Yusfrizal Yusfrizal
Politeknik Gihon

Published : 3 Documents Claim Missing Document
Claim Missing Document
Check
Articles

Found 3 Documents
Search

Educating on Mobile Computing and Security Practices Yusfrizal Yusfrizal; Heri Gunawan; Yahya Tanjung
Journal of Information Technology, computer science and Electrical Engineering Vol. 1 No. 3 (2024): October 2024
Publisher : Yayasan Sinergi Multidimensi Kreatif

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.61306/jitcse.v1i3.153

Abstract

With the increasing popularity of mobile devices, it has become essential to educate college and university students about mobile computing and security. This paper introduces eight course modules on mobile computing and security that we designed to integrate seamlessly into a computer science curriculum. These modules were showcased during a faculty workshop, where feedback was gathered through survey questionnaires and participants' reflective narratives. The evaluation results from the workshop are analyzed and discussed in this paper. These modules are adaptable for educators teaching mobile application development, cyber security, or other related subjects.
Hybrid Analysis Approach for Detecting Mobile Security Threats Yusfrizal Yusfrizal; Mutiara Sovina; Faisal Amir Harahap; Ivi Lazuly
Journal of Information Technology, computer science and Electrical Engineering Vol. 1 No. 3 (2024): October 2024
Publisher : Yayasan Sinergi Multidimensi Kreatif

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.61306/jitcse.v1i3.154

Abstract

As technology continues to advance rapidly, smartphones are becoming increasingly powerful, drawing a large number of users with innovative features provided by mobile operating systems like Android. However, the security vulnerabilities of these systems make Android devices frequent targets for hackers and cyber criminals. As a result, research on effective and efficient mobile threat analysis has become a critical topic in the field of cyber security, employing methods such as static and dynamic analysis. This paper proposes a hybrid approach that combines static and dynamic analysis to detect security threats and attacks in mobile applications. The proposed method integrates data states and software execution along critical test paths. Initially, static analysis is used to identify potential attack paths based on Android APIs and existing attack patterns. This is followed by dynamic analysis, which executes the program along these paths within a focused scope to determine the likelihood of an attack by comparing detected paths with known attack patterns. In the runtime phase of dynamic analysis, the approach reports types of attack scenarios related to confidential data leakage, such as web browser cookies, while ensuring no actual critical or protected data on mobile devices is accessed.
Integrating Zero Trust Architecture and Attribute-Based Encryption for Secure Cloud-IoT Access Control: A Systematic Literature Review Mutiara Sovina; Ivi Lazuly; Faisal Amir Harahap; Yusfrizal Yusfrizal; Surya Darma; Darma Indra Gultom
Journal of Information Technology, computer science and Electrical Engineering Vol. 3 No. 1 (2026): February-May 2026
Publisher : Yayasan Sinergi Multidimensi Kreatif

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.61306/jitcse.v3i1.257

Abstract

The rapid adoption of cloud computing and the Internet of Things (IoT) has significantly increased the complexity of securing distributed computing environments. Conventional perimeter-based security mechanisms are no longer sufficient to protect dynamic systems that require continuous authentication, authorization, and data confidentiality. This study presents a Systematic Literature Review (SLR) that investigates the integration of Zero Trust Architecture (ZTA) and Attribute-Based Encryption (ABE) as an advanced access control approach for Cloud-IoT environments. The review follows the PRISMA methodology to identify, screen, evaluate, and synthesize recent studies related to secure access control, lightweight cryptographic mechanisms, dynamic trust management, and scalable deployment strategies. The findings indicate that combining ZTA with ABE provides stronger protection through continuous identity verification and fine-grained data access control. Several optimization techniques, including lightweight CP-ABE, outsourced decryption, decentralized key management, and context-aware trust evaluation, have demonstrated considerable improvements in security, computational efficiency, and scalability for resource-constrained IoT devices. Nevertheless, challenges remain in attribute revocation, key management complexity, real-time processing, interoperability, and post-quantum security. This review provides a comprehensive overview of current research trends, implementation challenges, and future research opportunities, serving as a valuable reference for researchers and practitioners developing secure and scalable Cloud-IoT access control frameworks.