Claim Missing Document
Check
Articles

Found 4 Documents
Search
Journal : international journal software engineering and computer science ijsecs

Advanced Persistent Threats Analysis and Intrusion Detection Systems Evaluation Dedy Wibowo; Taswanda Taryo; Ferhat Aziz
International Journal Software Engineering and Computer Science (IJSECS) Vol. 5 No. 3 (2025): DECEMBER 2025
Publisher : Lembaga Komunitas Informasi Teknologi Aceh (KITA)

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.35870/ijsecs.v5i3.5770

Abstract

- Advanced Persistent Threats are significant cybersecurity threats that employ covert and strategically planned operations to achieve long-term unauthorized access and data exfiltration. PT XYZ, a logistics company with considerable operational and customer data, is more susceptible to APTs, which is why the company decided to implement Wazuh as an open-source SIEM platform for improved intrusion detection capabilities. We assessed how effectively this IDS-SIEM implementation could detect and respond to APT scenarios by analyzing multi-source logs from Wazuh, Sysmon, and endpoint telemetry across PT XYZ’s PC infrastructure between June 3-30, 2025—capturing 35,333 records in total. Simulated APT attacks were carried out using Atomic Red Team with detection mapping based on MITRE ATT&CK tactics. Most of the early stages of attack phases were identified by Wazuh particularly Initial Access and Execution phases where the system logged 1,060 true positives; 8,537 true negatives; 563 false positives; and 440 false negatives at an accuracy rate of 91%. Normal traffic detection results were good with a precision of 0.95, recall of 0.94 F1-score at the same value whereas attack detection had a precision value of 0.65 with a recall of 0.71 giving it an F1 score of 0.68 making macro-averaged metrics fall at values such as 0.80 for precision and 0.82 for recall which further brought the F1 score up to 0.81 while weighted averages peaked at 0.91.Our results indicate that an open-source SIEM like Wazuh can be used effectively for the detection of APTs in logistics operations when configured appropriately using MITRE ATT&CK-based threat simulations – hence having real-world applicability towards improving cybersecurity defenses within this sector.
Advanced Persistent Threats Analysis and Intrusion Detection Systems Evaluation Dedy Wibowo; Taswanda Taryo; Ferhat Aziz
International Journal Software Engineering and Computer Science (IJSECS) Vol. 5 No. 3 (2025): DECEMBER 2025
Publisher : Lembaga Komunitas Informasi Teknologi Aceh (KITA), Indonesia

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.35870/ijsecs.v5i3.5770

Abstract

- Advanced Persistent Threats are significant cybersecurity threats that employ covert and strategically planned operations to achieve long-term unauthorized access and data exfiltration. PT XYZ, a logistics company with considerable operational and customer data, is more susceptible to APTs, which is why the company decided to implement Wazuh as an open-source SIEM platform for improved intrusion detection capabilities. We assessed how effectively this IDS-SIEM implementation could detect and respond to APT scenarios by analyzing multi-source logs from Wazuh, Sysmon, and endpoint telemetry across PT XYZ’s PC infrastructure between June 3-30, 2025—capturing 35,333 records in total. Simulated APT attacks were carried out using Atomic Red Team with detection mapping based on MITRE ATT&CK tactics. Most of the early stages of attack phases were identified by Wazuh particularly Initial Access and Execution phases where the system logged 1,060 true positives; 8,537 true negatives; 563 false positives; and 440 false negatives at an accuracy rate of 91%. Normal traffic detection results were good with a precision of 0.95, recall of 0.94 F1-score at the same value whereas attack detection had a precision value of 0.65 with a recall of 0.71 giving it an F1 score of 0.68 making macro-averaged metrics fall at values such as 0.80 for precision and 0.82 for recall which further brought the F1 score up to 0.81 while weighted averages peaked at 0.91.Our results indicate that an open-source SIEM like Wazuh can be used effectively for the detection of APTs in logistics operations when configured appropriately using MITRE ATT&CK-based threat simulations – hence having real-world applicability towards improving cybersecurity defenses within this sector.
Digital Forensic Analysis of Signature Images Using Error Level Analysis, Image Hashing, and Support Vector Machine Within the DFRWS Framework Amelia Yahya; Taswanda Taryo; Kahfi Heryandi Suradiradja
International Journal Software Engineering and Computer Science (IJSECS) Vol. 6 No. 2 (2026): AUGUST 2026
Publisher : Lembaga Komunitas Informasi Teknologi Aceh (KITA), Indonesia

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.35870/ijsecs.v6i2.7224

Abstract

The increasing use of digital documents in administrative and legal activities has expanded the use of image-based signatures for authentication and verification. However, signature images are vulnerable to manipulation using image-editing software, potentially resulting in document forgery and disputes over authenticity. This study examined the use of Error Level Analysis (ELA), perceptual hashing (pHash), and the Gray Level Co-occurrence Matrix (GLCM) to detect manipulation in signature images. It also evaluated the performance of a Support Vector Machine (SVM) in classifying genuine and forged signatures within the Digital Forensic Research Workshop (DFRWS) framework. The dataset comprised 720 signature images obtained from the Starter Handwritten Signatures Dataset. The research process involved image preprocessing, feature extraction, model training, and performance evaluation using a confusion matrix, accuracy, precision, recall, and F1-score. The model achieved an accuracy of 80.56% on previously unseen test data. The developed system also produced visual analysis outputs and generated digital investigation reports based on the DFRWS framework. These results indicate that the combination of ELA, pHash, GLCM, and SVM can support a structured digital forensic process for distinguishing between genuine and forged signature images.
Predicting Peak Ground Acceleration Using RNN and LSTM Model on MCGuire’s Empirical Calculation Irna Purwanti; Taswanda Taryo; Ferhat Aziz
International Journal Software Engineering and Computer Science (IJSECS) Vol. 6 No. 2 (2026): AUGUST 2026
Publisher : Lembaga Komunitas Informasi Teknologi Aceh (KITA), Indonesia

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.35870/ijsecs.v6i2.7268

Abstract

Peak ground acceleration (PGA) is an important parameter in seismic hazard assessment because it represents the maximum ground acceleration generated by an earthquake and informs structural design and disaster mitigation. Predicting PGA remains challenging because seismic-wave propagation is nonlinear and affected by geological heterogeneity. This study developed, evaluated, and spatially mapped recurrent neural network (RNN) and long short-term memory (LSTM) models for predicting PGA values calculated using the McGuire empirical equation in BMKG Regional II, Indonesia, which extends from South Sumatra to West Java. A historical earthquake catalog covering 1971–2025 was used to generate a spatial dataset comprising 3,727 grid points based on surface-wave magnitude and hypocentral distance. The dataset was divided sequentially into 70% training data and 30% testing data. On the test set, the LSTM produced an RMSE of 55.1559, an MAE of 31.0443, and an R² of 0.7112, whereas the RNN produced an RMSE of 56.7773, an MAE of 36.5842, and an R² of 0.6940. The spatial results also showed that the LSTM reproduced high PGA values more closely than the RNN, which produced smoother estimates in areas with abrupt PGA variations. Within the dataset and model configuration used in this study, the LSTM therefore provided better predictive performance than the RNN for reconstructing the spatial distribution of McGuire-based PGA. The resulting model may support regional seismic hazard assessment, but validation against observed ground-motion records and the inclusion of local site parameters remain necessary before its use in engineering or regulatory applications.