Titik Khawa Abd Rahman
Asia E University

Published : 2 Documents Claim Missing Document
Claim Missing Document
Check
Articles

Found 2 Documents
Search
Journal : journal of embedded systems security and intelligent systems

Ensemble Learning for Android Privacy-Risk Flow Pre-Screening Using Permission and Metadata Features Tri Wahyuni; Muhammad Faisal; Titin Wahyuni; Nurnawaty; Rio Prasetyo Lukodono; Titik Khawa Abd Rahman
Journal of Embedded Systems, Security and Intelligent Systems Vol 7 No 3 (2026): September 2026
Publisher : Program Studi Teknik Komputer

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.59562/jessi.v7i3.13180

Abstract

Purpose - This study develops a privacy-oriented pre-screening framework for identifying Android applications with potential Sensitive Data Exposure by combining lightweight permission and metadata features with ensemble learning. Design/methods/approach - Android applications obtained from the AndroZoo repository were analyzed using FlowDroid to construct reference labels based on sensitive source–sink flows. Privacy-oriented features were derived from permissions, application metadata, source and sink indicators, and interaction patterns. An Ensemble Stacking model integrating Random Forest, Support Vector Machine, and Extreme Gradient Boosting with Logistic Regression as the meta-classifier was evaluated under class imbalance. Additional circularity, ablation, repeated validation, and clean-feature experiments were conducted to assess robustness and deployment feasibility. Findings - The proposed framework demonstrated strong capability in distinguishing applications containing FlowDroid-defined potential privacy-risk flows. FlowDroid-derived source and sink indicators were highly discriminative, while permission-only features were less effective. Importantly, the clean-feature configuration retained strong discriminatory capability without requiring FlowDroid at inference time, supporting its use as a lightweight first-stage screening mechanism before more computationally intensive taint analysis. Research implications/limitations - The framework can support developers, security auditors, and platform administrators in prioritizing applications for deeper privacy inspection. However, the study relies on static analysis, a single application repository, and FlowDroid-derived reference labels. Originality/value - This study contributes a two-stage Android privacy-risk screening framework that combines lightweight deployable features with targeted static taint analysis while explicitly addressing label-feature circularity and inference-time feasibility.
TOGAF-Guided Microservice Architecture for Scalable and Interoperable Madrasah Learning Portals Andi Nailah Mashfufah Sulfa; Muhammad Faisal; Titin Wahyuni; Jufri; Titik Khawa Abd Rahman; Nurnawaty
Journal of Embedded Systems, Security and Intelligent Systems Vol 7 No 4 (2026): December 2026
Publisher : Program Studi Teknik Komputer

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.59562/jessi.v7i4.13069

Abstract

Purpose – This study aims to design and evaluate an integrated madrasah learning portal by combining The Open Group Architecture Framework (TOGAF) with microservice architecture to improve the scalability, modularity, and interoperability of academic information services. Methods – The study employed selected TOGAF Architecture Development Method phases to align business, data, application, and technology requirements. The proposed architecture decomposed academic functions into User, Learning, and Assessment Services connected through REST APIs. Academic datasets representing students, teachers, subjects, classes, attendance, assignments, and assessments were used for proof-of-concept implementation. The architecture was evaluated through workload-based backend processing, cross-service identifier consistency, simulated workload iterations, and exploratory comparisons with monolithic architectural scenarios. Findings – The proposed architecture successfully integrated core academic services through modular service decomposition and standardized communication mechanisms. The workload evaluation demonstrated stable processing behavior under lower workloads, while larger workloads required increased execution time. Cross-service data relationships maintained consistent identifier references across the evaluated academic datasets. The exploratory architectural comparison also indicated that the Microservice + TOGAF configuration provided more efficient backend processing behavior than the evaluated monolithic configurations within the controlled environment. Research Implications – The proposed model provides a reference architecture for educational institutions seeking structured, modular, and interoperable academic information systems. Originality – This study integrates TOGAF-guided enterprise architecture with microservice-based academic service decomposition and evaluates the resulting architecture through scalability and interoperability analyses in a madrasah learning context.