@conference {322, title = {A Decentralized Marketplace Application on the Ethereum Blockchain}, booktitle = {IEEE 4th International Conference on Collaboration and Internet Computing (CIC)}, year = {2018}, month = {10/2018}, publisher = {IEEE}, organization = {IEEE}, address = {Philadelphia, PA, USA}, abstract = {

Modern centralized online marketplaces such as eBay offer an alternative option for consumers to both sell and purchase goods with relative ease. However, drawbacks to these marketplaces include the platform{\textquoteright}s ability to block merchants at their own whim, the fees paid to the platform when listing a product and when selling a product, and the lack of privacy of users{\textquoteright} data. In this paper, we propose an application that remedies all three of these drawbacks through use of the Ethereum blockchain platform. The application was developed using the Truffle development framework. The application{\textquoteright}s functions were contained within an Ethereum smart contract, which was then migrated to the Ethereum network. The user{\textquoteright}s input was read through a web interface and sent to the Ethereum network via the web3.js API. Statistics about the application were gathered on the Rinkeby test network. The application was shown to have an average transaction runtime of 3.8 seconds, and an average gas consumption of 4.6 wei. Contract creation times for the application were shown to be less than a second. A cost analysis of the application was then conducted. The gas consumption of the transactions needed to both buy and sell a product was converted into US dollars, and the gas cost of the application was then compared to the cost to use an online auction marketplace such as eBay as well as an in-person auction house such as Sotheby{\textquoteright}s. The results showed that selling on the application is cheaper than existing online options as well as existing in-person options. These tests showed that our application was successful in addressing the drawbacks of current auction marketplaces.

}, keywords = {API, application program interfaces, auction marketplaces, average gas consumption, blockchain, centralized online marketplaces, Computer science, contract creation times, cost analysis, Cryptocurrency, decentralized, decentralized marketplace application, e-commerce, eBay, electronic commerce, Ethereum, Ethereum blockchain platform, Ethereum network, Ethereum smart contract, gas cost, human factors, in-person options, Internet, marketplace, Measurement, online auction marketplace, online options, peer-to-peer computing, Rinkeby test network, security of data, smart contract, Truffle development framework, user data, user interfaces, Web interface}, doi = {10.1109/CIC.2018.00023}, author = {Ranganthan, Vishnu Prasad and Ram Dantu and Paul, Aditya and Mears, Paula and Morozov, Kirill} } @conference {270, title = {Prediction of human error using eye movements patterns for unintentional insider threat detection}, booktitle = {2018 IEEE 4th International Conference on Identity, Security, and Behavior Analysis (ISBA)}, year = {2018}, month = {Jan}, abstract = {

Threats from the inside of an organization{\textquoteright}s perimeters are a significant problem since it is difficult to distinguish them from benign activities. Recent reports indicate that the accidental/unintentional incidents account for the majority ofall insider security incidents. Human error is a major factor in unintentional insider threat. In this paper, we propose a novel approach for unintentional insider threat (UIT) detection and mitigation based on eye movement patterns. We perform experiments to capture unique characteristics of a user{\textquoteright}s eye movements as they perform several computer-based activities in different scenarios. The goal is to evaluate the effectiveness of using eye movement patterns in determining a user{\textquoteright}s subjective mental workload which is one of the main contributing factors to human error. We extract eye movement and pupil features which allow us to reliably achieve this goal. We evaluate our proposed approach using several classifiers and examine how different subsets of features affect the performance. The results show about 82\% accuracy on average for users wearing eye glasses and an average accuracy of 84.5\% for users without eye glasses. Our results demonstrate that users{\textquoteright} eye movement patterns and pupil behaviors can reveal valuable clues about their subjective mental workload and could be used in developing effective tools for unintentional insider threat detection and mitigation in real-world environments.

}, keywords = {accidental/unintentional incidents, Companies, eye, eye glasses, eye movement patterns, eye movements patterns, Feature extraction, Gaze tracking, Glass, human error prediction, insider security incidents, pupil feature extraction, Security, security of data, subjective mental workload, Task analysis, UIT detection, unintentional insider threat detection, Visualization}, doi = {10.1109/ISBA.2018.8311479}, author = {Takabi, Hassan and Hashem, Yassir and Ram Dantu} } @conference {263, title = {Automating ECU Identification for Vehicle Security}, booktitle = {2016 15th IEEE International Conference on Machine Learning and Applications (ICMLA)}, year = {2016}, month = {Dec}, abstract = {

The field of vehicular cybersecurity has received considerable media and research attention in the past few years. Given the increasingly connected aspect of consumer automobiles, along with the inherent danger of these machines, there has been a call for experienced security researchers to contribute towards the vehicle security domain. The proprietary nature of Controller Area Network (CAN) bus messages, however, creates a barrier of entry for those unfamiliar, due to the need to identify what the messages on a given vehicle{\textquoteright}s bus are broadcasting. This work aims to automate the process of correlating CAN bus messages with specific Electronic Control Unit (ECU) functions in a new vehicle, by creating a machine learning classifier that has been trained on a dataset of multiple vehicles from different manufacturers. The results show that accurate classification is possible, and that some ECUs that broadcast similar vehicle dynamics broadcast similar CAN messages.

}, keywords = {Acceleration, automobiles, automotive electronics, automotive security, Brakes, broadcasting, CAN bus, CAN bus messages, classification, consumer automobiles, control engineering computing, controller area network, controller area networks, ECU identification automation, electronic control unit, electronic engineering computing, embedded systems, learning (artificial intelligence), machine learning, machine learning classifier, pattern classification, Protocols, Security, security of data, Training, vehicle bus, vehicular ad hoc networks, vehicular cybersecurity, Wheels}, doi = {10.1109/ICMLA.2016.0111}, author = {Jaynes, Michael and Ram Dantu and Varriale, Roland and Evans, Nathaniel} } @conference {88, title = {A framework for secured collaboration in mHealth}, booktitle = {Collaboration Technologies and Systems (CTS), 2015 International Conference on}, year = {2015}, month = {06/2015}, abstract = {

We have designed a novel framework of services, protocols and technologies to ensure the secure collaboration in M2M networks, specifically in mobile health. The promise of mobile health to reform preventive self-care opens new doors for remote monitoring to improve health care communication. With cardiopulmonary resuscitation (CPR) as an example, we classify our M2M elements into services, roles, human-computer protocols and technologies through which we require trust, anonymity, scalability, and active detachment. We simulate a scenario in which a patient needs CPR and through the use of widely available technologies (such as a smartphone and secure web sockets) we demonstrate a technological collaboration that facilitates secure emergency mobile health services.

}, keywords = {cardiology, cardiopulmonary resuscitation, Cardiopulmonary resuscitation(CPR), Collaboration, Computers, CPR, health care, health care communication, human computer interaction, human-computer protocol, M2M network, machine to machine(M2M), Medical services, mHealth, Mobile communication, mobile computing, mobile health, Protocols, remote monitoring, Scalability, secure collaboration, secure emergency mobile health services, secured collaboration, security of data, servers, smart phones, smartphone}, doi = {10.1109/CTS.2015.7210450}, author = {Widick, Logan and Talkington, Josh and Bajwa, Garima and Ram Dantu} } @conference {55, title = {A testbed for mobile social computing}, booktitle = {Testbeds and Research Infrastructures for the Development of Networks Communities and Workshops, 2009. TridentCom 2009. 5th International Conference on}, year = {2009}, month = {April}, abstract = {

We present a testbed for mobile social computing that can be used to perform research in security, privacy, and context-awareness policies and mechanisms appropriate for a wide range of applications. We compare several mobile platforms and present the rational for our design choices and reasons we chose Android as the primary smartphone for this testbed. We also discuss some of the possible experiments that can be conducted using the testbed.

}, keywords = {Acoustic sensors, Computer science, Computer security, context-awareness policy, data privacy, Feedback, Global Positioning System, mobile computing, mobile social computing, Performance evaluation, Privacy, privacy policy, security of data, security policy, Social network services, Testing}, doi = {10.1109/TRIDENTCOM.2009.4976250}, author = {Alazzawe, Ahmed and Alazzawe, Anis and Wijesekera, Duminda and Ram Dantu} } @conference {62, title = {Goliath: A Configurable Approach for Network Testing}, booktitle = {Testbeds and Research Infrastructure for the Development of Networks and Communities, 2007. TridentCom 2007. 3rd International Conference on}, year = {2007}, month = {May}, abstract = {

When testing a network environment and/or application many aspects need to be taken into consideration. For example, different software needs to be deployed at different nodes and different topologies may also need to be tested. The manual execution of these tasks are very time consuming and a configurable environment to facilitate these tasks and consequently improve testing performance is desired. In this paper a virtual network environment that can be easily reconfigured is presented to address this problem. Also presented is a case study with the results of deployment and containing a worm propagation attack.

}, keywords = {automated network testing, Computational modeling, computer networks, Computer science, Computer worms, Distributed computing, Goliath, Intrusion detection, network topologies, Network topology, Protocols, security of data, Software testing, System testing, telecommunication computing, telecommunication network topology, telecommunication security, virtual network environment, virtual private networks, worm propagation attack}, doi = {10.1109/TRIDENTCOM.2007.4444667}, author = {Fagen, Wade and Cangussu, Jo{\~a}o and Ram Dantu} }