Cybersecurity

GCI-Grand Challenge Initiative

Artificial Intelligence

Cybersecurity student hopes to use his powers for good

Shayla Brown — Fri, 29 Aug 2025 15:49:25 +0000

Cybersecurity student hopes to use his powers for good Shayla Brown Fri, 08/29/2025 - 11:49

When �� cyber security engineering major Connor Wadlin learned about ransomware attacks on organizations, such as the one on the Health Service Executive in Ireland, in his CYSE 445 System Security and Resilience class, it confirmed his commitment to dedicating his educational and professional career to protecting and preserving human lives.

“There’s nothing more important than protecting and defending others. As an engineer, I’m driven to get important work done by thinking about complex problems and finding suitable solutions,” said Wadlin, who is from Leesburg, Virginia.

Since winter 2024, the Honors College student has been interning at the Commonwealth Cyber Initiative (CCI) Northern Virginia Node, George Mason’s branch of the statewide network dedicated of excellence in cybersecurity research. CCI’s mission includes workforce development through training the next generation of cybersecurity experts.

CEC student and Commonwealth Cyber Initiative intern Connor Wadlin. Photo by Ron Aira/Office of University Branding.

“It’s a super exciting job because I get to work with AprilTags, which are on objects that the drone's camera then sees and scans. Instead of sharing data, the tags utilize location information for navigation, tracking objects, or pathing purposes,” he said.

Wadlin is also simulating drone flight with the Microsoft tool Air Sim, a project he presented at the CCI Symposium in April. “I created a model with a 98% accuracy, really high F1 score—higher than what we could find on the market—detecting collisions so the drones would be able to respond to anomalous factors such as objects that get too close, environmental variables, cyber-attacks, and more,” he explained.

Wadlin learned about many of the tools he’s currently using for CCI in his classes with College of Engineering and Computing professors, such as his mentor Mohamed Gebril, an associate professor in the Department of Cyber Security Engineering.

“George Mason supports people where they are to get them where they want to be,” Wadlin said.

The skills Wadlin has acquired during his time at George Mason and in his work with CCI have enable him to help other students in their studies.

“Connor is a very skilled student and has been able to develop different programs, as well as 12 labs for sophomore- and freshman-level students at George Mason. He even assists the students during our workshops,” said Gebril.

Wadlin is participating in George Mason’s Bachelor’s to Accelerated Master’s Program and will to pursuing a master’s degree also in cyber security. Gebril said he’s looking forward to having Wadlin in his classes again as a graduate student.

“It will be a smooth transition from the undergraduate to the graduate level because the curriculum aligns well with the CCI mission, which is to equip our students with the tools to conduct research activity and develop cutting-edge technology,” said Gebril.

Wadlin’s team is also working to develop a first-of-its-kind cyber drone race that incorporates cybersecurity challenges and artificial intelligence for undergraduate students.

Wadlin was diagnosed with autism at 19 and sees this diagnosis as working to his advantage by allowing him to see things from different perspectives and approach problems with his own unique ideas.

“As an engineer, you have to ask yourself ‘how is this making the world a better place?’ That's always got to be the end goal,” said Wadlin.

Explore the College of Engineering and Computing

In This Story

Mohamed Gebril

Topics

internships

College of Engineering and Computing

Honors College

College of Engineering and Computing

Five George Mason cybersecurity students hack their way to Boston

Jennifer Pocock — Thu, 31 Jul 2025 14:38:39 +0000

Five George Mason cybersecurity students hack their way to Boston Jennifer Pocock Thu, 07/31/2025 - 10:38

The Country to Country (C2C) Capture the Flag (CTF) contest is an international competition that issues challenges to code, decrypt, search, hack, and reverse engineer their way through as many challenges as possible.

(C2C) CTF contestants gathered from across the globe to solve pernicious problems. Photo provided.

About 500 students from nearly 100 countries, ranging from inexperienced freshmen to PhD candidates in cybersecurity, competed individually in the qualifying rounds. Only the top 100—including five from ��—were accepted into the finals. Four went to Boston for the competition, held this year at Northeastern University.

The College of Engineering and Computing students Gael Abboud, Sanjay Kumar Samala, Nhat Le, and Jonah Wilbur represented the green and gold, but were all placed on different teams. (Amaan Abbas also made the cut but could not attend.)

“The organizers were amazing,” said Abboud, who is a graduate student pursuing her master's in systems engineering through the Accelerated Master's Program. She explained that they try to make it a truly international and cooperative competition. Ideally, each team would contain people from different countries.

“Somehow, I ended up on a team with two other people from Virginia,” Abboud said with a laugh. “They came from Virginia Commonwealth University and William and Mary.”

Her Virginia-strong team did the state proud. Over a day of competition, they sometimes worked together and sometimes apart to solve as many problems as possible from across various skill sets.

It’s not just coding. Abboud described one of the challenges. “It was open-source intelligence, which is really just fancy Googling. They set a scene where we had to find a very certain scooter repair shop in Boston. They told us that it was near a metro stop and in sight of an Indian restaurant. Seems like it should be easy, but it wasn’t!”

They also had to track down things like the price of the building and the vice president of the company that sold it more than 60 years ago. “No one solved that one.”

In the end, Abboud’s team landed in fourth place: an admirable showing when the contestants represent some of the best from around the globe. “I was so disappointed,” she sighed. “There was less than one point separating us from the third-place team.”

Abboud said that she loved every minute and would tell anyone curious about hack-a-thons to try qualifying for this Capture the Flag event.

“It may seem intimidating, but there are challenges for any skill level,” she said. “You don’t know what it will be like if you don’t try. Don’t stress if you don’t know something. People are happy to walk you through how they solved it.”

Learn more about the College of Engineering and Computing

Topics

Safeguarding George Mason’s research and researchers

Katarina Benson — Wed, 18 Jun 2025 18:45:55 +0000

Safeguarding George Mason’s research and researchers Katarina Benson Wed, 06/18/2025 - 14:45

Earlier this year, Melissa Perez was named assistant vice president for research security in the Office of Research Integrity and Assurance at ��. In this role, she oversees university-wide policies and processes to ensure compliance with research security laws and regulations (including export control), international collaborations, travel, and cybersecurity. As George Mason’s designated research security officer, she also leads institutional responses to threats affecting the university’s research compliance and standing.

Perez has more than 20 years of research compliance experience, including the past decade leading George Mason’s export compliance and secure research programs—most recently as director for export compliance and secure research. She recently shared her insights on the university’s Research Security Program, regulatory challenges, and the impact on researchers.

Melissa Perez. Photo by Office of University Branding

What inspired you to take on this new role?

I majored in international relations at St. Joseph’s University and law at American University. I enjoy analyzing the geopolitical aspects of research security and how the federal government uses regulations to advance its foreign policy goals. I began actively advocating for a research security program at George Mason in 2023 because the U.S. government has been messaging to universities how critical it is to protect U.S. research and the role universities have in safeguarding the research.

I am committed to supporting our researchers and knew that I wanted to have an even greater role in ensuring that they can pursue their international research safely and responsibly. I have created and expanded other compliance programs at George Mason that support our faculty and researchers, and I am excited for the opportunity to create a new program that will be a resource for the George Mason community.

Why is a research security program vital for George Mason, and how does it align with the requirements of National Security Presidential Memorandum 33 (NSPM-33)?

Under NSPM-33, the U.S. government mandates that R1 universities like George Mason establish robust research security programs to protect U.S. technology against foreign government misappropriation. The Research Security Program enables us to meet this requirement and continue receiving federal funding, and it also demonstrates to government sponsors George Mason’s commitment to protecting our research and researchers when they engage with international colleagues.

What are the key security challenges universities face?

One key challenge is raising awareness of threats and risks, and helping researchers recognize international activities that may compromise their research, their funding, or their careers. When people hear “research security,” they often think that the U.S. government is only interested in protecting classified or sensitive research, but, in fact, the threat of misappropriation goes beyond that and includes fundamental or basic research.

NSPM-33 introduces specific guidelines for safeguarding research. How you plan to ensure compliance without stifling academic freedom?

While there is an inherent tension between limiting what faculty can do, from a regulatory perspective, and academic freedom, the goal of George Mason’s Research Security Program is to help researchers identify international activities that are safe, secure, and that protect them, their research teams, and their careers. I don’t want to stop collaborations; I want to make sure that our researchers can engage in these activities with confidence that the collaborations will benefit them, the university, and the scientific community.

What are your top priorities for the first year of implementation?

The priorities for the first year are communications and outreach as they are key to raising awareness and establishing buy-in and a culture of compliance. Research security applies to all federally funded research and will impact anyone involved in federally funded research, especially researchers collaborating internationally. That’s why outreach is so important. I want to ensure that faculty, staff, and students understand the new requirements and how the evolving policy landscape impacts them. In terms of workflow changes, by working with offices across campus to refine our processes around foreign travel security and cybersecurity, my intent is to embed elements of research security into existing processes rather than create new workflows for people to follow. My goal is to make research security easy and unobtrusive for the researchers.

Universities thrive on collaboration. How does the program ensure that partnerships with external entities remain productive and secure?

A strong research security program will allow us to maintain and grow the level of international engagements at George Mason. Without this program and the processes and tools that will be a part of it, it is much harder from a risk perspective to evaluate which activities may involve a high level of risk that could jeopardize our research or researchers.

Can you provide an example of a security threat that could potentially compromise research at a university, and how the program will prepare to address it?

One example is the U.S. government’s policy regarding Malign Foreign Talent Recruitment Programs (MFTRP). In the past, being selected to participate in a program such as China’s Thousand Talents Program was considered an achievement. Today, participation in a foreign talent program that the U.S. government considers “malign” could jeopardize a researcher’s ability to receive federal funding.

To ensure that our researchers remain eligible to bid on federal projects, we have a pre-approval process in RAMP where we review foreign appointments and affiliations to determine whether they would be a MFTRP. If the researcher is contemplating an activity that would be considered a MFTRP, I work with the researcher to mitigate risk by removing terms that make the activity “malign,” and I provide guidance so that they can weigh the risks associated with such foreign appointments.

Cybersecurity is one of the pillars of NSPM-33, and my office will partner with many across campus who manage cybersecurity threats, including the Office of Research Computing, ITS, and the IT units in the colleges, to make sure that all research security policies addressing cybersecurity are coordinated and reflect industry best practices.

How do you envision adapting the program over time?

In my role as research security officer, it will be my responsibility to be aware of regulatory changes in this space and to have a pulse on how other universities are responding to these changes. As the regulatory landscape evolves, I will work with leadership to communicate those changes to our researchers. Our program will need to be agile to reflect changes implemented by the U.S. government. Policies and guidance are shifting rapidly, and a big challenge will be keeping our community up-to-date.

Learn more about Research at George Mason

Topics

Research

Office of Research Innovation and Economic Impact

Faculty and Staff News

Sit! Stay! Buzz?

Jennifer Pocock — Thu, 29 May 2025 14:56:51 +0000

Sit! Stay! Buzz? Jennifer Pocock Thu, 05/29/2025 - 10:56

These �� students are short-circuiting voice commands, dog whistles, and clickers.

Covert Dog Comms Team Leader Paul J. Wyche displays their finished prototype at the Office of Student Creative Activities and Research (OSCAR) Celebration. Photo by John Boal

If you’ve had a puppy, you probably know the patience it takes to train them in basic commands, and it can be a noisy affair involving begging, pleading, and some yelling. Working dogs like those in police and military K9 units need to learn so much more.

Sometimes, they need to obey without hearing a word.

Rescue situations can be chaotic, with so much going on that a command gets lost in the noise. Sometimes, a team of dogs need to hear many different commands, and competing voices are confusing. Other times, operation teams need to go radio silent and any noise at all will give their positions away.

Enter Team Covert Dog Comms. This pack of cybersecurity seniors at George Mason, all of whom graduated in May, sniffed out a way to direct dogs without barking commands.

Together, they became the dream team that was the envy of anyone who has ever worked on a bad group project—and proof that great leadership combined with a passionate team yields amazing results.

“Working with this team has been a very positive experience. One key factor that made it successful was the balance of specialized skill sets,” said team leader Paul J. Wyche, who also recently spoke at his College of Engineering and Computing graduation. “While some of our backgrounds overlapped, each team member had a distinct area of expertise, allowing us to overcome any obstacle and collaborate effectively.”

Those members were Maxime Bonnaud, who specialized in the vest’s wireless and cryptographic security; Jonathan Perry, who designed the hardware; and AJ Hoepfner, who set up testing standards and regulations, along with assisting Wyche with project management.

“Mostly, what made this team great was good execution on the fundamentals,” said Bonnaud. “Everyone showed up, communicated well, and looked for areas they could work on instead of having to be assigned work.”

The end result was a securely encrypted working prototype of a vest that can be programmed with three different vibrating pattern commands that a dog can be trained to obey. While they were unable to find a working dog to test on, the team tested the vest on themselves and found it to work as intended.

When asked whether the team planned to patent or commercialize the vest, Wyche said that they wouldn’t rule it out. “We haven’t formally discussed commercializing the project. However, if the opportunity arises and we receive the necessary support, we may explore those possibilities.”

Until then, they achieved their goal of making “a fully operational haptic vest that could be refined for real-world use in special operations.”

And that is something to howl about.

Topics

Senior Capstone Project

Military

Police and Public Safety

George Mason and CodeLock work on securing the software supply chain

Nathan Kahl — Thu, 15 May 2025 11:27:25 +0000

George Mason and CodeLock work on securing the software supply chain Nathan Kahl Thu, 05/15/2025 - 07:27

�� Department of Information Sciences and Technology Professor Kun Sun received a grant from the Commonwealth Cyber Initiative (CCI) of Northern Virginia to collaborate with CodeLock, Inc., a Virginia-based technology company specializing in software security. The grant totals $75,000 for one year and is part of CCI’s Academic Support for Cybersecurity Entrepreneurship and Next-Gen Development (ASCEND) Fund. 

“The idea for this funding is to partner a startup company with university subject matter experts,” said Sun. “The focus of this grant is to build a platform that connects startups with academic experts to solve technical industry challenges.”  

The project will integrate Sun’s previous research on automated security patching with CodeLock’s technology for secure software supply chain using dynamically generated digital signatures to develop solutions that address vulnerabilities in source code. 

The CCI is Virginia’s main access point for cybersecurity research, innovation, workforce development. Image courtesy CCI.

CodeLock offers a cybersecurity platform designed to secure software development processes by providing real-time monitoring, compliance automation, and protection against insider threats and supply chain attacks. It creates a forensic chain of custody by linking every code change to its developer, ensuring transparency and integrity throughout the software development lifecycle.  
 
“So for software supply chain security we install outside software applications on our smartphones and computers, for example,” said Sun. “That software may rely on  other software and we have this term, SBOM, which means software bill of material. It says that we need to know what other dependent software is used and can we trust that software? If you install software, you need to verify it has not been manipulated or modified by an attacker.” Sun will apply his 10+ years of research on automatic software vulnerability detection and automated program repair. 

“The vast majority of software supply chain attacks begin with compromised credentials—something traditional security tools are ill-equipped to prevent,” said CodeLock CEO Brian Gallagher. “By enforcing zero-trust authentication at the developer level and linking that identity to a tamper-proof chain of custody, CodeLock is fundamentally reshaping the threat landscape. Partnering with George Mason allows us to build on that foundation by automating vulnerability patching, which not only strengthens security but also delivers measurable cost savings for our customers. This collaboration accelerates our mission to bring transparency, accountability, and efficiency to software development across both government and commercial sectors.”

The project team will get feedback from CodeLock’s existing customers and collaborate with CCI and the Northern Virginia Technology Council to refine the solution for broader commercial adoption. Additional funding will be provided by CodeLock and supplemented through grant opportunities. 

In This Story

Kun Sun

Topics

software

Research

Cyber sweep: George Mason students take top three spots in national transportation cybersecurity competition

Teresa Donnellan — Thu, 27 Mar 2025 14:42:35 +0000

Cyber sweep: George Mason students take top three spots in national transportation cybersecurity competition Teresa Donnellan Thu, 03/27/2025 - 10:42

"I'm going to teach you how to hack a modern car," said �� professor Tanvir Arafin to the fall 2024 cohort of CYSE 465 Transportation Systems Design. Arafin not only introduced his students to such exciting concepts in transportation security, but he also incorporated the opportunity to participate in a nationwide cybersecurity competition into his course.

The entire class of 12 from the Department of Cyber Security Engineering chose to participate in the optional assignment and several won first, second, and third place at the National Transportation Cybersecurity Competition (NTCC) in November 2024. George Mason’s Finn Schaefer won first place; the team of Noor Mohammed, Sonia Shaukat, Caleb Hughston, and Kayleigh Batchos won second place; and Navraj Singh Gill won third place.

Adobe Stock

The national competition was open to all university students, both undergraduate and graduate, who could participate individually or in teams of up to four, guided by a faculty advisor. This year’s competition was titled “CYBER-CARE Challenge 2024: Securing the Future of Transportation.”

Participants faced a series of cybersecurity challenges, including password cracking, traffic management system exploitation, Vigenère cipher decryption, SQL injection vulnerability identification, cross-site scripting (XSS) attacks, and vehicle trajectory anomaly detection. They had a few weeks to complete the challenges remotely.

Arafin developed CYSE 465 by integrating real-world scenarios and cutting-edge research findings from his lab. He has been working in hardware and cyber-physical systems security with a key focus on cybersecurity issues of autonomous and transportation systems. CYSE 465 covers understanding data, communication, operating systems, control, and security primitives used in today's vehicles for safe and intelligent control and navigation.

“The course offers a unique perspective on the cyber vulnerabilities that emerge from the security-oblivious modernization of transportation systems,” said Arafin.

While he has taught the course since 2022, this was the first time he incorporated the competition into the course. Arafin noted that such competition participation can greatly enhance students’ resumes, and first-place winner Schaefer, a busy student, greatly appreciated the chance to participate.

“This was actually the first competition that I've competed in,” he said, explaining that it’s hard to find time for such activity outside of school and work. Schaefer’s favorite challenge at the NTCC involved assessing vehicle datasets to detect problems or attacks. He drew from his personal interest in machine learning to solve the challenge.

“I've worked with machine learning models a lot in my own personal projects, but I've never had an applicable use for it,” said Schaefer. “So, it was interesting to actually see my work have real meaning to it for once. I was able to do something pretty cool.”

Through courses like CYSE 465, which bridge the gap between theoretical knowledge and practical application, the Department of Cyber Security Engineering is fostering a new generation of cybersecurity professionals who are well-equipped to secure the future of transportation systems.

"The students’ competition performance is a very compelling argument on the benefits of bringing the results and lessons learned in the research lab directly to the classroom, something many CYSE faculty are doing," said Paulo Costa, the department's faculty chair.

The achievements of George Mason students at the NTCC highlight the importance of this approach. By bringing state-of-the-art research directly to the classroom, the Department of Cyber Security Engineering is preparing students to become leaders in the field. As the cybersecurity landscape continues to evolve, the department's innovative educational strategies will ensure that its graduates are ready to meet the challenges of tomorrow.

In This Story

Tanvir Arafin

Paulo Costa

Learn more about Cybersecurity at George Mason

Topics

transportation engineering

Student Success

Department of Cyber Security Engineering

innovative classes

Strategic Direction

Nearly 500 high schoolers get expert advice at Virginia CyberSlam 2025

Teresa Donnellan — Mon, 17 Mar 2025 16:20:56 +0000

Nearly 500 high schoolers get expert advice at Virginia CyberSlam 2025 Teresa Donnellan Mon, 03/17/2025 - 12:20

Nearly 500 high school students from across the commonwealth gathered at �� for Virginia CyberSlam 2025, where cybersecurity experts from both the public and private sectors shared industry insights during a day of activities aimed at inspiring the next generation of cybersecurity professionals.

Dolores Garza addresses CyberSlam 2025 attendees. Photo by Teresa Donnellan/CEC

“What an event it was March 10, with 475 students representing 22 schools and six school districts from around the commonwealth enjoying hands-on workshops and activities led by cyber experts from industry, government, and higher education,” said CyberSlam founder Chris Starke, a teacher for Loudoun County Public Schools who co-directed the event with the University of Alabama in Huntsville’s Jennifer Marden. “In all, 28 presenters combined to run 12 workshops—6 for each of our novice and advanced students. It was truly rewarding to see students enjoy learning about cybersecurity.”

Students heard from keynote speaker Dolores Garza, Branch Chief of the Technical Operations Group at the United States Marshals Service, among others. Garza oversaw the creation of a cyber investigation unit at the U.S. Marshals and described the evolution of cybersecurity as a professional field. She encouraged attendees to stay open to new technological developments and emphasized the need for a hybrid set of skills that combines criminal investigatory techniques with technical expertise.

“Diversity in technology is not just an asset; it is a necessity,” said Garza. “The more perspectives we bring to problem-solving, the stronger and more effective our solutions become.”

Student navigates drone during CyberSlam 2025. Photo by Ron Aira/Office of University Branding.

Throughout the day, professionals led hands-on workshops in various aspects of cybersecurity.

David Raymond from Virginia Cyber Range led a session on advanced Capture the Flag challenges, focusing on Wireshark.

Greg Crabb from 10-8, LLC, conducted a tabletop exercise on incident response and deep fake technology, and Randy Benn from Claroty introduced students to the Internet of Things.

Other experts leading workshops represented Vertex11, OpusType Advisors, the Idaho National Laboratory, the Drug Enforcement Administration, CYBER.ORG, George Mason, and Shenandoah University, leading workshops on drones, deep fakes, digital forensics, and more.

Students participate in a CyberSlam workshop. Photo by Ron Aira/Office of University Branding

“I would like to thank our co-hosts, George Mason’s Department of Cyber Security Engineering and Loudoun County Public Schools, as well as the Commonwealth Cyber Initiative Northern Virginia Node (CCI NoVA Node), Virginia Cyber Range, Vertex11, CACI International Inc., Claroty, CodeHS, Widelity, Inc., and GT Edge AI for sponsoring this wonderful event that in four years has impacted more than 1,600 students,” said Starke. “And, thank you to our exhibitors the Cybersecurity and Infrastructure Security Agency, Mason Competitive Cyber (MCC), George Mason’s College of Engineering and Computing, GT Edge AI, and the Virginia National Guard 91^st Cyber Brigade.”

CyberSlam attendees navigate drones in a workshop. Photo by Jennifer Marden

One event highlight was a panel featuring George Mason students from the MCC club—Dylan Charnick, Dylan Knoff, and Danyaal Shaozab. MCC is known for its inclusivity, welcoming George Mason students from all majors and levels of experience. The club meets twice weekly, hosting impressive speakers, running workshops on cybersecurity skills, and forming teams to participate successfully in various CTF events throughout the year.

During the panel, the MCC students fielded questions from the audience about degree programs at George Mason, the benefits of technical certifications, and how to best prepare for a career in cybersecurity. “Most cyber jobs are here in the D.C. area,” noted Knoff, pointing out one benefit of pursuing cybersecurity at George Mason.

CyberSlam fosters the cultivation of cybersecurity talent in Northern Virginia, where the industry is booming. This year’s event particularly underscored the opportunities in both public and private sectors that are preparing the next generation of cybersecurity professionals, ensuring they are equipped with the skills and knowledge needed to thrive in this rapidly growing field.

“I would like to thank CCI NoVA Node, specifically Liza Durant and Jordan Mason for sponsoring the amazing raffle prizes and their support for the Virginia CyberSlam, and also George Mason’s Elizabeth Dean for making this event possible,” said Marden. “We could not have done this with the support of George Mason, CCI, our presenters, sponsors, and of course our wonderful Virginia cybersecurity educators and students.”

Explore Cybersecurity at George Mason

Topics

Department of Cyber Security Engineering

Keeping data safe by keeping it separate

Teresa Donnellan — Tue, 25 Feb 2025 15:35:36 +0000

Keeping data safe by keeping it separate Teresa Donnellan Tue, 02/25/2025 - 10:35

Developing a robust cybersecurity system demands a lot of data, but keeping all that data in a single location introduces the risk of a data breach. Luckily, �� researcher Zhuangdi Zhu in the Department of Cyber Security Engineering specializes in federated learning, a method of decentralized machine learning that allows multiple entities to collaboratively train a machine learning model without sharing their raw data.

Zhu is using this expertise to assist Wajih Ul Hassan of the University of Virginia develop scalable host-based intrusion detection systems (HIDS). Together, Zhu and Hassan are leveraging artificial intelligence (AI) to enhance a given host’s cybersecurity while ensuring data privacy.

HIDS monitor and analyze the activities within a single host or device. These systems use data, such as system logs, web browsing logs, and process logs, to detect irregularities that may indicate a security threat. For example, Zhu noted, a HIDS might detect malicious software that prompts a browser to download a harmful PDF file. By identifying such irregularities, the HIDS can prevent potential security breaches. Central management of these logs through managed security service providers (MSSPs) on cloud servers, however, could potentially breach user privacy. Enter: federated learning.

Zhuangdi Zhu, photo provided

In a federated learning system, each entity trains a local model on its own data and only shares the model updates with a central server. Local models are trained on individual datasets, and their findings are sent to a central server, Zhu explained. The server then aggregates these parameters to create a global model, which is subsequently sent back to the local models. This iterative process continues until a robust and accurate model is developed. Federated learning thus ensures sensitive data remains within the local models, addressing privacy concerns and complying with data regulations.

The project, funded by the Commonwealth Cyber Initiative, is set to span one year, starting in the summer of 2025. In addition to developing a federated learning framework for HIDS, the team plans to create an open-source dataset for intrusion detection, which will serve as a valuable resource for future research and development in this field.

Zhu's work on decentralized machine learning not only addresses critical privacy concerns but also paves the way for more secure and efficient threat detection systems. Her work on this project represents a significant step forward in the ongoing effort to protect digital environments from evolving cyber threats.

In This Story

Zhuangdi Zhu

Learn more about George Mason's Department of Cyber Security Engineering

Topics

College of Engineering and Computing

Machine Learning

Artificial Intelligence

Research

Cybersecurity students prepare for inaugural DistrictCon Hacker Conference

Shayla Brown — Mon, 27 Jan 2025 17:21:53 +0000

Cybersecurity students prepare for inaugural DistrictCon Hacker Conference Shayla Brown Mon, 01/27/2025 - 12:21

Students from ��’s Competitive Cybersecurity (MCC) club have dominated in multiple national competitions. The team got 1st place in the 2024 VMI CyberFusion and 2nd place in the 2024 Spring National Cyber League.

Next, the students will be competing in the inaugural DistrictCon Hacker Conference on February 21-22.

Club president Dylan Knoff working on routers. Photo provided.

“We'll be presenting live demos with our exploits in front of a judge and audience. So, we'll basically go from not having access to a certain device to showing that we can get access in the eight different attack vectors that we discovered,” said club president Dylan Knoff, a junior computer science major.

This demonstration is known as the junkyard competition, and the device they’re hacking is a router. In preparation for the demo, the team is conducting multiple analyses and rehearsing talking points for verification of their research.

“We basically ripped the firmware off of it, which is the code that runs on embedded devices like this one,” said Knoff, who participated in the International Cybersecurity Championship in Chile with the U.S. Cyber Team.

“We utilized hardware debugging interfaces on the device to both find potential bugs by analyzing our own local copy of the firmware and confirm their existence and exploitability by trying to trigger them on the live device and utilizing the debug interface exposed,” he said.

In addition to Knoff, his teammates Danyaal Shaozab and Ryan Murphy will also participate in the junkyard competition and other cybersecurity challenges including “capture the flag,” also called CTF, where the teams receive challenges, such as web app exploitation, binary exploitation, cryptography, reverse engineering, forensics, and a description that they must solve and then get a flag that is redeemed for points.

In September 2023, MCC hosted its own international CTF event, attracting more than 3,000 participants and 1,600 teams as well as hosted PatriotCTF 2024 attracting over 5400 participants and 2200 teams. The club practices are offensive cybersecurity, which is a type of ethical hacking used to evaluate and determine a system’s security, Murphy explained.

Club member Ryan Murphy working on routers. Photo provided.

Murphy, who transferred to George Mason from Virginia Peninsula Community College as a part of the Mason Virginia Promise, has been passionate about cybersecurity since middle school and participated in CyberPatriot, a national youth cyber education program.

“I'm still pretty new at George Mason, but it's been a really good experience so far,” said Murphy, a junior cyber security engineering major. “I got involved with the club from the get- go because they're a bunch of like-minded people and I’m really grateful for the opportunities the club and the university have offered me.”

The team will have two time slots and two presentations. They plan to do a dry run the day before the conference, as well as more analysis to solidify the information, said Murphy.

Shaozab is currently working as an associate vulnerability researcher at TFP0 Labs, a Reston-based security research firm. Shaozab’s role entails finding and exploiting vulnerabilities of various security systems and he compares his professional responsibilities to that of his club and school assignments.

“Working with Dylan and Ryan is great. We all have similar career goals, and it makes projects and assignments a lot easier,” said Shaozab, who is a senior cyber security engineering major.

Shaozab credits his courses, including CYSE 465 Transportation Systems Design, for helping him prepare for the upcoming competition.

“Dr. [Tanvir] Arafi is a very smart professor and a very talented individual in this field. His course really helped me hone my cyber techniques,” he said.

Shaozab explained that the team is focused on exploiting the [Control Area Network] bus, which is like the nervous system of a vehicle, allowing different components like the engine, brakes, and doors to communicate with each other. “Exploiting it involves sending malicious messages in the CAN bus to manipulate the car's function, such as unlocking doors or starting the engine,” he said.

“What made this particularly interesting to me is that I'm a huge car enthusiast, so being able to merge my passion for cars and cybersecurity was a unique experience. Getting hands-on with that in a classroom setting made it even more engaging. It’s rare to get that kind of knowledge taught in schools,” he said.

Learn more about George Mason's College of Engineering and Computing

Topics

Mason Competitive Cyber

Mason Virginia Promise