AI and Cybersecurity Research Publications

@{580,
  author = {Louise Leenen and Tommie Meyer},
  title = {The Use of Semantic Technologies in Cyber Defence},
  abstract = {},
  year = {2015},
  journal = {Proceedings of the 10th International Conference on Cyber Warfare and Security (ICIW 2015)},
  month = {March 2015},
  publisher = {Academic Conferences International},
  address = {Kruger National Park, South Africa},
}

@{579,
  author = {Peter Chan and Jacques Theron and Renier van Heerden and Louise Leenen},
  title = {An Ontological Knowledge Base for Cyber Network Attack Planning},
  abstract = {},
  year = {2015},
  journal = {Proceedings of the 10th International Conference on Cyber Warfare and Security (ICIW 2015)},
  month = {March 2015},
  publisher = {Academic Conferences International},
  address = {Kruger National Park, South Africa},
}

Cybersecurity has become a critical element of the national security of countries. A cyber-army is a group of soldiers highly skilled in information technology with cyber skills. Cyber-armies are the unseen military cyber power which countries should employ to maintain national cybersecurity. A cyber-army has the ability to launch cyberattacks and collect information in order to gain a strategic military advantage. In this paper, selected cyber-armies are compared. The focus is on the establishment of an African Cyber-Army to defend and protect cyber sovereignty. An African Cyber-Army has to serve nations whose citizens often have low levels of cybersecurity awareness in conjunction with rapidly growing rates of access to cyberspace.

@article{570,
  author = {Michael Aschmann and Joey van Vuuren and Louise Leenen},
  title = {Towards the Establishment of an African Cyber-Army},
  abstract = {Cybersecurity has become a critical element of the national security of countries. A cyber-army is a group of soldiers highly skilled in information technology with cyber skills. Cyber-armies are the unseen military cyber power which countries should employ to maintain national cybersecurity. A cyber-army has the ability to launch cyberattacks and collect information in order to gain a strategic military advantage. In this paper, selected cyber-armies are compared. The focus is on the establishment of an African Cyber-Army to defend and protect cyber sovereignty. An African Cyber-Army has to serve nations whose citizens often have low levels of cybersecurity awareness in conjunction with rapidly growing rates of access to cyberspace.},
  year = {2015},
  journal = {Journal of Information Warfare},
  volume = {14},
  issue = {3},
  publisher = {ArmisteadTEC},
}

Information security is a fast-growing discipline, and therefore the effectiveness of security measures to protect sensitive information needs to be increased. Since people are generally susceptible to manipulation, humans often prove to be the weak link in the security chain. A social engineering attack targets this weakness by using various manipulation techniques to elicit individuals to perform sensitive requests. The field of social engineering is still in its infancy as far as formal definitions, attack frameworks, examples of attacks and detection models are concerned. This paper therefore proposes a revised version of the Social Engineering Attack Detection Model. The previous model was designed with a call centre environment in mind and is only able to cater for social engineering attacks that use bidirectional communication. Previous research discovered that social engineering attacks can be classified into three different categories, namely attacks that utilise bidirectional communication, unidirectional communication or indirect communication. The proposed (and revised) Social Engineering Attack Detection Model addresses this problem by extending the model to cater for social engineering attacks that use bidirectional communication, unidirectional communication or indirect communication. The revised Social Engineering Attack Detection Model is further verified using published generalised social engineering attack examples from each of the three categories mentioned.

@{568,
  author = {Francois Mouton and Louise Leenen and Hein Venter},
  title = {Social Engineering Attack Detection Model: SEADMv2},
  abstract = {Information security is a fast-growing discipline, and therefore the effectiveness of security measures to protect sensitive information needs to be increased. Since people are generally susceptible to manipulation, humans often prove to be the weak link in the security chain. A social engineering attack targets this weakness by using various manipulation techniques to elicit individuals to perform sensitive requests. The field of social engineering is still in its infancy as far as formal definitions, attack frameworks, examples of attacks and detection models are concerned. This paper therefore proposes a revised version of the Social Engineering Attack Detection Model. The previous model was designed with a call centre environment in mind and is only able to cater for social engineering attacks that use bidirectional communication. Previous research discovered that social engineering attacks can be classified into three different categories, namely attacks that utilise bidirectional communication, unidirectional communication or indirect communication. The proposed (and revised) Social Engineering Attack Detection Model addresses this problem by extending the model to cater for social engineering attacks that use bidirectional communication, unidirectional communication or indirect communication. The revised Social Engineering Attack Detection Model is further verified using published generalised social engineering attack examples from each of the three categories mentioned.},
  year = {2015},
  journal = {2015 International Conference on Cyberworlds (CW)},
  pages = {216-223},
  month = {2015},
  publisher = {IEEE},
  address = {Visby, Sweden},
  doi = {10.1109/CW.2015.52},
}

@{587,
  author = {Joey van Vuuren and Louise Leenen and Jackie Phahlamohlaka and Jannie Zaaiman},
  title = {Using an Ontology as a Model for the Implementation of the National Cybersecurity Policy Framework for South Africa},
  abstract = {},
  year = {2014},
  journal = {Proceedings of the 9th International Conference on Information Warfare (ICIW 2014)},
  month = {March 2014},
  publisher = {Academic Conferences International},
  address = {Denver, United States of America},
}

@{586,
  author = {Joey van Vuuren and Marthie Grobler and Louise Leenen and Jackie Phahlamohlaka},
  title = {Proposed Model for a Cybersecurity Centre of Innovation for South Africa},
  abstract = {},
  year = {2014},
  journal = {Proceedings of the 11th IFIP Human Choice and Computers Conference (HCC11)},
  month = {July 2014},
  address = {Turku, Finland},
}

@{585,
  author = {Francois Mouton and Louise Leenen and Mercia Malan and Hein Venter},
  title = {Towards an Ontological Model Defining the Social Engineering Domain},
  abstract = {},
  year = {2014},
  journal = {Proceedings of the 11th IFIP Human Choice and Computers Conference (HCC11)},
  month = {July 2014},
  address = {Turku, Finland},
}

@{584,
  author = {Francois Mouton and Mercia Malan and Louise Leenen and Hein Venter},
  title = {Social Engineering Attack Framework},
  abstract = {},
  year = {2014},
  journal = {2014 Information Security for South Africa (ISSA)},
  month = {13-14 August 2014},
  publisher = {IEEE},
  address = {Johannesburg, South Africa},
}

@misc{590,
  author = {Renier van Heerden and Louise Leenen and Barry Irwin},
  title = {Automated Classification of Computer Network Attacks},
  abstract = {},
  year = {2013},
  journal = {5th Workshop on ICT Uses in Warfare and the Safeguarding of Peace (IWSP 2013) at IEEE ICAST 2013},
  month = {2013},
  address = {Pretoria, South Africa},
}

@{589,
  author = {Joey van Vuuren and Louise Leenen and Jackie Phahlamohlaka and Jannie Zaaiman},
  title = {Development of a South African Cybersecurity Policy Implementation Framework},
  abstract = {},
  year = {2013},
  journal = {Proceedings of the 8th International Conference on Information Warfare (ICIW 2013)},
  month = {March 2013},
  publisher = {Academic Conferences International},
  address = {Denver, United States of America},
}

@{588,
  author = {Louise Leenen and Alex Terlunen},
  title = {A Focussed Dynamic Path Finding Algorithm with Constraints},
  abstract = {},
  year = {2013},
  journal = {IEEE International Conference on Adaptive Science and Technology (ICAST 2013)},
  month = {2013},
  publisher = {IEEE},
  address = {Pretoria, South Africa},
}

@article{596,
  author = {Joey van Vuuren and Louise Leenen and Jackie Phahlamohlaka and Jannie Zaaiman},
  title = {An Approach to Governance of Cybersecurity in South Africa},
  abstract = {},
  year = {2012},
  journal = {International Journal of Cyber Warfare and Terrorism},
  volume = {2},
  pages = {13-27},
  issue = {4},
  publisher = {IGI Global},
}

@article{595,
  author = {Renier van Heerden and Barry Irwin and Ivan Burke and Louise Leenen},
  title = {A Computer Attack Network Taxonomy and Ontology},
  abstract = {},
  year = {2012},
  journal = {International Journal of Cyber Warfare and Terrorism},
  volume = {2},
  pages = {12-25},
  issue = {3},
  publisher = {IGI Global},
}

@{594,
  author = {Marthie Grobler and Joey van Vuuren and Louise Leenen},
  title = {Implementation of a Cybersecurity Policy in South Africa: Reflection on Progress and the Way Forward},
  abstract = {},
  year = {2012},
  journal = {Proceedings of the IFIP Human Choice and Computers International Conference (HCC10 2012)},
  month = {27-28 September 2012},
  address = {Amsterdam, Netherlands},
}

@{593,
  author = {Joey van Vuuren and Jackie Phahlamohlaka and Louise Leenen},
  title = {Governance of Cyber Security in South Africa},
  abstract = {},
  year = {2012},
  journal = {Proceedings of the 11th European Conference on Information Warfare and Security (ECIW 2012)},
  month = {July 2012},
  publisher = {Academic Conferences International},
  address = {Laval, France},
}