Search

Honeypots have become invaluable tools in the field of cybersecurity, allowing researchers to gain insights into attacker behaviour, collect data on malicious activities, and develop effective defence strategies. Traditionally, honeypots relied on rule-based approaches or signature-based detection to identify and categorise attacks. However, with the growing complexity and diversity of cyber threats, these methods often struggle to keep pace with evolving attack techniques. Modern honeypots, such as T-Pot, have become multi-faceted systems that provide researchers with a wealth of data. They could emulate different vulnerabilities and services, thus attracting a wide array of cyberattacks. This ability to simulate real-world systems and networks allowed for a detailed analysis of attack methodologies and helped to understand the evolving nature of cyber threats. As attacks became more sophisticated, so did the strategies to combat them. This included understanding the landscape of cyber threats, anticipating potential vulnerabilities, and staying ahead of the attackers. Thus, this project aims to implement a complex honeypot system with capabilities to detect and prevent cyberattacks. The project will involve designing the honeypot infrastructure, collecting data on attacks, integrating the model into the honeypot system for real-time analysis, generating reports and alerts based on the analysis, and continuously improving the system's defences. The tests revealed that honeypots can perform real cyberattacks, as well as detect and warn about threats. This project used Nmap, Hydra, and Hping3 to pretend to be attackers and show that the honeypot could fake network resources and attract them, which makes it a smart network intrusion detection system. There was a lot of experimental data on how well the honeypot could find things. Each test checked how well the honeypot could find threats on the network. In conclusion, these tests proved that the honeypot's methods for finding threats are correct, which means it can indeed find network breaches.

Badminton is a thrilling and competitive sport that has gained popularity across the world, attracting players of all ages. The sport fosters social interaction among players which helps create friendships and engagement within a community. Although many local sport centres provide badminton courts, some facilities lack a systematic way to handle bookings. The booking process can be frustrating and time-consuming. This may result in delayed replies, miscommunication and conflicting booking information. In this paper, we present iSmashON, a mobile application developed to simplify the booking process by providing systematic way of booking badminton courts, chat with other players and manage bookings. It features real-time availability updates and personalized notifications. The development encompasses four phases which are requirement analysis, design and development, testing and refinement. The evaluation of the developed mobile application is done using Technology Acceptance Model (TAM) that considers four components which are Perceived Ease of Use (PEU), Perceived Usefulness (PU), Attitude (ATT) and Behavioural Intention (BI). Questionnaire with 13 questions is prepared and distributed over 30 respondents with at least one-year experience of playing badminton. Results from the TAM evaluation shows a favourable attitude among respondents towards using the mobile application as a medium for booking badminton courts. This is drawn by the highest mean score obtained from ATT component. It is believed that the iSmashON application is expected to enhance the booking experience, providing more efficient and user-friendly process that will be benefited by badminton community.

Due to the prevalence of security issues and cyberattacks, cybersecurity is crucial in today's environment. Malware has also evolved significantly over the past few years. With the advancement of malware analysis, Machine Learning (ML) is increasingly being used to detect malware. This study's major objective is to compare the best-supervised ML algorithms for malware detection based on detection accuracy. This study includes the scripting and development of supervised ML techniques such as Decision Tree (DT), K-Nearest Neighbors (KNN), Naive Bayes, Random Forest, and Neural Networks. This study was solely concerned with the Windows malware dataset. The malware classification was determined by testing and training the supervised ML algorithms using the extracted features from the malware dataset. Then, the percentage of detection accuracy was used to compare the detection performance of all five algorithms. The detection accuracy is calculated using the confusion matrix, which includes the False Positive Rate (FPR), the True Positive Rate (TPR), and the False Negative Rate (FNR). The results indicated that the Decision Tree and Random Forest algorithms provided the best detection accuracy at 96%, followed by the K-NN algorithm at 95%. To improve the detection accuracy for future research, it is suggested that the malware dataset be enhanced using several architectures, such as Linux and Android, and use additional supervised and unsupervised machine learning algorithms.

Living in a world of hectic schedule between work and personal life has made many individuals difficult to find time for exercising and keep track their fitness progress. Memberships for gym nowadays is costly and even hiring a personal trainer is not everyone can afford. Due to these challenges, this paper introduces a fitness tracker mobile application named iCalFit that assists users in managing their calisthenics exercises routine and encourage individuals to engage in exercises despite their constrained time and resources. The application provides guides for calisthenics exercises, tracking users’ exercises, its calorie loss and reminders. Development methodology involved three main phases which are requirement identification, design and development and testing. The assessment of the mobile application is based on technology acceptance model, that considers three main components: Intention of Use (IU), Perceive Usefulness (PU) and Attitude (A). The questionnaire covers 15 questions distributed over to 31 randomly selected participants. PU had gained highest score out of three components, proven that the mobile application developed is efficient and capable of assisting user during exercise routine. The development of iCalFit is believed that it can solve individuals with limited fitness opportunities and drives for a healthy lifestyle.

Nowadays, computer networks are used in education, sports, business, transportation, manufacturing, and more. Thus, it makes the network more complex and harder to monitor, especially in terms of performance. The implementation of network monitoring software presents a viable solution for resolving this issue. It is because network monitoring software can monitor behaviours, provide alertness for any failing component of a computer network, and measure performance such as CPU usage, bandwidth, throughput, response time, and packet loss. However, network monitoring software has common problems, such as being hard to set up and making it hard to find the best network monitoring that fits the requirements. Thus, this study aims to identify network monitoring software that is easy to configure and analyse the performance of network monitoring software in terms of response time and packet loss. The study comprises the implementation of open-source network monitoring software, including PRTG, OpManager, Zabbix, and LibreNMS. The two experiments were conducted by launching TCP attacks for response time and UDP attacks for packet loss. Both attacks consisted of four scenarios: 15 threads, 30 threads, 45 threads, and 60 threads. As a result, PRTG offers a simpler installation procedure and easier configuration options, with a straightforward and attractive Graphical User Interface (GUI) that allows for all configurations to be conveniently performed directly through the interface. For monitoring websites, users need to add the device that was targeted by the website and choose an HTTP sensor for response time and PING for packet loss. The evaluation was based on the lowest average response time and consistency in the detection of packet loss. Consequently, Zabbix demonstrates the highest level of responsiveness about web services, which have the lowest average response time and consistently exhibit the lowest occurrence of packet loss.

Wireless Sensor Network (WSN) takes a major part in the world of technology and everyday lives by implementing Internet of Things (IoT) sensors into many kinds of environment such as agricultural area. Many farmers had applied WSN to help them to ease the tasks of tracking and collecting the important data status of their farms and greenhouses in order to maintain its ideal temperature, humidity and lights exposure. Despite these advantages, the WSN security issues could be questioned due to the possibility of being infected by the Distributed Denial of Service (DDoS) from the attackers. Sinkhole attack is the most common DDoS attack that happened in the agriculture environment WSN by sending a fake fastest route to the sensor nodes in the system. Therefore, this project has proposed an Intrusion Detection System (IDS) to detect the sinkhole attacks in the network of agriculture based WSN. The project ran with three simulations of network topologies to show the comparison based on the network traffic performance. The simulations consist of attack-free network, a network with sinkhole attack and IDS in the malicious sinkhole network. The main simulator for the study was Cooja Network Simulator, which was used to conduct all three simulations, while Wireshark was utilised to capture network traffic performance. For every simulation, 20 sensor nodes were implemented due to the facts that the number of the nodes are majorly and ideally used in real life environment of agriculture area. The findings showed that by implementing IDS in the agriculture WSN will gives better results in network traffic performances comparing to the attack-free network and sinkhole network without IDS. Thus, it proved that the proposed IDS could detect the network when uncommon behaviour appeared in the network topologies.

Network automation has evolved into a solution that emphasizes efficiency in all areas. Furthermore, communication and computer networks rely on a platform that provides the necessary technological infrastructure for packet transfer through the Internet using routing protocols. The Enhanced Interior Gateway Routing Protocol (EIGRP) is a hybrid routing protocol that combines the properties of both distance-vector and link-state routing methods. The traditional technique to configure EIGRP is inefficient and requires repeated processes compared to the network automation concept. Network automation helps to assist network administrators in automating and verifying the EIGRP configuration using scripting. This paper implemented network automation using Ansible to configure EIGRP routing and advanced configuration in the GNS3 environment. This study is focused on automated scripting to configure IP Addresses to the interfaces, EIGRP routing protocol, a default static route and advanced EIGRP configurations. Ansible ran the scripting on Network Automation Docker and pushed the configurations to the routers. The network automation docker communicated with other routers via SSH. In the testing phase, the running configuration between the traditional approach and automation scripting in the Ansible playbook was compared to verify EIGRP configurations' accuracy. The findings show that Ansible has successfully deployed the configuration to the routers with no errors. Ansible can help network administrators minimized human mistakes, reduce time-consuming and enable device visibility across the network environment. Implementing EIGRP authentication and hardening process can enhance the network security level for future study.

Virtual Private Network (VPN) is a private network that uses public network to tunnel the connection from the users’ end to the VPN server. VPN allows users to create a secure connection to another network over the public Internet. VPNs can be used to shield users’ browsing activity and encrypts data transmitted over the network to prevent sniffing attack. Nowadays, users can either pay a premium price for a good VPN service or risk their privacy using free browser-based VPN. Thus, SafeSearch is developed to address these issues in mind. With SafeSearch, users will not need to fork out a lot of money for premium VPN subscription services or expose themselves to targeted advertising when utilising free browser-based VPN. In this study, open VPN protocol was used to create the VPN server on a microcomputer called Raspberry Pi. The software used was mostly open-source except for the VPN client. Obfuscation technique was used to hide VPN traffic by disguising it as just another normal Internet traffic against Deep Packet Inspection when passing through firewall. After the VPN server was established, tests were carried out to evaluate the functionality and reliability of the VPN server in “real-world” environment. The tests conducted were network restriction penetration assessment, network performance and user acceptance test. Penetration assessment result showed that SafeSearch is capable of bypassing web filtering and deep packet inspection. Network performance during SafeSearch connection has slight latency and bandwidth decline, although it is not overly affected. The outcome of the user acceptance test was positive as the majority of participants of the study were confident that SafeSearch can secure their connection and protect their privacy when browsing the web. To conclude, both objectives of this project were fully achieved and the scope of study was followed thoroughly.

Technology has advanced to the point that it can assist people in their daily lives. Human beings may benefit from this development in a variety of ways. Progress in river water monitoring is also one of them. There are many advantages in improving the river water monitoring system. The objective of this project is to develop an automated system for monitoring river water levels and quality with push notification features. Internet of Things (IoT) was implemented in this research by using NodeMCU as a microcontroller to connect both ultrasonic sensors and pH sensors to the Internet. An ultrasonic sensor is used to read the water level, and a pH sensor is used to read the water pH values. The results show the successful output from all of 10 time attempts to obtain more accurate test results. The results will be averaged to be analysed and concluded from the test. All the tests include testing for the accuracy of the ultrasonic sensor, the accuracy of the pH sensor, and the performance of the internet connection using integrated Wi-Fi module in NodeMCU microcontroller. The system test also shows that it performs perfectly with the requirement needed to send the real-time status of the water level, water quality and an alert to the user using the Telegram Bot API. This research can help to increase the level of awareness of the river water monitoring system. This research was done by looking at people's problems in the vicinity of the river area by producing a system tool that helps to monitor the river water in real-time status.

Continuous Heart disease and blood pressure are diseases that demand immediate care. Heart disease is currently one of the world's most fatal illnesses, as it always results in death. Pulse Oximeter Reading must be continuously measured, analyzed, and monitored in real-time to ensure that relevant measures may be taken when necessary. In this paper, we present a model that employs IoT to inform users about the incidence of heart disease and high blood pressure in their daily health. The Remote Patient Monitoring System for Covid-19 Patients Based on Oximeter Reading Sensor uses the Web Server ESP32 MAX30100 to replace the present Oximeter Reading monitoring and public broadcasting approaches. In addition, the NodeMCU ESP8266 Wi-Fi module allows the devices to save data in the cloud when connected to the Internet. Also, it is possible to construct effective real-time Heart Rate and Oxygen Level (IoT) monitoring. The findings indicated that users might access and monitor Heart rate and oxygen level via the Web Server regardless of their location in the monitoring region. Furthermore, providing an LCD is incredibly beneficial as it can show readings and ensure the users receive Pulse Oximeter Reading monitoring information when the device is in operation.

Storeroom is the most important storage area and it must be kept secured as it will be used by college students to keep their goods during semester break. They need to clear up the room before leaving the campus. To impose the security measure of storeroom, college management unit require students that are using the storeroom to write details and particulars before checking in and out the storeroom. This paper presents a development of Storeroom Management Module (SMM) for integration with Attendance Record for College Activities (ARCA) system. The module offers easy process when college staffs and students are dealing with storeroom. Module development involved three main phases which are feasibility study, design and development and module testing. Four components that comprises 17 questionnaires were included in technology acceptance model for module testing. Out of four components tested, component perceived user satisfaction (PUS) had received the highest mean score. This indicated that the developed SMM satisfied users in dealing with storeroom management module.

VoIP application usage has increased from time to time and makes our daily life more convenient. VoIP application has features to make a phone call, send a text message and share the file through the apps for free. However, most of the users did not seem aware of VoIP security features such as authentication ability, password encryption ability, or voice or audio and text communication encryption ability. It is essential to ensure the VoIP used is secure from password decrypter and eavesdrops the user conversation. Thus, the first objective of this research was to study and investigate VoIP application consist of Kakao Talk, Telegram, Facebook Messenger and WhatsApp for both Android and web application. The second objective was to evaluate the four VoIP application identified based on authentication requirement, password encryption, voice or audio encryption communication, and text encryption communication. There were two mobile phones used. One acts as a client and a personal computer act as an attacker. Wireshark and packet capture were run in personal computer and mobile phone to monitoring and scanning the network traffic while both devices connected in the same WLAN. The experiment implements MITM, interception, and sniffing attacks. This research project has identified Facebook Messenger and WhatsApp web application do not provide secure password ability.

The world is becoming increasingly dependent on online services. To offer a service, a network must be in good health and free of any attacks. An attack happens when the confidentiality, integrity, or availability of a service is compromised. Network monitoring is a solution capable of maintaining these network devices from their usage up to detecting attacks. A denial of service (DoS) attack on a network can affect the network performance and can cause serious damage. Zabbix is an open-source network monitoring tool that is versatile and can be used to monitor hosts on a network. The purpose of this project is to detect possible ping and SYN flooding attempts on a server and send alerts to the administrator via Telegram. This project uses Zabbix to monitor a server for potential ping and SYN flooding attacks. Tcpdump is used to log the pings received by the server. When the server continuously receives 10 or more pings per second, an alert will be automatically generated and sent to the administrator via Telegram. Similarly, a SYN flood attack is detected by using netstat’s SYN_RECV flags. When the server continuously receives more than 10 SYN packets without an ACK packet, Zabbix will generate alerts that are sent via Telegram and update the dashboard to show a problem. Zabbix was able to accurately detect all ping flooding attempts on the server. However, SYN flooding attacks were not as accurately detected. The use of Zabbix can be implemented in small businesses or networks for an automated monitoring system. Future work can include more DDoS attacks and adding countermeasure actions when detecting attacks by blocking the IP or port associated with the attack. SYN flooding detection needs to be improved because only two out of three attacks were able to be caught.

Photography business become more popular and trending among the most of people who likes photography. Photography Service System was developed to help photography companies to deliver photos and videos to their customers. The use of the system have its advantages such as easiness of accessing data and also make users share the data faster. The purpose of the system was developed to ease the daily works and can be used frequently by photography companies as a method to send photos and videos to their customers. A penetration testing was conducted in order to test the security performance by conducting four security attacks which were Denial of Service (DoS), SQL injection, Cross Site Scripting, and sniffing password. The purpose of these attacks were conducted is to testing and finding the vulnerabilities of the system because the system deals with the customers’ privacy data which is the photos and the videos owned by the customers. This is crucial to secure a system where the first step taken as a prevention to introduce the system to the public, vulnerability assessments was performed to determine the weaknesses of the system. Scanning and vulnerability assessment are done using tools which is Vega Scanning Tool, Wireshark, and Low Orbit Ion Cannon (LOIC). All results are collected and have been analyze. As a summary of the result, it shows that the system are vulnerable to DoS attack, SQL injection attack, cross site scripting and also password sniffing.

A viable inventory management system is crucial to an organization, especially those who deals with stock going in and out of their premise. The system should cover several aspects in managing the collection of the available stocks to ensure an efficiency. An inventory management system comprises crucial functions that the goal is to produce accurate information – a minor mis-information could lead to a wrong decision making. Improper system design could lead to the problem; thus, the design of this inventory system is supported by .NET Model View Controller (MVC) Framework as its backbone. The .NET MVC Framework is one of the most widely used framework that is written in C# programming language. By utilizing the MVC Framework, its three main components; data model (Model), user interface (View), and business logic (Controller) can be managed separately without affecting the entire system. Thus, the risk of the system functions to produce inaccurate information is reduced significantly. Moreover, MVC also supports scalability, extend-ability and maintainability which is a very important aspect for an information system with growing needs of new functions.

Trojan attacks are the most common and serious threat to network users. It is a program that appears to be useful program but actually harmful one. It is difficult to detect Trojan attacks because it uses special techniques to conceal its activities from antiviruses and users. Thus, this research intends to retrieve and investigate of Trojan attacks on the network using digital forensic tools namely Wireshark, FTK Imager and Volatility. Two types of Trojan attacks called Remote Access Trojan (RAT) and HTTP Trojan (HT) are created and experimented in this research. These Trojans are sent to the targeted computer in the network through email. Wireshark is used to capture the network packets and then analyze the suspicious packets. FTK Imager is used to capture RAM data on targeted computer. Volatility is used to analyze the captured RAM data and extract suspicious process. This suspicious process is dumped into file and scanned using the Avast antivirus to check whether this process is running Trojan or otherwise. This research may benefit and contribute to the computer security and forensic domain. It can be extends to investigate other Trojan attacks such as Zeus, SubSeven or Back Orifice by using the same digital forensic tools.

Student portal is an official website of UiTM. The function of student portal is to spread the new information or activities for the current semester. The examples of information are date of course registration, date of validation, date of result final exam, faculty or club activities. From my survey, I found that it is hard to get new information. They have to log in into student portal to enable them to get the latest news. To solve this problem, an Android Mobile for Students Activities Notification System was being created using Android platform. This project was developed using hardware and software. The hardware is using mobile phone with Android operating system and personal computer for the server. Android SDK (System Development Kit) was used to develop the Android Mobile for Students Activities Notification System that compatible for Android operating system. These projects were conduct usability test and transmission of update information from server to client. As long as student is connected to the Internet, they can get the notification of new information that is being update. This project involve with server client communication. This project is important because it helps student to get or receive new update information without have to log in into student portal.