Article Per Year (5 Year)
p-Index From 2021 - 2026
0.778
P-Index
This Author published in this journals
All Journal International Journal Software Engineering and Computer Science (IJSECS) Gameology and Multimedia Expert Journal of Social Science Utilizing Technology
Sayed Elham Sadat
Kabul Education University
Computer Science & IT

Published : 4 Documents Claim Missing Document
Claim Missing Document
Check
Articles

Found 4 Documents
Search

 1 
Identifying and Mitigating Web Application Vulnerabilities: A Comparative Study of Countermeasures and Tools Sayed Elham Sadat; Mohammed Fahim Naseri; Khosraw Salamzada
International Journal Software Engineering and Computer Science (IJSECS) Vol. 4 No. 3 (2024): DECEMBER 2024
Publisher : Lembaga Komunitas Informasi Teknologi Aceh (KITA)

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.35870/ijsecs.v4i3.3138

Abstract

In the current age of technology, web applications and websites have experienced significant growth. This expansion has made their security a critical area of research. Web applications offer benefits, which makes user’s lives easier. In this paper, common web application vulnerabilities and effective strategies to mitigate the vulnerabilities are identified using a comparative study of countermeasures and open-source web application vulnerability assessment tools. Specifically, the top ten web application vulnerabilities and their countermeasures are investigated. Accordingly, several open-source vulnerability assessment tools are also introduced. The review highlights that with the developments and deployments of web applications on the internet, users are chased by a remarkable number of cyber-attacks. Attackers take advantage of available vulnerabilities in a web application or website, such as SQL injections, cross-site scripting, and broken authentications. This paper concludes by providing the best practices to mitigate cyber-attacks on web applications and suggests future directions for enhancing vulnerability assessment through machine learning techniques
Assessment of Public Key Infrastructure (PKI) and Digital Certificate Security in Public Sector Websites and Webmail Systems in Afghanistan Khosraw Salamzada; Sayed Elham Sadat; Mozamel Jawad
Gameology and Multimedia Expert Vol. 3 No. 3 (2026): Gameology and Multimedia Expert - July 2026
Publisher : Department of Informatics Faculty of Engineering Universitas Malikussaleh

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.29103/game.v3i3.28447

Abstract

Public Key Infrastructure (PKI) and digital certificates are fundamental to secure web communication by ensuring website authenticity, data confidentiality, and information integrity. As Afghan government institutions increasingly rely on websites and webmail systems to deliver digital services, secure certificate deployment has become essential for protecting sensitive information and maintaining public trust. This study assesses the deployment characteristics and security of PKI and digital certificates across 41 Afghan public-sector websites and 26 publicly accessible webmail systems. A quantitative, non-intrusive assessment was conducted using publicly available certificate and Transport Layer Security (TLS) information. Certificate authorities, validation types, trust chains, cryptographic mechanisms, and deployment practices were evaluated against recognized international cybersecurity standards and best practices. The results show that most public-sector websites use trusted certificate authorities, with Let's Encrypt securing 75.6% of the assessed websites. Certum, Google Trust Services, GlobalSign, and GoDaddy were also identified, while Domain Validation certificates were the predominant certificate type. However, 10 webmail systems (38.5%) generated browser security warnings, indicating weaknesses in certificate deployment or management. Overall, Afghan public-sector organizations have adopted trusted PKI infrastructures, but improvements in certificate management, security monitoring, and compliance with cybersecurity standards are required. These findings provide practical evidence to support stronger cybersecurity governance and improve the security and reliability of government digital services in Afghanistan.
Highly Secure and Easy to Remember Password-Based Authentication Approach Sayed Elham Sadat; Hedayatullah Lodin; Nazak Ahmadzai
Journal of Social Science Utilizing Technology Vol. 2 No. 4 (2024)
Publisher : Yayasan Adra Karima Hubbi

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.70177/jssut.v2i4.1505

Abstract

Background. Everyone connected and using the Internet is concerned regarding the security and also the privacy of their sensitive information available on the Internet. As authentication is the fundamental part of security, there are different authentication mechanisms through which the systems can be secured. The password-based authentication mechanism is a cheap and easy method for enforcing authentication in the systems for many years. The weakest aspect in password security is human, as they choose weak and easy to guess passwords or a highly secure and complex password which might be difficult to remember and recover the password. Purpose. In this paper, a password generation system is proposed which generates a password based on the user’s input like, time and location data. The system generates a password that is highly secure, easy to remember, easy to recover, and can effectively defend against Brute force and dictionary attacks. Method. This study utilizes a descriptive quantitative approach to develop a password-based authentication system focused on security and memorability. The population includes digital users needing secure access, with samples drawn from various groups to ensure comprehensive feedback. Data collection involves password strength evaluation tools and user feedback questionnaires. Procedures include developing a password generation algorithm using user inputs, followed by testing its security and conducting usability assessments. Feedback will guide the refinement of the system to enhance user experience and security. Results. The generated passwords using the porposed system have been checked in three online password checkers, which verifies that the system is generating highly secure and crack resistant passwords and the method for recovering the forgotten password was efficient and easy. The system is implemented using PHP scripting language with a user-friendly environment. Conclusion. This paper proposes a password-based authentication system that generates secure and memorable passwords using user input, time, and location data. The passwords were validated through three online checkers, demonstrating high security and resistance to attacks. Future enhancements could include voice recognition to improve security and personalization, making the system more user-friendly while maintaining low costs.
A Study of Cybersecurity Awareness among University Information and Communication Technology Staff in Kabul Abdul Hameed Himat; Sayed Elham Sadat; Mohammad Kabir Ahmadi
International Journal Software Engineering and Computer Science (IJSECS) Vol. 6 No. 3 (2026): DECEMBER 2026
Publisher : Lembaga Komunitas Informasi Teknologi Aceh (KITA), Indonesia

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.35870/ijsecs.v6i3.8075

Abstract

This study evaluated cybersecurity awareness among ICT staff in universities in Kabul, Afghanistan, and examined whether awareness differed by demographic and professional factors. A quantitative descriptive survey design was employed, with data collected from 36 employees across 10 universities using a structured questionnaire distributed via Google Forms. Analysis in SPSS included descriptive statistics, the Kruskal–Wallis test, and the Mann–Whitney U test. Results indicated a moderate level of cybersecurity awareness overall. The highest mean score was reported for recognizing the importance of protecting sensitive data (M = 3.97, SD = 0.941), whereas the lowest was for effective communication of cybersecurity policies (M = 3.25, SD = 1.052). Inferential tests revealed no statistically significant differences in awareness across age (H(3) = 1.742, p = 0.628), education (H(2) = 0.399, p = 0.819), or work experience (H(3) = 4.826, p = 0.185). Similarly, no significant difference was observed between staff with and without prior cybersecurity training (U = 117.00, p = 0.379). These findings suggest that demographic and professional characteristics do not substantially influence cybersecurity awareness among the respondents. Universities should therefore prioritize strengthening institutional communication of cybersecurity policies and establishing continuous, structured awareness programs to enhance organizational cyber resilience and equip ICT staff to safeguard institutional data.
Co-Authors Abdul Hameed Himat Hedayatullah Lodin Khosraw Salamzada Khosraw Salamzada Mohammad Kabir Ahmadi Mohammed Fahim Naseri Mozamel Jawad Nazak Ahmadzai