Smoking has been proven to negatively affect your health in a multitude of ways. As of 2009, smoking is the leading cause of preventable morbidity and mortality in the United States, continuing to plague the country's overall health. This study aims to investigate the viability and effectiveness of machine learning algorithms for predicting the smoking status of patients based on their blood tests and vital readings results. The analysis of this study is divided into two parts: In part 1, we use One-way ANOVA analysis with SAS to show the statistically significant difference in blood test readings between smokers and nonsmokers. The results show that the difference in INR, which measures the effectiveness of anticoagulants, was significant in favor of nonsmokers which further confirms the health risks associated with smoking. In part 2, we use five machine learning algorithms: Naive Bayes, MLP, Logistic, J48 and Decision Table to predict the smoking status of patients. To compare the effectiveness of these algorithms we use: Precision, Recall, F-measure and Accuracy measures. The results show that Logistic algorithm outperformed the four other algorithms with Precision, Recall, F-Measure, and Accuracy of 83%, 83.4%, 83.2%, 83.44%, respectively.

This paper describes and advocates for the experiences of engaging undergraduate students in collaborative faculty mentored scholarly research in cybersecurity. The benefits of engaging these students in discipline related research early in their undergraduate studies include: developing teamwork skills, improving creative problem solving abilities, creating a better understanding of career options within computing, and fostering an enthusiasm for the subject material that should improve retention of computing majors.

The integer data type is ostensibly very simple, but integers can easily overflow in a simple program. A malicious user can manipulate an unchecked integer input to overflow which can produce a security breach. An integer overflow can cause a program to crash. In recent years, integer overflows resulted in more than two hundred recorded vulnerabilities. Integer overflow is a challenging topic to address when teaching C/C++ or Java in an introductory software development course. Most novice students are unaware that simple integer input or calculations can generate errors, or worse yet, silently deliver vulnerability in a system. This paper describes laboratory exercises that inform students about the nuances of integer behavior and how these can lead to security vulnerabilities. We illustrate techniques that educators can use to teach students to discover integer overflows and replace them with robust code. Even at the introductory level, we can reinforce a secure coding frame of mind such that our students will never blindly trust user input or perform calculations that generate integer overflows.

How often do you feel deprived when you see your colleagues from a foreign language department, history department, or some other department plan a professional experience overseas and you think "What reason could I ever have to travel in the computing field -> we can do everything virtually?" During this panel, the panelists who have had a variety of experiences going overseas (by themselves and with students) will talk about their experiences and what they learned. Each of the panelists has spent a year teaching and/or researching overseas while on a sabbatical. In addition, some of the panelists have taken students on technology service trips to different countries. Areas visited include Asia, Africa, Europe, and Central America. Audience members will hear about lessons learned and will be inspired about all the different opportunities for working overseas.

Computer security classes can be enhanced by listening to or viewing webcasts. Through webcasts students can learn about current security trends from experts. This paper discusses of variety of sources of webcasts and how they can be used to spice up a computer security class.

Studies show that a significant number of employees steal data when changing jobs. Insider attackers who have the authorization to access the best-kept secrets of organizations pose a great challenge for organizational security. Although increasing efforts have been spent on identifying insider attacks, little research concentrates on detecting data exfiltration activities. This paper proposes a model for identifying data exfiltration activities by insiders. It uses statistical methods to profile legitimate uses of file repositories by authorized users. By analyzing legitimate file repository access logs, user access profiles are created and can be employed to detect a large set of data exfiltration activities. The effectiveness of the proposed model was tested with file access histories from the subversion logs of the popular open source project KDE.

The Certified Information Systems Security Professional (CISSP) is the preeminent information security certification. The sponsoring organization (ISC) 2 ® describes the CISSP as "the credential for professionals who develop policies and procedures in information security." This paper examines the CISSP certifications. It discusses the value to educators and to professionals of preparing for, taking, and obtaining the CISSP certification.

The Certified Secure Software Lifecycle Professional (CSSLP) is a new certification from (ISC)2®. This certification purports to confirm that the professional can skillfully incorporate security into all phases of the software lifecycle. Many security experts have consistently championed the philosophy that better design, implementation, and operation of software can prevent many of the security problems that plague ubiquitous computing. This paper discusses the value to computing educators and to information technology professionals of preparing for, taking, and obtaining the CSSLP certification.

Cryptography is an indispensable tool for securing data and for ensuring the privacy of communications such as web browsing and email. Although there are many practical utilities which can encrypt disks, file systems, and emails, these utilities are still not widely adopted by end users. One intention of cryptographic utilities is to enhance the confidentiality of information. From the security practitioner's point of view, cryptography is a must for protecting sensitive data. System administrators and technical savvy people not only think many existing cryptography products are useful but also usable, at least to some extent. However, when viewed by majority of end users who do not have the technical background on cryptography, key and password management, authentication, and the complexity for using cryptography products can be the hurdles for making these utilities usable. This paper studies free and low-cost cryptographic products including encrypted flash drives, hard drives, file systems, and email systems to assess their usability. We also make recommendations for usable end-user cryptography.

Google Hacking uses the Google search engine to locate sensitive information or to find vulnerabilities that may be exploited. This paper evaluates how much effort it takes to get Google Hacking to work and how serious the threat of Google Hacking is. The paper discusses the countermeasures that can be used against Google Hacking.

Web application development is a large and growing area of employment for computer science graduates. While our graduates have learned how to design and implement web applications that work correctly with expected inputs, few have learned how to design and implement software that is secure against common web application vulnerabilities. The most common security vulnerabilities in software are cross-site scripting, SQL injection, and PHP include bugs. All three problems are web application vulnerabilities. These vulnerabilities can allow attackers to access applications without permission, obtain sensitive information like credit card or social security numbers, and steal merchandise or transfer funds from commercial web sites. The number of vulnerabilities discovered each year has increased at an exponential rate since 2000. In this tutorial, we will describe how attackers exploit common web application vulnerabilities and show live demonstrations of such attacks. We will show participants how to teach their students to design and write secure code that is immune to these attacks. The tutorial will present resources that participants can use to incorporate web application security into programming, database, web development, and information security courses.

Despite increased user awareness, phishing activities represent a serious threat to information security. Phishing sites are increasingly sophisticated and continue to defraud users. Computing professionals need to know how phishing works. This paper presents a series of laboratory exercises to educate future computing professionals about the mechanics of phishing attacks. These laboratories teach students how an email "from" address can be spoofed, how phishing emails can lure their victims, and how easy it is to produce a fraudulent web site and a phishing email. This paper discusses how future computing professionals can minimize phishing vulnerabilities.

We are designing a course in secure software engineering that will teach students how to incorporate security throughout the software development lifecycle. The class will serve as a capstone for a new graduate certificate in secure software engineering. This paper describes the class goals, the design for the class, and the materials that we will develop to teach secure software engineering. We are creating ten modules to cover the core topics in software security. Each module will cover one or more class goals and will consist of both explanatory materials and assignments to give students the opportunity to apply their learnings in a small context. The modules will be developed over the Summer and Fall of 2006, and the class will be first offered in Spring 2007. The class will also incorporate a team-based web development project that students will work on throughout the semester to gain experience applying security principles to a large-scale project.

Security attacks are changing their target from the network to the application, where an estimated 75% of attacks take place according to Gartner[1]. Increased pressure from customers and government regulations like HIPAA and Sarbanes-Oxley are pushing businesses to address security issues in software development. While all developers do not need to be security experts, they do need a certain level of security awareness. To achieve this goal, students need to be made aware of security issues when developing any large project in class.

Nationally there has been a sizeable decline in computer science majors while information technology degree programs are newer and growing. While computer science teaches software development and the theory of the discipline, information technology covers areas such as system and network administration, security, web development, multimedia, and computer support. Information technology deals with the computer infrastructure of an organization and therefore is more immune to off-shoring than programming. Diversifying into information technology may stabilize a computer science department's total number of majors.

ABSTRACTInformation assurance and systems security are important topics that compel the attention of future computer scientists. Typically, undergraduate students in computer science programs today are exposed to these concepts at the end of their education in stand-alone courses on information security. As information assurance (IA) educators, we perceive the need to incorporate IA topics throughout the undergraduate CS curriculum. In this panel, we will first present the goals, challenges, and current state of progress made at our respective institutions. Then we will solicit feedback and suggestions from the audience for better integrating IA topics across the undergraduate curriculum.

Security flaws are endemic to modern computer software. Software vendors have largely ignored security flaws in the past, believing that they could fix problems by patching flaws after the software was released and an attacker discovered the flaw. However, expanding software complexity is increasing the number of security bugs. At the same time, ever greater network connectivity is offering adversaries greater opportunities to attack software. Therefore, we can no longer afford to ignore security flaws until they are exploited by an attacker.

Headlines about computer security breaches occur almost daily. The popular press, the web, and software documentation, include a vast array of remedies for safeguarding one's personal computer from such attacks. For many, keeping up with computer security is overwhelming. This tutorial covers an extensive but concise range of strategies for securing your office and home computers. You can use them yourself, teach them to your students and share them with your colleagues.