cover
Article Per Year (5 Year)
All
Home Page
OAI Link
Editorial Team
Contact
Reviewer
Google Scholar
Contact Name
ridho surya kusuma
Contact Email
ridhosuryakusuma69@gmail.com
Phone
+6282386692852
Journal Mail Official
baramedia7@gmail.com
Editorial Address
Jl. Mancasan, Kel. Jogotirto, Kec. Berbah, Kab. Sleman, Kode Pos: 55573, Sleman, D.I. Yogyakarta.
Location
Kab. sleman,
Daerah istimewa yogyakarta
INDONESIA
International Journal of Cyber Engineering (IJCE)
Published by PT. Baramedia Literasi Digial
ISSN : -     EISSN : 31634575     DOI : https://doi.org/10.68404/ijce.v1i1.10
Core Subject :
International Journal of Cyber Engineering (IJCE) is a peer-reviewed international journal publishing original and innovative research in Information Technology (IT), computing, cybersecurity, digital technologies, and their integration with engineering disciplines. IJCE welcomes both core Information Technology and cybersecurity research as well as multidisciplinary studies that apply computing and digital technologies to engineering problems. The journal provides an international platform for academics, researchers, engineers, and practitioners to disseminate rigorous research, technological innovation, intelligent systems, and evidence-based solutions for modern digital and engineering environments.
Arjuna Subject : -
Articles 10 Documents
 1 
Network Forensic Analysis of a Multi-Stage Async RAT Infection Chain febrian tri hardiyanto; Ashish Jaisan
International Journal of Cyber Engineering Jil. 1 No. 1 (2025): International Journal of Cyber Engineering - December Edition
Publisher : PT Baramedia Literasi Digital

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.68404/ijce.v1i1.6

Abstract

This study investigates the complete infection chain of a multi-stage malware attack culminating in the deployment of the Async Remote Access Trojan (RAT). The primary objective is to identify critical stages of the infection process and derive Indicators of Compromise (IoCs) that can inform effective detection and prevention strategies. Contemporary malware increasingly employs sophisticated delivery mechanisms to evade conventional security defenses, presenting significant challenges for analysts due to multi-stage execution, obfuscation, and covert communication channels. A controlled virtual environment was established to safely execute and monitor the malware sample. Utilizing the Wireshark protocol analyzer and host-based artifact collection, the infection was traced from an ISO disk image file to a Windows Script File (WSF) loader. The analysis revealed a two-stage network communication process: an initial connection to a staging server for payload retrieval, followed by the establishment of an encrypted TLSv1.0 channel to a dynamic DNS-based Command and Control (C2) server operating on a non-standard port. The findings provide distinct IoCs, including network signatures and host-based traces, that can be leveraged for proactive defense. This research demonstrates that Async RAT infections rely on layered delivery mechanisms and encrypted communication channels to bypass detection. The identified IoCs offer actionable intelligence for security practitioners, contributing to the development of robust detection and mitigation strategies against evolving malware threats.
Implementation and Security Analysis on Websites Using HTTPS and SSL Certificates Ariq Naufal; Ashish Jaisan
International Journal of Cyber Engineering Jil. 1 No. 1 (2025): International Journal of Cyber Engineering - December Edition
Publisher : PT Baramedia Literasi Digital

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.68404/ijce.v1i1.7

Abstract

The rapid expansion of web-based services has heightened the importance of secure communication channels to protect sensitive data and ensure user trust. HTTPS, supported by SSL/TLS certificates, has become the de facto standard for securing websites; however, improper implementation and misconfigured certificates continue to expose systems to vulnerabilities. This study presents the implementation and security analysis of websites utilizing HTTPS and SSL certificates, focusing on practical deployment challenges and risk factors. Through empirical evaluation, the research identifies common misconfigurations, assesses the impact of certificate quality and TLS settings on the attack surface, and formulates actionable recommendations for system administrators and developers. The findings highlight that while HTTPS adoption is widespread, gaps remain in certificate management, automation practices, and adherence to best configurations. By providing a catalog of observed issues and mitigation strategies, this work contributes to strengthening web security postures and offers practical guidance for medium-scale operators who have yet to fully leverage automated certificate solutions.
Network Forensics of Contact Forms BazarLoader and Cobalt Strike Based on PCAP File Analysis Rasendriya Khansa Jolankarfyan; Ashish Jaisan
International Journal of Cyber Engineering Jil. 1 No. 1 (2025): International Journal of Cyber Engineering - December Edition
Publisher : PT Baramedia Literasi Digital

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.68404/ijce.v1i1.8

Abstract

This study presents a forensic analysis of the PCAP file 2021-12-03-Contact-Forms-BazarLoader-with-Cobalt-Strike to identify Indicators of Compromise (IoCs) and attack patterns associated with the BazarLoader malware family. Using Wireshark for packet inspection and VirusTotal for threat intelligence validation, several critical findings were observed. First, suspicious communication was detected with the domain mordister.top, flagged as malicious by 4 out of 97 security vendors. Second, evidence of Server Message Block (SMB) activity on port 445 indicated potential lateral movement within the network. Third, beaconing patterns were identified toward a Command and Control (C2) server via port 443, leveraging encrypted traffic to evade detection. These artifacts highlight the multi-stage nature of the infection chain, where BazarLoader facilitates the deployment of Cobalt Strike as a post-exploitation tool. The results demonstrate that early detection of BazarLoader infections can be achieved through multi-layered forensic analysis, combining network traffic inspection with external threat intelligence sources. Accuracy testing of the proposed detection approach yielded a rate of 92%, underscoring its effectiveness in identifying malicious activity at an early stage. This research contributes to the broader field of network forensics by providing actionable IoCs and detection strategies that can be integrated into security operations centers (SOCs) to mitigate risks posed by advanced malware campaigns.
Network Forensic Analysis of a Hancitor–Cobalt Strike Incident: Application of the NIST Methodology jamaludin; Ridho Surya Kusuma; Ashish Jaisan
International Journal of Cyber Engineering Jil. 1 No. 1 (2025): International Journal of Cyber Engineering - December Edition
Publisher : PT Baramedia Literasi Digital

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.68404/ijce.v1i1.9

Abstract

Cybersecurity incidents involving the Hancitor and Cobalt Strike malware have been increasing and pose a significant threat to the security of organizational information systems. This study aims to conduct a network forensic analysis of attacks that employ the combined use of Hancitor and Cobalt Strike by applying the methodology of the National Institute of Standards and Technology (NIST) SP 800-86. The research adopts a qualitative approach by implementing the four stages of the NIST framework, namely collection, examination, analysis, and reporting. Data were obtained through simulated attacks in a controlled environment using forensic tools such as Wireshark and NetworkMiner. The findings reveal an attack pattern that begins with the initial Hancitor infection delivered through a malicious Microsoft Office document, followed by command and control (C2) communication used to download and execute the Cobalt Strike payload. Network packet analysis successfully identified suspicious traffic characteristics, including Cobalt Strike beaconing and data exfiltration activities. This study concludes that the application of the NIST forensic methodology is effective in uncovering the stages of such attacks and can assist organizations in responding to similar incidents in the future. Furthermore, the research findings can serve as indicators of compromise (IoCs) to enhance early detection of attacks involving the combined use of Hancitor and Cobalt Strike.
Analysis of Async RAT Malware Infection through Network Communication Using Wireshark Prasetyo Mimboro; Mochammad Luthfi Rahmadi; Ashish Jaisan
International Journal of Cyber Engineering Jil. 1 No. 1 (2025): International Journal of Cyber Engineering - December Edition
Publisher : PT Baramedia Literasi Digital

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.68404/ijce.v1i1.10

Abstract

This study investigates the infection process of the Async Remote Access Trojan (Async RAT) and demonstrates how its malicious activity can be identified through network traffic analysis using Wireshark. Async RAT is a remote access malware that enables adversaries to gain complete control over compromised systems. The case study utilizes PCAP files and infection artifacts obtained from malware-traffic-analysis.net to reconstruct the infection chain, beginning with the execution of a suspicious ISO file containing a WSF script and culminating in the malware’s communication with Command and Control (C2) servers. The findings reveal that Async RAT employs both HTTP and HTTPS protocols to retrieve payloads and maintain interaction with remote servers. Furthermore, Indicators of Compromise (IoCs)—including domains, IP addresses, and file hashes—were identified and validated to provide insight into the attack vector. This research contributes to the broader understanding of malware infection patterns and supports the development of effective detection and mitigation strategies in cybersecurity practice.
AST GRAPH FEATURES FOR CODE SIMILARITY SCREENING IN A CONTROLLED SYNTHETIC STUDY Reynaldy Nurcahyo; Anggi Rizky Windra Putri; Tasiu Abdullahi Yusuf
International Journal of Cyber Engineering Jil. 2 No. 1 (2026): International Journal of Cyber Engineering - June Edtition
Publisher : PT Baramedia Literasi Digital

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.68404/ijce.v2i1.25

Abstract

Source-code similarity screening must distinguish lexical resemblance, structural similarity, behavioural agreement, and evidence of plagiarism. This study evaluates how identifier normalisation and abstract syntax tree (AST) graph features respond to controlled code transformations. A reproducible synthetic corpus contains 140 Python programs derived from 20 algorithm roots and 160 labelled pairs. Ten roots supply 80 validation pairs for threshold selection, while ten disjoint roots supply 80 test pairs. Positive pairs agree on 200 bounded input cases, whereas each negative pair has a recorded behavioural counterexample. Five deterministic representations are compared using cosine similarity: raw token trigrams, normalised token trigrams, an AST node histogram, and two graph-refinement variants with or without literal values. Normalised tokens achieved the highest test F1-score of 0.857, compared with 0.655 for raw tokens, 0.659 for the node histogram, and 0.667 for each graph-refinement variant. The identical graph F1-scores concealed opposite failure modes: the literal-preserving representation missed 20 positive pairs, whereas the literal-blind representation accepted all 40 negative pairs. Removing literal values therefore made behaviour-changing mutations indistinguishable from their source graphs. These findings identify representation and threshold trade-offs rather than demonstrating general superiority of graph methods. The contribution is an auditable pilot protocol and a transformation-level analysis of structural similarity failures.
DESIGN AND SIMULATION OF A TASK REMINDER WITH SPACED REVIEW AND DEADLINE PRESSURE DETECTION Hizba Muhammad Falah; Anggi Rizky Windra Putri; Tasiu Abdullahi Yusuf
International Journal of Cyber Engineering Jil. 2 No. 1 (2026): International Journal of Cyber Engineering - June Edtition
Publisher : PT Baramedia Literasi Digital

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.68404/ijce.v2i1.26

Abstract

Describe Task reminders commonly indicate when an assignment is due, but deadline counts alone do not describe the effort required before each due date. Moreover, repeated notifications are not equivalent to retrieval-based spaced review. This study develops an explicit scheduling specification for an existing task-reminder prototype and evaluates a separate executable reference engine. The design combines a recall-dependent review rule, a cumulative deadline-pressure calculation, and an event resolver that distinguishes review prompts from deadline checks. Evaluation comprises 23 functional checks, three scripted review sequences, and 300 synthetic workload scenarios containing 1,150 task records. All functional checks passed. At an assumed capacity of two hours per day and a 72-hour horizon, count-based, aggregate-load, and cumulative deadline-pressure rules flagged 100, 100, and 150 scenarios, respectively. In 50 deliberately constructed early-bottleneck scenarios, only the cumulative rule flagged insufficient capacity before the earliest deadline. Conversely, all 50 light clustered workloads triggered the count rule without exceeding the assumed capacity. An independent exhaustive scheduling oracle agreed with the cumulative rule in all 300 scenarios; agreement was 50.0% for the count rule and 83.3% for the aggregate rule. These results verify logic under the stated capacity model. They do not establish improved retention, productivity, or student well-being. The contribution is a reproducible prototype extension with transparent assumptions and an evidence-based separation of reminder functionality from educational effectiveness.
A SIMULATION STUDY OF INDONESIAN SENTIMENT CLASSIFICATION FOR A WHATSAPP STUDENT SUPPORT CHATBOT Dian Dwi Lestari; Anggi Rizky Windra Putri; Tasiu Abdullahi Yusuf
International Journal of Cyber Engineering Jil. 2 No. 1 (2026): International Journal of Cyber Engineering - June Edtition
Publisher : PT Baramedia Literasi Digital

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.68404/ijce.v2i1.27

Abstract

Short Indonesian messages may help institutions organise student support requests, but sentiment polarity does not directly measure psychological well-being. This study evaluates a text-classification component intended for a WhatsApp student support chatbot through a fully synthetic, reproducible simulation. A constructed corpus contains 360 messages from 60 scenario families across six support domains. Families, including their positive and negative variants, are separated into training, validation, and test partitions of 216, 72, and 72 messages. A further 48 synthetic messages test negation, abbreviations, language mixing, and explicitly mixed sentiment. Term frequency–inverse document frequency features and multinomial Naïve Bayes are compared with a constant baseline and logistic regression. On the held-out synthetic test set, Naïve Bayes achieves accuracy of 0.875 and macro-F1 of 0.875, matching logistic regression on both aggregate metrics. On the challenge set, its accuracy decreases to 0.813 and macro-F1 to 0.806. Negation is the weakest scenario, with six correct predictions out of twelve; all six positive negation examples are misclassified. Feature inspection links selected errors to polarity-bearing words and unseen abbreviations. The results establish a reproducible computational baseline and expose limitations obscured by aggregate scores. They do not validate real student conversations, live WhatsApp integration, stress detection, or improvements in well-being.
DESIGN AND IMPLEMENTATION OF A WEB-BASED EMPLOYEE ATTENDANCE SYSTEM WITH FUNCTIONAL EVALUATION Tri Yanto; Anggi Rizky Windra Putri; Tasiu Abdullahi Yusuf
International Journal of Cyber Engineering Jil. 2 No. 1 (2026): International Journal of Cyber Engineering - June Edtition
Publisher : PT Baramedia Literasi Digital

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.68404/ijce.v2i1.28

Abstract

Manual attendance administration can fragment records and complicate the consolidation of employee arrival and departure information. This study presents the design and implementation of a web-based employee attendance system for centralised recording and administrative reporting. An applied system-development approach followed the Waterfall stages of requirements analysis, design, implementation, and functional testing. The application provides employee login, check-in, check-out, attendance history, and administrative interfaces for master data, reports, and leave requests. Evaluation used a black-box test table containing eight documented scenarios covering authentication, attendance recording, employee-data maintenance, report display, and logout. Seven scenarios have internally consistent input–output descriptions and are reported as successful. The remaining login scenario duplicates the valid-credential input while expecting an error message, leaving its interpretation unresolved. The results support a limited conclusion about the reported operation of the documented functions; they do not establish comprehensive system reliability or improvements in employee discipline, productivity, or administrative efficiency. The contribution is an application-level account linking the attendance workflow, role-specific interfaces, and functional-test evidence. Further evaluation should resolve the ambiguous test case, document the execution environment, and measure operational and organisational outcomes using traceable study data.
DESIGN OF A WEB-BASED LEARNING PROTOTYPE INTEGRATING MULTIMEDIA CONTENT, INTERACTIVE ASSESSMENT, AND PROGRESS TRACKING Risqi Setiawan; Anggi Rizky Windra Putri; Tasiu Abdullahi Yusuf
International Journal of Cyber Engineering Jil. 2 No. 1 (2026): International Journal of Cyber Engineering - June Edtition
Publisher : PT Baramedia Literasi Digital

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.68404/ijce.v2i1.29

Abstract

Web-based learning environments increasingly combine multimedia resources, assessment tools, and progress information, but the coexistence of these features does not ensure a coherent learning workflow. This study develops a design specification for a web-based learning prototype integrating multimedia content, interactive assessment, and activity-based progress tracking. The reported work covers requirements analysis, traceability mapping, a three-layer architecture, a logical data model, an access-and-learning workflow, and four interface views within a staged Waterfall-oriented design process. Progress is defined through explicit activity-completion states rather than inferred from resource access or assessment scores. A prospective evaluation protocol separates functional verification, media-expert appraisal, subject-matter review, and intended-user feedback. The design is positioned against recent evidence on multimedia learning, online assessment, learning analytics, and LMS development. The available evidence supports the internal coherence and traceability of the proposed design but does not establish operational reliability, usability, learning gains, or engagement effects. The study therefore contributes a bounded integration design and an auditable evaluation framework for subsequent implementation and empirical testing.

Page 1 of 1 | Total Record : 10

 1 

Filter by Year

2025 2026


Reset
Filter By Issues
All Issue Jil. 2 No. 1 (2026): International Journal of Cyber Engineering - June Edtition Jil. 1 No. 1 (2025): International Journal of Cyber Engineering - December Edition