Search

The increase of using e-Health services enables remote access, communication, and analysis of medical images and data to facilitate medical diagnostics. This has introduced potential security threats to the medical images and data. Therefore, the security of private patient information and medical images becomes an important issue that should be considered. In such a framework, reversible watermarking has been presented to enhance medical image security. Reversible watermarking is an image watermarking category, that has the capability of completely restoring the original image after the hidden data is extracted. In this paper, a reversible watermarking scheme based on adaptive prediction error is introduced, in order to ensure the confidentiality of the patient's information, verify the authenticity of the host image, and localize and recover tampered areas if the image has been modified. This scheme segments the medical image into two segments namely: Region of Interest (ROI) and Region of Non-Interest (RONI). The Patient data and the hash value of the ROI are hidden in ROI. The hash value of the RONI, tamper detection and tamper recovery data are hidden in RONI. To reduce the distortion of ROI, the most diagnostically significant region, each embeddable pixel of ROI is able to conceal one bit and each embeddable pixel of RONI could conceal two bits. From the experimental results conducted on brain MRI and CT scan images, the proposed scheme is capable to accurately locate tempered regions and recover them. Moreover, the reversibility and the high hiding capacity with very good perceptibility are proven.

Recently, crime cases have been highly reported due to the increased of the utilization of technology. The development of system aims to identify the probable suspects based on social network messages. The study focuses on certain features extracted from the content of social media text messages. There were four features identified namely location, time, object and person. These four features help to manage the system based on specified crime messages. The implementation of features for crime suspect profiling (CSP) utilizes text mining through named entity recognition to identify the word or phrase for particular features. In this study, the suspect measure was obtained through the integrated similarity. Results obtained from the experiments conducted have revealed the similarity value that reflects the possibility of a contact as a suspect to the crime. The results of this study affirmed that the suspect profiling through the messages content is promising to identify the suspects.

High efficiency video coding (HEVC) was recently introduced two years ago as the new standard for video coding. This new codec will be the most widely prevalent standard. Because of the industry needs for authentication and copyright protection methodologies the robustness of this standard is required to be developed. This paper presents the first robust digital watermarking method for the HEVC based on Repetition- BCH syndrome code technique without intra-frame distortion drift. The objective of this article is to implement a new technique that can offer high robustness against noise channel errors and increase the error detection rate in the HEVC video sequences transmitted over noisy communication channels. The proposed technique does not significantly affect the video quality, nor does it escalate the bitrate. The results show that the proposed technique offers greater robustness against noise channel while preserving good quality for extracted watermark. The proposed technique significantly contributes to the performance of the error detection and correction. In addition, this technique can recover the watermark when the watermarked frames dropping rate is less than 20%.

The importance of IT governance has received increasing attention in the recent years. Extensive literature addresses top management and organisational issues of IT governance. However, recent findings suggest that people issues in IT governance equally deserve attention. Guided by the Theory of Planned Behaviour, this study examines the influence of IT practitioners and management guidance on the extent of their participation in IT governance initiatives. A quantitative study was conducted among IT practitioners in Malaysia. Data analysis using Partial Least Squares suggests that subjective norms and perceived behavioural controls on IT practitioners result in greater participation in IT governance initiatives. However, attitudes do not have significant relationship with participation in IT governance initiatives, in contrast with prediction of the theory. Further analysis reveals that awareness and perceived importance of IT governance are the two most important factors from the practitioner perspective. As for management guidance, organisational processes and reward system are the most important, closely followed by organisational structure. The findings reaffirm that IT governance requires control in the form of organisational structures, processes, goal settings and reward system to encourage desirable behaviours in IT governance initiatives.

Past research in information technology (IT) governance has shown that strong IT governance results in improved business performance. Despite widespread acceptance that IT governance is important, there are limited studies focusing on IT practitioners in IT governance initiatives. This study aims to examine the extent of commitment, awareness, perceived importance and competency in influencing IT practitioners’ participation in IT governance initiatives. Data analysis using Partial Least Squares reveals that awareness, perceived importance and competency have positive influence on participation in IT governance. However, commitment is not a significant predictor of participation in IT governance. The practitioner-centric approach taken by this study adds knowledge to the existing IT governance literature from organisational perspective. The findings from this study help IT management identify focus areas in increasing to maximise participation of IT practitioners in IT governance initiatives.

Nowadays because of the growth of internet usage in all over the world, users of this global service are faced with many different threats. Attackers are trying to improve their methods in order to penetrate the users’ machines to misuse their systems and their information. Most of the cyber-crimes are the result of one attack to a user or a network of many users. One of the important attacks in this area is Botnet which is controlling some compromised computers by an attacker remotely in terms of specific victim. This study tries to propose and implement a procedure in order to extract information and footprints of infected system with Botnet in order to reconstruct the Botnet attack and prepare a digital evidence package which shows the malicious activities and malicious files of this attack to present in a court.

Cybercriminals are changing their strategies as users are less concerns on the smartphone and social networks security risks such as spams, that will threaten them as they are more dependent on the smartphone [1]. Thus, there's a need to perform the smartphone forensics analysis to retrieve and analysed the potentially great amounts and extremely valuable information on these devices. This paper investigates a wealth of personal and sensitive data by types of digital information as evidence and conducted forensic analysis on a popular smartphone Samsung Galaxy Note III. The standard approach applied to extract information from smartphone through physical acquisition and analysis using Cellebrite UFED. The results are presented to demonstrate the smartphone as a goldmine for investigators and as sources of digital evidence. Furthermore this research also presents the forensic tool and techniques for acquiring and examining digital evidence on this device. The evidence discovered include files, contacts, events of smartphone and social network data storage and location. The smartphone examined produced abundant user information and in total 98,127 artefacts were recovered. Performing the extraction and analysis of digital evidence over smartphone activities show the possibility of identifying potential suspects that could assist the forensic investigators in crime investigations.

SQL injection is one of well-known web application vulnerabilities. SQL injection is a type of attack which attacker attempts to insert malicious SQL query through none sanitized variables into the web application. Consequently web application will concatenate the variable with the legitimate query and will send it to the database for execution. In result of a successful SQL injection attack, the attacker can read from the database or modify entities of the database (Insert, Delete, Update). Currently different types of defense systems are available to defeat this vulnerability. However some of these techniques needs to stop the existence web application and patch the vulnerability, and since this process might be time consuming, it is not very practical for companies to stop their online services. To address this problem we proposed a model which can generally patch the SQL injection vulnerability. The model is not dependent on the language which the web application is written in and the amount of necessary changes in the application is low. The model can be implemented as a library which can be include in the vulnerable web application by calling one line of code.

While using internet for proposing online services is increasing every day, security threats in the web also increased dramatically. One of the most serious and dangerous web application vulnerabilities is SQL injection. SQL injection attack took place by inserting a portion of malicious SQL query through a non-validated input from the user into the legitimate query statement. Consequently database management system will execute these commands and it leads to SQL injection. A successful SQL injection attack interfere Confidentiality, Integrity and availability of information in the database. Based on the statistical researches this type of attack had a high impact on business. Finding the proper solution to stop or mitigate the SQL injection is necessary. To address this problem security researchers introduce different techniques to develop secure codes, prevent SQL injection attacks and detect them. In this paper we present a comprehensive review of different types of SQL injection detection and prevention techniques. We criticize strengths and weaknesses of each technique. Such a structural classification would further help other researchers to choose the right technique for the further studies.

Information Technology (IT) governance has risen in importance in recent years, driven by various trends in IT development. With rapid growth in the country and the globalization of the IT sector, there is growing interest in IT governance in Malaysia. This study aims to explore whether IT practitioners with different job functions, education levels, education areas of specialization, certifications and experience levels have different perceptions of IT governance effectiveness in their organization. The results reveal differences in perceived IT governance effectiveness between different job function groups, but not between groups with different education levels, certification or experience levels. The findings for education area of specialization are not conclusive. The findings of this study will help IT managers to identify areas of focus to maximize effectiveness of IT governance initiatives through their IT staff. The implications of the findings are discussed at the end of the paper.

The integrity and authenticity of digital images have become more important in past few years with the fast improvement of digital technologies. The integrity of digital images can be achieved by using digital watermarking. In this paper we proposed an efficient image tamper detection method using 3 LSB (last significant bit) watermarking technique. In the proposed algorithm a 12-bit watermark created from each block of host image will embed to last three significant bit of each block. Our proposed method improved Chaluvadi and Prasad's tamper detection rate by 40 percent. To evaluate the proposed method, we performed different types of tamper attacks and demonstrated the result in this paper. The experimental result clearly proved the efficiency of our proposed method.

Beside all technical and nontechnical issues that e-learning has it seem the security issues are the major concern. The security issues can be breakdown to Confidentiality, Integrity and Availability (CIA). These issues provide reliable e-learning system to raise user satisfaction. One of the issues to implement CIA on e-learning system is content security. Watermarking is a method to provide authentication and copyright protection on e-learning content to avoid of any tampering or changes on contents. This paper proposed two watermarks on content to provide authentication.