Search

Physics subjects are one of the most difficult materials for students to understand. According to the research that has been done, props are one of the answers to make it easier for students to understand physics lessons. Since most physical materials are directly related to everyday life, props serve as a practical medium to facilitate the learning process. Learning physics concepts is easier to understand by using props which we simulate based on real events. One of the materials in physics class is free-fall motion. In this material, when an object falls from a height and has no initial velocity, its falling velocity is calculated. In this study, we apply the Internet of Things (IoT) to the props of free fall material and by adding Ambrose's concepts namely practice and feedback, so that students can better understand the material of free-fall motion. By implementing IoT, the system can read, record, and evaluate the experimental activities performed by users, and users who already have an account can access it online through the website. The system was evaluated based on system functionality and accuracy generated by the system. Based on the test results, it was found that all functions included in the system were 100% working. Based on the three tests performed, the system achieved an average accuracy of 80%.

This paper considers danger level classification of Android applications based on permissions and vulnerabilities by using Naive Bayes (NB) algorithm in order to assist and inform users whether an application is safe to use or not. With the increasing development and use of Android, unfortunately, malicious software (malware) and malicious applications are also beginning to increase. Many methods have been proposed to protect Android, however, they are only able to detect or classify Android applications against malware based on permission. This kind of approach is still considered less effective, because there is no information in classifying the danger level of an Android application, be it malware or goodware. To overcome the problem, this research classifies the danger level into three categories namely, safe, suspicious, and dangerous. The accuracy obtained from this research is 97.2%. To our knowledge, this is the first and only work to use danger level classification of Android applications based on permissions and vulnerabilities.

Although Internet has become one of most important parts and mostly needed by societies, that does not mean Internet is a safe place to share sensitive data. One of many unsolved Internet attacks is key-logger which is used to steal victim's data such as passwords. Researchers have done a lot of research to overcome these attacks. However, the authentication system still lacks password complexities which can be compromised with short cracking time and limited generated passwords. Therefore, we proposed a virtual password method that has the following rules: i) has minimum and maximum limit of password and ii) the generated passwords are not limited only to letters, but also numbers and symbols. With those rules, by using Kaspersky Lab secure password measurement, the cracking time can be significantly increased to 9 centuries on the conficker botnet with 10 million cores of processors. Moreover, by using Password Meter the proposed method gets score of 171.

This paper proposes an architecture of Secure Shell (SSH) honeypot using port knocking and Intrusion Detection System (IDS) to learn the information about attacks on SSH service and determine proper security mechanisms to deal with the attacks. Rapid development of information technology is directly proportional to the number of attacks, destruction, and data theft of a system. SSH service has become one of the popular targets from the whole vulnerabilities which is existed. Attacks on SSH service have various characteristics. Therefore, it is required to learn these characteristics by typically utilizing honeypots so that proper mechanisms can be applied in the real servers. Various attempts to learn the attacks and mitigate them have been proposed, however, attacks on SSH service are kept occurring. This research proposes a different and effective strategy to deal with the SSH service attack. This is done by combining port knocking and IDS to make the server keeps the service on a closed port and open it under user demand by sending predefined port sequence as an authentication process to control the access to the server. In doing so, it is evident that port knocking is effective in protecting SSH service. The number of login attempts obtained by using our proposed method is zero.

Nowadays, the technology development makes a human can create a tool which is used to recognize an object and it becomes a popular technology device. It happens because this tool has an important role for interaction between a human and a computer. One example of this technology usage is to recognize a hand gesture for controlling a home automation system. The existing of this technology creates the change related to how the human controls any tools in a house and it also reduces the complexity including an effort when it is used for controlling. This feature is very useful, especially for elderly people who stay in independent living. This study is going to develop a controller prototype by using FAST (Features from Accelerated Segment Test) algorithm to detect hand gesture for operating the connected home devices. This controller uses an embedded system to translate a command which is created by using the hand gesture of senior captured by the cam for controlling the lamps. The lamps itself are represented as several tools in the house. The observation gives a result that the hand gesture is potential to be implemented as a command for controlling the proposed system prototype in the range which is not far than 1 meter with the percentage average recognition accuracy is almost 80%.

A Short Message Service (SMS) is a popular mechanism to communicate. However, for an important purpose, a mechanism to protect SMS messages is needed so the SMS messages cannot be easily read by entities who are not permitted to see. Keeping an authentication of messages, and ensuring messages are received by a right entity are also an important aspect. Maintaining confidentiality of messages, by combining symmetric and asymmetric scheme are used. The combination can be implemented by using the Advanced Encryption Standard (AES) and Elliptic Curve Diffie-Hellman (ECDH). Even so, there is a weakness while using ECDH protocol. It does not provide an authentication mechanism between entities. This means an authenticity and an integrity of messages are not fully protected. This research proposes a solution to maintain it by adding the Elliptic Curve Digital Signature algorithm (ECDSA). ECDSA is used to handle the authentication of key exchange.

Swap file has potentially interesting and rich source of digital evidences. Password, cryptographic key, private data and sensitive data can be found in the swap file. With a simple technique such as string matching, digital evidences can be easily found and identified. There is minimal research on swap file anti-forensics. We found that most of swap file anti-forensics techniques are still vulnerable to live acquisition. So, we propose 2 swap file anti-forensic technique: inject live swap file and fake swap file. Inject live swap file is created by injecting(flooding) fake data to live swap file using a custom script. Fake swap is created by manipulate swap file header then filling swap file with fake artefacts of our choosing. We perform this technique before user begins his/her usual activities. We able to implement Inject live swap file technique but with disadvantage of private and sensitive data leak. Making fake swap file is relatively easy and without data leak. Although these two approaches do not solve the problem of live acquisition, it could confuse, mislead and wasting examiner's time.

Acquisition data method on Mobile Device Forensics's activity divided into two method: physical and logical extraction where each of these method has their own advantages and disadvantages. On Unrooted Android Device that have limited privilege, Logical Extraction method is used to acquire data on the device. Technique on the Logical Extraction method to acquire the data include AFLogical, SDcard Imaging, Android Backup Analysis, and proprietary applications for mobile device forensics activity such as Oxygen-Forensics. These four technique has its own acquisition technique with different capability to capture the data on the device and different activity while the acquisition data is performed. Problem in using Logical Extraction on unrooted android device is choosing right technique for data acquisition that can be used for digital evidences. Because of that problem, it's necessary to analyze several techniques on Logical Extraction method by comparing quantity of data that can be acquired and how intrusive activities performed on the device to be able to determine better acquisition technique. Best technique is technique that can acquire enough data that needed as a digital evidence without damaging the integrity of the evidence itself. On the capability to capture the data, we found that Android Backup analysis is the best technique to capture application artifact, SDCard Imaging is the best technique to captured external memory data, and Commercial provider using Oxygen-forensics is the best technique to capture other system files data with limited privilege. Finally with proving the communication log on Steam apps, after comparing all technique in Logical Extraction in safetyness (rooting or install application activities) and data captured aspect, we found that using Android Backup Analysis technique is the best technique for unrooted without doing rooting activity or installing application because of Android Backup Analysis itself is analyze the backup that created from the phone from android debug bridge which the backup store some application data on the phone. We use Steam apps case study as our proof of concept.

One problem in biometric fingerprint technology is template protection. Template is an individual's digital reference extracted from biometric sample. The objective of template protection is to protect user biometric information. Basis idea of template protection is if an attacker able to get the template then the attacker will not be able to reverse template to obtain biometric information. Template protection also offer revocability for users. This research use modified Key Binding scheme and Random Triangle scheme to protect biometric template. The main advantage of our proposed design is alignment free. Performance of our Key Binding scheme is still very poor (EER = 30%). Nearest Neighbors Structure used for local matching in our Key Binding scheme still cannot replace alignment process. ECC and Hash module give a significant contribution to higher EER. Random Triangle Hashing (RTH) is successfully implemented with EER = 0.96%. This performance is better than the winner of FVC2004 (EER = 1.97%). We modified RTH in the transformation module (NNS) and evaluation score (Hamming distance).