Judith Leo
Nelson Mandela African Institution of Science and Technology

Published : 2 Documents Claim Missing Document
Claim Missing Document
Check
Articles

Found 2 Documents
Search

A Hybrid Machine Learning and Signature-Based Approach for Detecting Network Pivoting in BYOD Environments Nassor Suleiman Amour; Judith Leo; Mussa Ally Dida
Journal of Information System and Informatics Vol 8 No 1 (2026): February
Publisher : Asosiasi Doktor Sistem Informasi Indonesia

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.63158/journalisi.v8i1.1428

Abstract

This study addresses the challenge of detecting network pivoting, a lateral movement technique that is difficult to identify in insider and BYOD environments because malicious transitions can resemble normal internal activity. The objective was to improve detection of both known and unknown pivoting behaviours while supporting practical triage in resource-constrained institutions. A hybrid detection framework was developed that fuses Snort signature alerts with machine learning classification and unsupervised anomaly detection using behavioural features derived from BYOD-like network traffic. The approach was evaluated in a controlled testbed and supported by organisational survey findings on awareness and monitoring practice. Results show the hybrid system achieved 96.2% classification accuracy with a 4.5% false positive rate when distinguishing normal traffic, suspicious activity, and pivoting attacks. Compared with signature-only and machine-learning-only baselines, the hybrid design detected simulated pivoting attempts earlier and more consistently. User acceptance testing also reported strong satisfaction with the integrated dashboard for monitoring, filtering, and reporting. The key contribution is a unified, dashboard-oriented fusion of signature and behavioural evidence that strengthens early lateral movement detection and reduces manual correlation effort.
Integrating ML with Electronic Fiscal Devices for Real-Time Underpricing Detection in Tanzania Benitho Alphonce Chengula; Judith Leo; Cyril Chimilila
Journal of Information System and Informatics Vol 8 No 2 (2026): April
Publisher : Asosiasi Doktor Sistem Informasi Indonesia

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.63158/journalisi.v8i2.1582

Abstract

This study aims to develop a machine learning-based tool integrated into Electronic Fiscal Devices (EFDs) to detect underpricing fraud in real time in Tanzania. The motivation for this research arises from the limitations of existing EFD systems, which rely on manual and post-audit mechanisms that are ineffective in identifying fraudulent pricing during transactions. A mixed-methods approach was employed, combining qualitative insights from tax officers with quantitative data collected from traders and buyers. A dataset of 5,000 mobile phone sales transactions collected from Arusha, Dar es Salaam, and Iringa in Tanzania, was pre-processed and used to train and evaluate multiple machine learning models, including Logistic Regression, Support Vector Machine, XGBoost, and Random Forest, using 5-fold cross-validation. The experimental results show that the Random Forest model outperformed other models, achieving an accuracy of 99.6% along with strong precision, recall, and F1-score values. To demonstrate practical applicability, the trained model was further integrated into a prototype EFD environment, where it enabled near real-time fraud detection and generated automated alerts for traders and tax authorities, with geolocation features supporting targeted enforcement. However, the dataset is limited to mobile phone transactions within selected regions of Tanzania, which may affect the generalizability of the findings. The novelty of this study lies in integrating machine learning–based price validation into EFD systems to support proactive detection of underpricing fraud at the point of transaction, thereby enhancing tax compliance and revenue protection.