student centering case-study based learning approach. We apply one subtopic of QML on a cybersecurity topic comprised of pre-lab, lab, and post-lab activities towards providing learners with hands-on QML experiences in solving real-world security problems. In order to engage and motivate students in a learning environment that encourages all students to learn, pre-lab offers a brief introduction to both the QML subtopic and cybersecurity problem. In this paper, we utilize quantum support vector machine (QSVM) for malware classification and protection where we use open source Pennylane QML framework on the drebin 215 dataset. We demonstrate our QSVM model and achieve an accuracy of 95% in malware classification and protection. We will develop all the modules and introduce them to the cybersecurity community in the coming days. 

   more » « less
5. Case Study-Based Approach of Quantum Machine Learning in Cybersecurity: Quantum Support Vector Machine for Malware Classification and Protection

   Akter, M.; Shahriar, H.; Ahamed, S.; Gupta, K.; Rahman, M.; Mohamed, A.; Rhaman, M.; Rhaman, A. (January 2023, Proc. of IEEE Computers, Software and Applications)

   Quantum machine learning (QML) is an emerging field of research that leverages quantum computing to improve the classical machine learning approach to solve complex real world problems. QML has the potential to address cybersecurity related challenges. Considering the novelty and complex architecture of QML, resources are not yet explicitly available that can pave cybersecurity learners to instill efficient knowledge of this emerging technology. In this research, we design and develop QML-based ten learning modules covering various cybersecurity topics by adopting student centering case-study based learning approach. We apply one subtopic of QML on a cybersecurity topic comprised of pre-lab, lab, and post-lab activities towards providing learners with hands-on QML experiences in solving real-world security problems. In order to engage and motivate students in a learning environment that encourages all students to learn, pre-lab offers a brief introduction to both the QML subtopic and cybersecurity problem. In this paper, we utilize quantum support vector machine (QSVM) for malware classification and protection where we use open source Pennylane QML framework on the drebin215 dataset. We demonstrate our QSVM model and achieve an accuracy of 95% in malware classification and protection. We will develop all the modules and introduce them to the cybersecurity community in the coming days. 

   more » « less