Logfile-Driven Risk Assessment of Security Threats in LMSs Using Fuzzy Logic

References

[1] MANNANE Nada, BENCHARHI Youssef, BOULAFDOUR Brahim, REGRAGUI Boubker, Survey: Risk Assessment Models for Cloud Computing: Evaluation Criteria, 3rd International Conference of Cloud Computing Technologies and Applications (CloudTech) ,2017, IEEE, pp.1-5. https://ieeexplore.ieee.org/document/8284712

[2] Ishraga Mohamed Ahmed Khogali, Prof. Hany Ammar, “A Methodology for The Assessment of Security Risk in Cloud Computing”, Sudan University of Science and Technology. College of Graduate Studies, December 2018.

[3] Maniah, Benfano Soewito, Ford Lumban Gaol, Edi Abdurachman, Risk Assessment on Cloud Computing for The Learning System in the Education Environment, IEEE 2019 International Conference on Engineering Technology and Education (TALE) (2019). https://ieeexplore.ieee.org/document/9225941

[4] Mouna Jouini, Latifa Ben Arfa Rabai, A Security Risk Management Model for Cloud Computing Systems: InfrastructureAs a Service, Springer International Publishing AG, 2017,pp.594-608. https://link.springer.com/chapter/10.1007/978-3-319-72389-1_47

[5] Vusumuzi Malele, “Cybersecurity Cloud-Based Online Learning: A Literature Review Approach”, Journal of Information Systems and Informatics, December 2023. https://journal-isi.org/index.php/isi/article/view/583

[6] Jun.Liu and Zuhua Guo, Research On Cloud Security Risk Assessment Based on Fuzzy Entropy Weight Model, Advanced Science and Technology Letters Vol.139 (EEC 2016), pp.390-395, 2016.

[7] Paramita Chatterjee, Rajesh Bose, Subhasish Banerjee and Sandip Roy, Enhancing Data Security of Cloud Based LMS, Springer International Publishing, 25 February 2023, Volume 130, pages 1123–1139 https://link.springer.com/article/10.1007/s11277-023-10323-5

[8] Erdal Cayirci, Alexandr Garaga, Anderson Santana and Yves Roudier, A Cloud Adoption Risk Assessment Model , In Proceedings of the IEEE/ACM 7th International Conference on Utility and Cloud Computing, 2014.  https://ieeexplore.ieee.org/document/7027615

[9] Nada Ahmed and Ajith Abraham, Modeling Security Risk Factors in A Cloud Computing Environment, Journal of Information Assurance and Security, ISSN 1554-1010 Volume 8 (2013) pp. 279-289. http://ajith.softcomputing.net/jias2.pdf

[10] A.Amini, N.Jamil, A.R. Ahmad and H.Sulaiman, A Fuzzy Logic Based Risk Assessment Approach for Evaluating AND Prioritizing Risks in Cloud Computing Environment, Springer International Publishing AG, Volume 5, 2018, Pages 650-659. https://irepository.uniten.edu.my/entities/publication/2b708165-b1bc-4cc1-bcc0-926224746873

[11] Yogeshwaran Sivasubramanian, Syed Zubair Ahmed and Ved Prakash Mishra, Risk Assessment for Cloud Computing, International Research Journal of Electronics & Computer Engineering (ISSN Online: 2412-4370), June 2017. https://www.researchgate.net/publication/318060716_Risk_Assessment_for_Cloud_Computing

[12] Preecha Pangsuban, Prachyanun Nilsook and Panita Wannapiroon, Systems Analysis of Risk Assessment for Moodle Learning in A LAMP Environment From Log Files, In Proceedings of the the Sixth TCU International e-Learning Conference, July 2015. https://www.slideshare.net/slideshow/systems-analysis-of-risk-assessment-for-moodle-learning-in-a-lamp-environment-from-log-files/51021976#2

[13] Hina Abrar, Syed Jawad Hussain, Junaid Chaudhry, Kashif Saleem, Mehmet A. Orgun and Jalal Al- Muhtadi, Craig Valli , Risk Analysis of Cloud Sourcing in Healthcare and Public Health Industry ,IEEE , February 2018. https://ieeexplore.ieee.org/document/9447848

[14] Muhammad Zulkifl Hasan , Muhammad Zunnurain Hussain, Zaima Mubarak, Adeel Ahmad Siddiqui, Ali Moiz Qureshi and Imran Ismail, Data Security and Integrity in Cloud Computing, 2023 International Conference for Advancement in Technology (ICONAT) Goa, India. Jan 24-26, 2023. https://www.researchgate.net/publication/369773592_Data_security_and_Integrity_in_Cloud_Computing

[15] Gunnar Wahlgren and Stewart Kowalski, IT Security Risk Management Model for Cloud Computing: A Need for a New Escalation Approach, International Journal of E-Entrepreneurship and Innovation, 4(4), 1-19, October-December 2013. https://www.igi-global.com/gateway/article/106896

[16] Maniah , Edi Abdurachmanb, Ford Lumban Gaol, Benfano Soewito, Survey on Threats and Risks in The Cloud Computing Environment, The Fifth Information Systems International Conference, 2019. https://www.sciencedirect.com/science/article/pii/S187705091931960X

[17] Alireza Shameli-Sendi and Mohamed Cheriet, Cloud Computing: A Risk Assessment Model, IEEE International Conference on Cloud Engineering, 2014. https://ieeexplore.ieee.org/document/6903468

[18] Rasim Alguliyev and Fargana Abdullayeva, Development of Fuzzy Risk Calculation Method for A Dynamic Federation of Clouds, Intelligent Information Management, 2015, 7, 230-241. https://www.scirp.org/journal/paperabs?paperid=58377

[19] Intan Sorfina binti Mohd Fadhil, Nurul Batrisyia binti Mohd Nizar and Raudatul Jannah binti Rostam, Security and Privacy Issues in Cloud Computing, TechRxiv Powered by IEEE, 14-06-2023. https://www.techrxiv.org/doi/full/10.36227/techrxiv.23506905.v1

[20] Zoltán Balogh and Milan Tur

[21] áni, Possibilities of Modelling Web-Based Education Using IF-THEN Rules and Fuzzy Petri Nets in LMS, Conference Paper in Communications in Computer and Information Science, November 2011. https://link.springer.com/chapter/10.1007/978-3-642-25327-0_9

[22] Esteban Vázquez-Cano, M.ª Luisa Sevillano García, Analysis of Risks in A Learning Management System: A Case Study in the Spanish National University of Distance Education (UNED), © NAER New Approaches in Educational Research, 2015. https://link.springer.com/article/10.7821/naer.2015.1.107

[23] Rabia Latif, Haider Abbas, Saïd Assar, Qasim Ali, Cloud Computing Risk Assessment: A Systematic Literature Review, Future Information Technology: FutureTech 2013, 276, Springer, pp.285- 295, 2014, Lecture Notes in Electrical Engineering, 978-3-642-40860-1. 10.1007/978-3-642-40861-8_42. Hal-02397600, 6 Dsec 2019. https://link.springer.com/chapter/10.1007/978-3-642-40861-8_42

[24] Mona Soleymani, Navid Abapour, Elham Taghizadeh, Safieh Siadat and Rasoul Karkehabadi, Fuzzy Rule-Based Trust Management Model for The Security of Cloud Computing, Hindawi Mathematical Problems in Engineering Volume 2021, Article ID 6629449, 14 pages, 15 June 2021. https://onlinelibrary.wiley.com/doi/epdf/10.1155/2021/6629449

[25] Colleting the Log files indicating risk factors

[26] Fuzzification for Risk Assessment

[27] Evaluation using Rule Based Fuzzy Method and Defuzzification

[28] Extracting and Preprocessing data

[29] Identify risk factors

[30] Risk Level output

[31] Calculation for risk factors

[32] Colleting the Log files indicating risk factors

[33] 39:LMNYZ\hijl‡‰º»½ÛÝ ñâÖñǼ²¦™²¦Š|sgsg|sgsXLLh^~ CJOJQJaJh^~ h=°CJOJQJaJh^~ h^~ 6�OJQJh“q6�OJQJh^~ h^~ 6�H*OJQJh^~ OJQJ^J_HUo(‚�h^~ hÖ~6OJPJQJh^~ hÖ~6H*OJQJhÖ~6OJPJQJh^~ h^~ OJQJhføh“qCJ(OJQJaJ(hÇZ,CJ(OJQJaJ(h“qh,{ CJ(OJQJaJ(h“qh“qCJ(OJQJaJ(MNj» [Some characters in this reference could not be displayed correctly — please refer to the published PDF for the full reference.]

[34] [Some characters in this reference could not be displayed correctly — please refer to the published PDF for the full reference.]

[35] ñß˲™²™²²™²²²€€²hM>>hÖ~6h^~ CJOJQJaJ4h¸hÒhÇZ,5�6�CJOJQJ\�]�_HUaJmH HsH H.h<qP5�6�CJOJQJ\�]�_HUaJmH HsH H1hÖ~6hÖ~65�6�CJOJQJ\�_HUaJmH HsH H1hÖ~6h,{ 5�6�CJOJQJ\�_HUaJmH HsH H1hÖ~6h<qP5�6�CJOJQJ\�_HUaJmH HsH H&hÖ~6h^~ 5�6�CJOJPJQJaJ"hÖ~6h^~ 5�6�CJOJQJaJh^~ h˜gCJOJQJaJÿ [Some characters in this reference could not be displayed correctly — please refer to the published PDF for the full reference.]

@article{1706612,
      author = {Moe Moe San, Khin May Win},
      title = {Logfile-Driven Risk Assessment of Security Threats in LMSs Using Fuzzy Logic},
      journal = {Iconic Research And Engineering Journals},
      year = {2024},
      volume = {8},
      number = {5},
      pages = {618-628},
      issn = {2456-8880},
      url = {https://www.irejournals.com/formatedpaper/1706612.pdf},
      abstract = {The rapid expansion of online Learning Management Systems (LMS) has heightened the need for robust security mechanisms to mitigate various risks. This paper presents a fuzzy logic-based framework for assessing security threats in online LMS environments, utilizing logfile data as input. The system extracts logfiles from the LMS server, preprocesses them into a structured CSV format, and identifies key risk factors, such as login failure attempts, suspicious IP addresses, brute force attacks, and unauthorized access attempts. These risk factors are then quantified to serve as crisp input values for a fuzzy inference system (FIS). The core of the proposed approach involves fuzzification of the identified risk factors, applying a set of 20 predefined fuzzy rules based on security principles. These rules are employed within a rule-based fuzzy method to classify the severity of risks. The system defuzzifies the output to generate a final risk assessment categorized into four levels: low, medium, high, and critical. This real-time risk classification enables administrators to quickly identify and respond to security threats in a proactive manner.},
      keywords = {Fuzzy Logic, Risk Assessment, Security, Learning Management System},
      month = {November},
  }