cover
Contact Name
De Rosal Ignatius Moses Setiadi
Contact Email
moses@dsn.dinus.ac.id
Phone
-
Journal Mail Official
editorial.jcta@gmail.com
Editorial Address
H building, Dian Nuswantoro University Imam Bonjol street no. 207 Semarang, Central Java, Indonesia
Location
Kota semarang,
Jawa tengah
INDONESIA
Journal of Computing Theories and Applications
ISSN : -     EISSN : 30249104     DOI : 10.62411/jcta
Core Subject : Science,
Journal of Computing Theories and Applications (JCTA) is a refereed, international journal that covers all aspects of foundations, theories and the practical applications of computer science. FREE OF CHARGE for submission and publication. All accepted articles will be published online and accessed for free. The review process is carried out rapidly, about two until three weeks, to get the first decision. The journal publishes only original research papers in the areas of, but not limited to: Artificial Intelligence Big Data Bioinformatics Biometrics Cloud Computing Computer Graphics Computer Vision Cryptography Data Mining Fuzzy Systems Game Technology Image Processing Information Security Internet of Things Intelligent Systems Machine Learning Mobile Computing Multimedia Technology Natural Language Processing Network Security Pattern Recognition Signal Processing Soft Computing Speech Processing Special emphasis is given to recent trends related to cutting-edge research within the domain. If you want to become an author(s) in this journal, you can start by accessing the About page. You can first read the Policies section to find out the policies determined by the JCTA. Then, if you submit an article, you can see the guidelines in the Author Guidelines or Author Guidelines section. Each journal submission will be made online and requires prospective authors to register and have an account to be able to submit manuscripts.
Articles 134 Documents
Beyond Binary Fraud Detection: Amount-Aware Operational Ranking for Transaction Risk Prioritization Hartatik Hartatik
Journal of Computing Theories and Applications Vol. 4 No. 1 (2026): JCTA 4(1) 2026
Publisher : Universitas Dian Nuswantoro

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.62411/jcta.16260

Abstract

Fraud detection in digital financial transactions is traditionally formulated as a binary classification problem, although real-world fraud investigation requires analysts to prioritize a limited number of suspicious transactions according to operational risk and potential financial impact. This study reformulates fraud detection as an amount-aware operational ranking problem for fraud-risk prioritization. Transactions are organized into time-window query groups, and fraudulent transactions are assigned graded relevance based on training-only transaction-amount quartiles, enabling the ranking objective to distinguish low- and high-severity fraud without relying on proprietary cost matrices. The proposed formulation is implemented using a representative Learning-to-Rank framework based on LambdaMART, while an out-of-fold XGBoost risk score is incorporated as an auxiliary feature to refine the ranking representation rather than serve as the primary contribution. Experiments conducted on a public credit-card fraud dataset using chronological validation and future-holdout testing demonstrate that amount-aware relevance consistently improves severity-aware top-rank ordering compared with conventional binary relevance. The proposed HybridLTR_amount model significantly outperforms XGBClassifier and PureLTR_binary in terms of all-query NDCG@10, whereas its performance is not statistically different from PureLTR_amount, indicating that the primary empirical improvement is attributable to the amount-aware ranking formulation rather than the auxiliary hybrid component. Additional operational analyses show that high-risk transactions and fraudulent financial losses are concentrated within a compact top-ranked segment, while budget-oriented evaluation demonstrates the practical value of the proposed formulation under limited analyst review capacity. These findings establish amount-aware operational ranking as an effective formulation-centric framework for operational fraud-risk prioritization rather than as a new classification algorithm.
Secure Lightweight Face Authentication with MTCNN and LightCNN for Digital Financial Services Dendy K. Pramudito; Jufriadif Na'am; Ferda Ernawan
Journal of Computing Theories and Applications Vol. 4 No. 1 (2026): JCTA 4(1) 2026
Publisher : Universitas Dian Nuswantoro

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.62411/jcta.16276

Abstract

Mobile face authentication for digital financial services must simultaneously satisfy recognition accuracy, computational efficiency, and biometric security under resource-constrained deployment conditions. This study proposes and evaluates a lightweight face-authentication framework that integrates detector–recognition pipeline optimization, protected biometric-template transformation, and blockchain-backed integrity support. Five face detection–recognition pipelines were systematically evaluated using a shared LightCNN-29v2 backbone fine-tuned on the Indonesian Muslim Student Face Dataset (IMSFD), with Mahalanobis-based Distance-Based Encryption (DBE) providing protected template matching and blockchain hash anchoring serving as an architectural integrity layer. Experiments on 3,660 images from 68 identities demonstrate that the MTCNN + LightCNN pipeline achieves the most favorable in-domain performance, reaching 94.95% accuracy, a ROC-AUC of 0.9970, an F1-score of 0.95, and successful processing of 3,546 out of 3,660 test images with an overall model size of approximately 5 MB. Applying Mahalanobis-based DBE further improves verification performance on IMSFD, increasing accuracy to 96.88% while reducing the False Acceptance Rate (FAR) from 0.83% to 0.18% and the False Rejection Rate (FRR) from 16.44% to 10.12%. Cross-dataset evaluation on LFW, CFP-FF, CFP-FP, AgeDB-30, CALFW, and CPLFW indicates that the proposed framework generalizes well to frontal-domain benchmarks but exhibits expected performance degradation under cross-pose and cross-age conditions due to distribution shift. Overall, the results demonstrate that detector selection is the dominant factor influencing end-to-end verification performance, while domain-specific fine-tuning and protected template matching are essential for secure and practical deployment in mobile financial authentication systems.
Block-wise Authenticated DNA-based Image Encryption with Tamper Localization using HKDF-Derived Keys Bagus Satrio Waluyo Poetro; Kusworo Adi; Aris Puji Widodo
Journal of Computing Theories and Applications Vol. 4 No. 1 (2026): JCTA 4(1) 2026
Publisher : Universitas Dian Nuswantoro

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.62411/jcta.16605

Abstract

Confidentiality alone cannot establish whether a medical, forensic, cloud-stored, or remotely sensed image has been modified during transmission, while a single global authentication verdict cannot identify the affected region. This paper presents a block-wise authenticated DNA-based image encryption framework that integrates a DNA-chaos confidentiality core with pre-decryption integrity verification and spatial tamper localization. An authenticated ephemeral X25519 key exchange establishes a session secret, which is expanded by HKDF-SHA256 into four transcript-bound, domain-separated subkeys for permutation, DNA operations, diffusion, and authentication. Chaotic seeds are derived from a canonical plaintext hash and block coordinates, preserving strong plaintext differential sensitivity while confining post-encryption modifications to the affected blocks. Ciphertext integrity is enforced using a block-wise encrypt-then-MAC construction with 128-bit truncated HMAC-SHA256 tags that authenticate both the canonical header and each ciphertext block. A reduction-based security argument shows that the authentication layer provides ciphertext integrity and conditionally upgrades an IND-CPA encryption core to IND-CCA security under standard HKDF and HMAC assumptions, while the confidentiality claim remains explicitly conditional on the encryption core. Experiments on 30 tuberculosis chest radiographs across five independent sessions achieved a ciphertext entropy of 7.9972, near-zero adjacent-pixel correlation, 99.61% NPCR, and 33.47% UACI. Across five representative tampering attacks, the proposed framework achieved an observed 100% block-level true-positive rate, 0% false-positive rate, and required only 2.847 ± 0.258 ms for block-wise authentication with 6.25% tag overhead using the default 16×16 block configuration. These results demonstrate that the proposed framework effectively combines statistical confidentiality, modern cryptographic key management, and reliable block-level tamper localization within a unified authenticated image encryption architecture.
A Side-Channel-Aware Cryptographic Framework for Secure Interactive, Embedded, IoT, and Edge Communication Systems Walid W. Souror; Mohamed Fouad; Fahmi Khalif; Ali E. Takieldeen
Journal of Computing Theories and Applications Vol. 4 No. 1 (2026): JCTA 4(1) 2026
Publisher : Universitas Dian Nuswantoro

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.62411/jcta.16745

Abstract

Secure interactive, embedded, and edge communication systems are often deployed in physically exposed environments where algorithmically secure ciphers may exhibit implementation-specific leakage. This paper presents a simulation-based evaluation of a configurable hybrid AES-Blowfish framework comprising AES-Hybridization, Combined Blowfish Trilogy, and cascaded Blowfish-to-AES modes. The AES-Hybridization path combines AES-256-CBC, Argon2id-derived whitening material, HMAC-based integrity binding, plaintext masking, and modeled randomized hiding activity. The hiding activity is represented solely within the leakage simulation and does not modify the plaintext or ciphertext. The Blowfish path employs session-dependent P-array randomization, dynamic S-box initialization, and a three-stage Feistel-like structure. The framework is evaluated using representative IoT/edge workload proxies, component-level ablation studies, modeled leakage assessment, non-ideal leakage scenarios, parameter-sensitivity analysis, and a software-level performance model. Compared with the simulated baseline configurations, the proposed modes reduce modeled TVLA, CPA, and DPA distinguishability, with AES-Hybridization providing the most balanced security-performance trade-off and the cascaded mode achieving the lowest modeled distinguishability at the highest computational cost. All findings are derived exclusively from simulation; no validation using physical power traces, electromagnetic traces, FPGA implementations, or microcontroller platforms is claimed.