Article Per Year (5 Year)
p-Index From 2021 - 2026
0.23
P-Index
This Author published in this journals
All Journal Electronic Integrated Computer Algorithm Journal
Jen-Peng Huang
Southern Taiwan University of Science and Technology
Computer Science & IT Decision Sciences, Operations Research & Management Electrical & Electronics Engineering Social Sciences

Published : 1 Documents Claim Missing Document
Claim Missing Document
Check
Articles

Found 1 Documents
Search

 1 
A STRIDE-Based Threat Taxonomy for Digital Showcase Platforms in Vocational Higher Education Donny Sanjaya; Indri Sulistianingsih; Rizka Salsabila Riadi; Jen-Peng Huang; Chairul Rizal
Electronic Integrated Computer Algorithm Journal Vol. 4 No. 1 (2026): VOLUME 4, NO 1: OCTOBER 2026
Publisher : Yayasan Asmin Intelektual Berkah

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.62123/enigma.v4i1.235

Abstract

Digital showcase platforms have become central to how vocational higher education institutions publish student portfolios and project artifacts. These platforms combine high public visibility with the storage of personal data, authentication credentials, and project metadata, which widens their attack surface. Existing security studies concentrate on large academic universities and mostly report tool based test results, so a conceptual threat model tailored to the showcase archetype in vocational education is not yet available. This study formulates a STRIDE based threat taxonomy for digital showcase platforms in vocational higher education. A reference data flow diagram of the platform archetype is decomposed into processes, data stores, external entities, and trust boundaries, and the STRIDE method is applied to each element to elicit threat classes. Each threat class is mapped to the OWASP Top 10:2025 categories and assigned a representative severity using the CVSS v3.1 base metric. The resulting taxonomy organizes twenty-one threat classes across the six STRIDE dimensions and links them to concrete platform assets. The taxonomy supports secure by design decisions for platform maintainers and provides a structured basis for subsequent controlled testing and expert validation.
Co-Authors Chairul Rizal Donny Sanjaya Indri Sulistianingsih Rizka Salsabila Riadi