Corporate system of information and cybersecurity

A network-based security information system for safeguarding computer-based test platforms in organizational environments

Computer-based testing (CBT) platforms have transformed education and certification by enabling scalable, efficient, and accessible examinations. However, these systems face significant cybersecurity risks, including unauthorized access, denial-of-service (DoS) attacks, and digital cheating, which threaten fairness and reliability. This study proposes a network-based security information system (NBSIS) designed specifically for CBT environments. The framework integrates layered defense, including pfSense firewalls (FW), Snort intrusion detection, Splunk security information and event management (SIEM), and artificial intelligence (AI)-powered analytics, into a unified architecture. A human-centered dashboard ensures usability for non-technical exam administrators, providing real-time alerts and intuitive controls. Validation through simulated attack scenarios demonstrated strong resilience, with high detection accuracy, reduced false positives, and rapid response times. Comparative analysis against intrusion detection system (IDS)-only and SIEM-only systems confirmed superior performance. The findings highlight NBSIS as a robust, scalable, and adaptive solution that safeguards exam integrity while remaining practical for diverse organizational contexts. This research contributes to computer science by advancing secure architecture, applying AI-driven anomaly detection, and integrating human-computer interaction principles into cybersecurity for education.

IN CLOUD AND

Penetration Testing in System Security

This review's results show that penetration testing is an important part of improving cybersecurity because it helps identify weaknesses before they become problems and reduces risk.

Exploration of Access Control Automation in Linux Environments: Cybersecurity Perspective

This paper addresses the automation of access control in Linux environments from a cybersecurity perspective, highlighting the critical need for secure and effective access control systems to mitigate insider threats. The study tackles the challenges associated with manual user access control systems and user privilege management. Using a methodological approach, the study developed an automated script in a Linux environment, leveraging its multi-user design and command line control. The script, written in Python, integrates Linux command utilities to manage user permissions dynamically. It targets specific cyberattacks such as unauthorized access, privilege escalation, and brute force attacks, enhancing overall organizational security. The criteria for defining predefined time frames for user access include user roles, security clearance levels, the sensitivity of the accessed data, and compliance with organizational policies and regulatory requirements. By implementing this automated system, the study aims to reduce insider threats, improve the efficiency of user privilege management, and demonstrate the scalability and flexibility of such systems in meeting various infrastructure needs. The script running time was averaged at 0.5 seconds per execution, with no execution errors observed across 50 test runs. Resource utilization was monitored, showing an average CPU usage of 1.5% and memory usage of 10MB during script execution. These benchmarks substantiate the claims of excellent script performance, error-free execution, and efficient resource utilization. The implementation of this automated access control system provides a robust solution for enhancing security in Linux environments.

Trends in Cyber-Physical Security for Smart Factories

By Industry 4.0 has resulted in the prevalence of smart factories, in which there is a close relationship between computation, communication, and physical processes through cyber-physical systems (CPS). Even though productivity, flexibility, and efficiency are improved under this integration, new security challenges that have never been experienced previously and go beyond the traditional cybersecurity boundaries are created. Cyber-physical security (CPSec) is the provision of defensive of the cyber components, as well as physical processes against malicious attacks, failures, and system anomalies. The paper is a systematic and multifaceted review of the new trends in cyber-physical security of smart factories. It looks at the threat landscapes, attack vectors, architecture weaknesses, and intersection of the information technology (IT) and operational technology (OT) worlds. In addition, the article evaluates the innovative defense systems such as artificial intelligence-based intrusion detection systems, blockchain-based trust management systems, zero-trust-based architectures, and security validation using digital twins. An adaptable, resilient, and real-time threat response-focused layered security approach is suggested to smart manufacturing settings. Recent experimental data on the role of advanced CPSec strategies is presented based on the considerations of industrial case studies and simulations. Lastly, the paper identifies open research problems and future directions requirements in order to establish robust, scale up and smart cyber-physical security systems in next generation smart factories.

Cybersecurity Challenges and Centralized Monitoring Solutions for e-Governance in Zambia: A Literature Review

E-government digital platforms are often attacked by sophisticated cybersecurity threats because of the sensitive nature of the information and services they provide. The analysis finds that these systems have vulnerabilities due to fragmented security architectures, not enough skilled personnel, limited budgets, and reactive security approaches, particularly within developing countries such as Zambia. This study reviews existing research on cybersecurity challenges affecting e-government systems, focusing on Gov-ernment-to-Business (G2B) digital platforms in developing countries. It also examines established cyber-security frameworks, including Defence-in-Depth (DiD), NIST CSF, ISO/IEC 27001, and the Zero Trust model. The study also reviews the role of Centralized Security Monitoring Platforms (CSMPs) integrated with Intrusion Detection and Prevention Platforms (IDPPs) in improving threat visibility, event correla-tion, and coordinated incident response. A lightweight validation approach is carried out using a virtual-ized environment, which relies on open-source platforms such as pfSense, Suricata, and Wazuh to show how the centralization of monitoring increases situational awareness and correlates events to show the relevance of the proposed solution within a resource-constrained environment. The study further identi-fied some operational and technical challenges that affect the adoption of effective cybersecurity prac-tices within e-government infrastructures and highlights the importance of scalable, cost-effective, and integrated monitoring infrastructures to manage cybersecurity proactively in developing countries.