Journal of Science and Technology on Information security
type: channel
description: About the Journal Edit About the JournalInformation Security Journal publishes a periodical academic, scientific, specialized journal in the field of information security named “Journal of Science and Technology on Information security”. The publication aims to create a forum to discuss scientific and technological issues in the field of information security, to support of researching science and technology in this field, and contribute to connecting research, trainning and applications deployment. The Journal of Science and Technology on Information Security - abbreviated name ISJ, with index ISSN 2615-9570 is a publication of Information Security Journal, Vietnam Government Information Security Commission. This is an academic, scientific, specialized magazine and is also a place to discuss scientific and technological issues in the field of information security, support scientific and technological research in this field, and contribute connecting research, training and application deployment. Helpful for leaders, managers, scientific and technical staff, teachers, students... The Journal of Science and Technology on Information Security has been published since 2015 with 2 issues/year (1 issue in Vietnamese and 1 issue in English). By 2022, the publication has increased the number of publications to 3 issues/year with 2 English issues (published in June and December) and 1 Vietnamese issue (published in September). From 2024, the Journal's installments will be published entirely in English. The Journal of Science and Technology on Information security in the field of Information Security is recognized as high quality according to Decision No. 22/QĐ-HĐGSNN of the State Council for Professorship (http://hdgsnn.gov.vn/tin-tuc/quyet-dinh-so-25-qd-hdgsnn-phe-duyet-danh-muc-tap-chi-khoa-hoc-duoc-tinh-diem-nam-2024_788/). According to The State Council for Professorship of Vietnam, the paper are counted 0.75 score by The Council for Professorship in Information Technolo…
publisher: Vietnam Government Information Security Commission
language: en
publication name: Journal of Science and Technology on Information security
issn: 2615-9570
copyright: Open Access Policy The Journal of Science and Technology on Information Security provides open access to its published articles to broaden opportunities for high-quality research findings to be available and widely disseminated free of charge, contributing to the greater exchange of knowledge. Open access statement: CTUJoS permits everyone to read, download, copy, distribute, print, search, or link to the full texts of the published articles without registration, price barriers, or asking for permission from the Journal or the author. Proposed Policy for Journals That Offer Delayed Open Access Authors who publish with this journal agree to the following terms: 1. Authors retain copyright and grant the journal right of first publication, with the work [SPECIFY PERIOD OF TIME] after publication simultaneously licensed under a Creative Commons Attribution License that allows others to share the work with an acknowledgement of the work's authorship and initial publication in this journal. 2. Authors are able to enter into separate, additional contractual arrangements for the non-exclusive distribution of the journal's published version of the work (e.g., post it to an institutional repository or publish it in a book), with an acknowledgement of its initial publication in this journal. 3. Authors are permitted and encouraged to post their work online (e.g., in institutional repositories or on their website) prior to and during the submission process, as it can lead to productive exchanges, as well as earlier and greater citation of published work (See The Effect of Open Access).
items: Throughput Optimization of the ASCON Lightweight Cryptographic Algorithm on IoT Devices
items: AI-Enhanced SQL Injection Detection Framework: A Novel Approach Combines LLMs with Traditional Fuzzing to Improve Web Application Vulnerability Detection
items: Weak Links in Smart Surveillance: An Empirical Security Evaluation of Evil Twin Attacks on IoT Cameras
items: Proposal of an End-to-End Encrypted Chat System with Digital Signature and Vietnamese Character Support Based on Elliptic Curve
items: A Blockchain-Based Chain of Custody for Digital Evidence: Design and Evaluation
items: Enhancing MITM Attack Detection Mechanism for ICS using LSTM-based Hybrid Ensemble Learning
items: Memory-Resident Malware Detection via a Hybrid Deep Learning Framework
items: FPGA-Based inline encryption bridge using AES-XTS for storage systems
items: Generating evasive payloads for assessing Web Application Firewalls with Reinforcement Learning and Pre-trained Language Models
items: Research on the Design and Development of a Secure Cold Wallet Device for Blockchain
items: A secure image steganography based on Hamming codes and image block complexity estimation using a zig-zag order
items: FedPC Cloud CPU Forecasting using Federated Learning and Periodicity-based Clustering
items: Federated Trust-Based Authentication for Secure Mobile Cloud Access
items: A Scalable Telegram-Based Botnet Framework for Stealthy Remote Command and Control
items: A Novel Approach for 1D-CNN Hyperparameter Optimization in IoT Attack Detection using Particle Swarm Optimization
items: An Efficient Framework for Multi-Class Malware Classification in Cloud Environments
items: A Combinational Model-Based APT Attack Detection Approach
items: Enhancing SPN ciphers: Dynamic substitution-key addition layers via binary block circulant matrices
items: Large-scale Android malware detection by integrating Blockchain and IPFS for secure virus signature distribution
items: Malware Analysis: A Perspective from Dynamic Symbolic Execution of Binary Code
items: Secure Implementation of Post-Quantum Cryptography
items: Detection of source code vulnerabilities using Nature language processing and deep graph network
items: Amplified Gradient Inversion Attacks on Federated Learning Frameworks
items: Proposed Optimized Hardware Implementation for the S-box of the PRESENT Algorithm Using Combinational Logic Circuits
items: Paradigms in Security Protocol Verification: A Multi-Tool Analysis
items: Intrusion Detection Using Federated Learning in Non-IID Data Environments
items: A Reversible Data Hiding Scheme with Security Enhancement Using a Secure Bit Selection Strategy for AMBTC-Compressed Images
items: A Robust Watermarking Method Based on RDWT-DCT-SVD in the YCbCr Color Space
items: Research on 5G mobile networks in Vietnam, design selection and testing of 5G Mobile Communications Jamming Device
items: DSViT: An Enhanced Transformer Model for Deepfake Detection

Throughput Optimization of the ASCON Lightweight Cryptographic Algorithm on IoT Devices
type: item
description: ASCON is a lightweight authenticated encryption algorithm standardized by NIST for securing constrained IoT environments. This study presents the implementation of ASCON-128a in a practical IoT architecture, where the ESP32 serves as the central microcontroller at the IoT node and the Raspberry Pi 4 acts as the central microcontroller at the IoT gateway. The ESP32 is chosen for its low-power operation, integrated wireless communication, and suitability for embedded edge processing. At the same time, the Raspberry Pi 4 is selected to support higher computational demands and data aggregation at the network edge. To improve performance, optimization strategies such as CPU frequency scaling, IRAM execution, dual-core parallelism, and cache warm-up were applied on the ESP32, alongside frequency stabilization and cache warm-up on the Raspberry Pi 4. Experimental results indicate that the ESP32 achieves an encryption throughput of 2.42 MB/s, while the Raspberry Pi 4 reaches 124 MB/s. These results validate ASCON-128a as an efficient and secure cryptographic solution for heterogeneous IoT systems.
subject: Papers
  topic: section
subject: IoT
  topic: keywords
subject: ASCON
  topic: keywords
subject: AEAD
  topic: keywords
subject: lightweight cryptography
  topic: keywords
creator: Chu Thi Ngoc Quynh
creator: Nguyen Thanh Ngoc
creator: Le Thi Ninh
creator: Pham Thi Thuy An
rights: Copyright (c) 2025 Journal of Science and Technology on Information security
date: 2025-12-31
publication date: 2025-12-31
starting page: 92
ending page: 99
doi: 10.54654/isj.v3i26.1172

AI-Enhanced SQL Injection Detection Framework: A Novel Approach Combines LLMs with Traditional Fuzzing to Improve Web Application Vulnerability Detection
type: item
description: SQL injection affects 65% of web applications, yet traditional tools often miss context-specific vulnerabilities. We propose AESIDF, a hybrid framework that integrates Large Language Models with parallel fuzzing for semantic vulnerability analysis. Evaluated on 26 benchmark scenarios from PortSwigger, DVWA, and OWASP Juice Shop, our approach achieves a 92.3% detection rate compared to SQLMap’s 76.9%, while reducing request volume by approximately 68.8%. These preliminary results suggest that LLM-powered contextual reasoning can enhance automated security testing; however, broader validation on larger and more diverse datasets is required to confirm generalizability.
subject: Papers
  topic: section
subject: SQL Injection
  topic: keywords
subject: artificial intelligence
  topic: keywords
subject: web security
  topic: keywords
subject: penetration testing
  topic: keywords
subject: large language model
  topic: keywords
subject: burp suite extension
  topic: keywords
creator: Nguyen Le Quoc Dat
creator: Nguyen Le Quoc Anh
creator: Nguyen Manh Thang
rights: Copyright (c) 2025 Journal of Science and Technology on Information security
date: 2025-12-31
publication date: 2025-12-31
starting page: 70
ending page: 78
doi: 10.54654/isj.v3i26.1179

Weak Links in Smart Surveillance: An Empirical Security Evaluation of Evil Twin Attacks on IoT Cameras
type: item
description: Wireless IP cameras are vital in IoT ecosystems but remain vulnerable to Evil Twin attacks that enable device compromise and data interception. This study empirically demonstrates how Deauthentication combined with rogue access points can coerce WPA2-based cameras into attacker-controlled networks, enabling MITM interception of unencrypted streams. Experiments using a controlled testbed reveal weaknesses in AP authentication, session management, and reconnection logic. To mitigate these threats, we recommend WPA3-SAE adoption, AP fingerprinting, stronger traffic encryption, and rogue AP detection. The results highlight systemic flaws in consumer IoT cameras and outline practical defenses to enhance Wi-Fi security in surveillance systems.
subject: Papers
  topic: section
subject: Evil Twin
  topic: keywords
subject: WPA2
  topic: keywords
subject: Wireless IP Cameras
  topic: keywords
subject: Rogue Access Point
  topic: keywords
subject: Deauthentication
  topic: keywords
subject: Man-in-the-Middle
  topic: keywords
creator: Giang Anh Tuan
creator: Nguyen Hoang Ha
creator: Doan Nhat Quang
creator: Le Huu Ton
creator: Tran Trung Hieu
rights: Copyright (c) 2025 Journal of Science and Technology on Information security
date: 2025-12-31
publication date: 2025-12-31
starting page: 62
ending page: 69
doi: 10.54654/isj.v3i26.1163

Proposal of an End-to-End Encrypted Chat System with Digital Signature and Vietnamese Character Support Based on Elliptic Curve
type: item
description: The paper proposes an End-to-End Encrypted (E2EE) chat system based on Elliptic Curve Cryptography (ECC), using Elliptic Curve Digital Signature Algorithm (ECDSA) for authentication and Elliptic Curve Diffie-Hellman (ECDH) for encryption key generation. The system is designed as a lightweight web widget, easily embeddable into websites, with full support for Vietnamese characters (UTF-8) without compromising performance. The solution employs the Web Crypto API to perform AES-GCM encryption and ECDSA digital signatures, combined with a nonce mechanism to prevent replay attacks. Experimental results demonstrate high performance (encryption/decryption time <1ms for long messages) and resilience against MITM and spoofing attacks.
subject: Papers
  topic: section
subject: E2EE
  topic: keywords
subject: ECC
  topic: keywords
subject: ECDSA
  topic: keywords
subject: ECDH
  topic: keywords
subject: Vietnamese support
  topic: keywords
subject: web widget
  topic: keywords
creator: Nguyen Quoc Viet
creator: Ngo Manh Cuong
rights: Copyright (c) 2025 Journal of Science and Technology on Information security
date: 2025-12-31
publication date: 2025-12-31
starting page: 39
ending page: 49
doi: 10.54654/isj.v3i26.1158

A Blockchain-Based Chain of Custody for Digital Evidence: Design and Evaluation
type: item
description: Maintaining a trustworthy chain of custody is essential to ensure the integrity, provenance, and admissibility of digital evidence. However, traditional evidence-management systems often suffer from opacity, limited auditability, and susceptibility to insider abuse or procedural errors. To address these gaps, we propose a blockchain-based chain-of-custody framework built on Hyperledger Fabric. In this design, the full lifecycle of evidence is logged as immutable, permissioned ledger entries, while artefacts themselves remain protected in secure off-chain repositories. Each event is captured through signed metadata and cryptographically time-stamped records, providing tamper-evident traceability. Custody workflows are encoded in Fabric chaincode, with role-based, multi-party authorization required for sensitive transitions. Moreover, Fabric’s privacy channels and fine-grained access controls enable cross-agency collaboration without unnecessary data exposure. A prototype implementation shows that the system achieves end-to-end accountability, practical throughput, and sub-second median latency on commodity hardware-demonstrating that stronger evidentiary assurance can be achieved for law-enforcement and forensic applications without incurring prohibitive operational costs.
subject: Papers
  topic: section
subject: digital evidence
  topic: keywords
subject: chain of custody
  topic: keywords
subject: blockchain
  topic: keywords
subject: permissioned ledger
  topic: keywords
subject: smart contracts
  topic: keywords
subject: auditability
  topic: keywords
subject: forensic readiness
  topic: keywords
subject: private data collections
  topic: keywords
creator: Truong Xuan Hung
creator: Luong The Dung
creator: Tran Anh Tu
rights: Copyright (c) 2025 Journal of Science and Technology on Information security
date: 2025-12-31
publication date: 2025-12-31
starting page: 25
ending page: 38
doi: 10.54654/isj.v3i26.1167

Enhancing MITM Attack Detection Mechanism for ICS using LSTM-based Hybrid Ensemble Learning
type: item
description: With the rapid development of Information Technology (IT), the integration of IT with Industrial Control System (ICS) makes it susceptible to cybersecurity threats, including Man-in-the-Middle (MITM) attacks. Many studies focus on MITM attack detection approaches that include rule-based methods and those using Machine Learning (ML). However, these approaches suffer from two main limitations: a lack of a dataset for MITM attack detection in ICS networks and an effective MITM attack detection method due to the ever-increasing complexity of ICS networks. In this paper, we propose a novel MITM attack detection framework using an ensemble learning algorithm for large-scale ICS networks. Concretely, we propose a novel ICS simulation framework for large-scale networks using Software-Defined Networking to facilitate ICS studies. Moreover, a novel lightweight MITM attack detection mechanism using an enhanced pre-processing technique and a hybrid ensemble learning algorithm using Long Short-Term Memory (LSTM) is proposed to detect MITM attacks with high accuracy while requiring suitable processing time. Experimental results show that the proposed MITM attack detection mechanism can achieve an f1 score of 91.91% while requiring only 8.91 microseconds for inference time.
subject: Papers
  topic: section
subject: Man-in-the-Middle Attack
  topic: keywords
subject: industrial control system
  topic: keywords
subject: software-defined networking
  topic: keywords
subject: ensemble learning
  topic: keywords
creator: Nguyen Tuan Anh
creator: Le Van Dong
creator: Dao Viet Cuong
creator: Nguyen Dinh Nghia
creator: Tran Quang Duc
rights: Copyright (c) 2025 Journal of Science and Technology on Information security
date: 2025-12-31
publication date: 2025-12-31
starting page: 79
ending page: 91
doi: 10.54654/isj.v3i26.1137

Memory-Resident Malware Detection via a Hybrid Deep Learning Framework
type: item
description: Memory-resident malware detection is a critical cybersecurity challenge, particularly with stealth techniques like Living-off-the-Land (LotL). This paper proposes a hybrid deep learning framework to detect malware from memory-behavior data represented as fixed-length tabular features. The framework emphasizes an effective data processing pipeline rather than a complex model architecture. It has three stages: (1) feature selection and Z-score standardization using Extreme Gradient Boosting (XGBoost) and StandardScaler, (2) data balancing and cleaning using Synthetic Minority Over-sampling Technique (SMOTE) and Edited Nearest Neighbor (ENN), and (3) training a Transformer Encoder-based classifier to extract high-level non-linear representations from the stabilized feature space, utilizing robust Feed-Forward Networks, Layer Normalization, residual connections, and Focal Loss to enhance training stability under class imbalance. Training further employs a StepLR Scheduler and Early Stopping to ensure convergence and prevent overfitting. On the CIC-MalMem-2022 dataset, which comprises one benign class and 15 malware classes, the proposed framework achieves 76.62% Accuracy and 76.35% F1-score, outperforming traditional baselines. These results demonstrate the framework’s effectiveness for proactive malware defense based on memory behavioral analysis.
subject: Papers
  topic: section
subject: Malware
  topic: keywords
subject: hybrid framework
  topic: keywords
subject: CIC-MalMem-2022
  topic: keywords
subject: deeplearning
  topic: keywords
subject: mô hình lan truyền mã độc SCIRS
  topic: keywords
creator: Le Phu Minh
creator: Do Dinh Quang
creator: Hoang Viet Long
creator: Nguyen Thi Kim Sơn
rights: Copyright (c) 2025 Journal of Science and Technology on Information security
date: 2025-12-31
publication date: 2025-12-31
starting page: 50
ending page: 61
doi: 10.54654/isj.v3i26.1177

FPGA-Based inline encryption bridge using AES-XTS for storage systems
type: item
description: This paper presents a hardware-based AES-256 XTS encryption system implemented on FPGA, providing a complete inline bridge between a storage controller and the storage device. Unlike prior works that focused only on AES core optimization, this design integrates the core into the full SATA protocol and evaluates end-to-end storage-path performance. The pipelined XTS-AES core enables high-throughput, real-time sector-level encryption with minimal performance impact. FPGA implementation offers flexibility in key sizes and encryption modes, supports algorithm updates through partial reconfiguration, and allows scalability to various storage systems, including NAS storage systems. The main contributions are: (i) proposing an FPGA-based inline encryption architecture with an AES-XTS core fully integrated into the SATA protocol; (ii) implementing and evaluating the encryption performance on a real storage system, demonstrating practical feasibility and transparency in real-time operations.
subject: Papers
  topic: section
subject: Storage system
  topic: keywords
subject: hardware encryption
  topic: keywords
subject: AES-XTS
  topic: keywords
subject: FPGA
  topic: keywords
subject: secure storage
  topic: keywords
creator: Tran Van Khanh
creator: Phan Van Ky
creator: Vu Van Viet
rights: Copyright (c) 2025 Journal of Science and Technology on Information security
date: 2025-09-30
publication date: 2025-09-30
starting page: 5
ending page: 17
doi: 10.54654/isj.v2i25.1141

Generating evasive payloads for assessing Web Application Firewalls with Reinforcement Learning and Pre-trained Language Models
type: item
description: Web Application Firewalls (WAFs) serve as a critical defense mechanism against various web-based attacks such as SQL Injection (SQLi), Cross-Site Scripting (XSS), Server-Side Request Forgery (SSRF), Remote Code Execution (RCE), and NoSQL Injection. However, modern adversaries often craft evasive and obfuscated payloads capable of bypassing traditional WAF rules. To effectively assess and challenge the robustness of WAFs, we propose DEG-WAF, a Deep Evasion Generation framework that leverages Large Language Models (LLM) in conjunction with Reinforcement Learning (RL) to generate evasive payloads against WAFs. The system consists of four core components: a payload generation agent based on a pre-trained LLM (OPT-125M), a reward model that approximates WAF behavior, a grammar-based sampling agent that ensures syntactic validity, and an RL agent trained with either Proximal Policy Optimization (PPO) or Advantage Actor-Critic (A2C) to fine-tune generation strategies. Experimental evaluations on real-world WAFs, including ModSecurity and SafeLine, demonstrate that the A2C-based model significantly outperforms baseline LLMs—achieving a bypass success rate of 80.16% on SQLi and 74.70% on NoSQLi for ModSecurity, and 97.8% on RCE for SafeLine. These results underscore the potential of our LLM-RL framework to serve as a robust foundation for evaluating and enhancing the resilience of WAF systems under adversarial conditions.
subject: Papers
  topic: section
subject: Web Application Firewall
  topic: keywords
subject: reinforcement learning
  topic: keywords
subject: large language model
  topic: keywords
subject: payload generation
  topic: keywords
subject: grammar attacks
  topic: keywords
creator: Tran Gia Bao
creator: Dinh Cong Duc
creator: Phan The Duy
rights: Copyright (c) 2025 Journal of Science and Technology on Information security
date: 2025-09-30
publication date: 2025-09-30
starting page: 78
ending page: 96
doi: 10.54654/isj.v2i25.1128

Research on the Design and Development of a Secure Cold Wallet Device for Blockchain
type: item
description: Cold Wallet is a specialized hardware device designed to store private keys and perform digital signing in an isolated (offline) environment, ensuring maximum security for digital assets. This paper presents a comprehensive design of a secure cold wallet device for Blockchain, focusing on security requirements and cryptographic processing capabilities.
subject: Papers
  topic: section
subject: Cold Wallet
  topic: keywords
subject: Blockchain
  topic: keywords
subject: Transaction Signature.
  topic: keywords
creator: Vu Ta Cuong
creator: Nguyen Thanh Tung
rights: Copyright (c) 2025 Journal of Science and Technology on Information security
date: 2025-09-30
publication date: 2025-09-30
starting page: 18
ending page: 24
doi: 10.54654/isj.v2i25.1140

A secure image steganography based on Hamming codes and image block complexity estimation using a zig-zag order
type: item
description: Data hiding in digital images has received considerable attention in recent years. Research efforts have primarily focused on increasing embedding capacity while preserving the visual quality of stego-images. In this paper, we propose a data hiding scheme based on Hamming codes. To enhance visual quality, the scheme estimates block complexity from pairs of adjacent pixels arranged in zig-zag order and uses this measure to identify high-texture regions for embedding message bits. To further minimize distortion, secret bits are embedded using the proposed Hamming code-based method. Moreover, embedding capacity is increased by utilizing multiple pixel bit-planes. A Canonical Gray Code (CGC) is employed in the bit-plane decomposition process to improve the accuracy of texture characterization in data hiding. Experimental results demonstrate that the proposed scheme achieves higher embedding capacity, improved visual quality, and stronger resistance to detection attacks.
subject: Papers
  topic: section
subject: Hamming codes
  topic: keywords
subject: Image Steganography
  topic: keywords
subject: Block Complexity Estimation
  topic: keywords
subject: Zig-zag Order
  topic: keywords
subject: Universal Steganalysis
  topic: keywords
subject: Bit-plane decomposition
  topic: keywords
subject: Security
  topic: keywords
subject: Canonical Gray Code
  topic: keywords
creator: Nguyen Duc Tuan
rights: Copyright (c) 2025 Journal of Science and Technology on Information security
date: 2025-09-30
publication date: 2025-09-30
starting page: 21
ending page: 42
doi: 10.54654/isj.v2i25.1123

FedPC Cloud CPU Forecasting using Federated Learning and Periodicity-based Clustering
type: item
description: Accurate CPU workload forecasting is vital for efficient resource management and system availability in cloud computing, yet faces challenges in data privacy, security, and the "cold start"problem for new Virtual Machines (VMs). Traditional methods risk privacy and struggle with limited data. We propose FedPC, a novel framework leveraging privacy-preserving Federated Learning (FL) with Periodicity-based Clustering. FedPC enables collaborative training without exposing local data, crucially supporting effective forecasting for new VMs with minimal historical information. It clusters VMs by workload periodicity, training tailored LSTMs within each cluster to handle heterogeneity securely. Evaluated on Azure Public Dataset V1, FedPC surpasses FedAvg in privacy and matches state-of-the-art methods in accuracy. This demonstrates FedPC’s efficacy in securely, adaptively managing resources, thereby enhancing system availability, especially in dynamic cloud environments with frequent VM creation and scarce initial data.
subject: Papers
  topic: section
subject: Federated Learning
  topic: keywords
subject: Privacy-Preserving
  topic: keywords
subject: Data Security
  topic: keywords
subject: Workload Forecasting
  topic: keywords
subject: Cloud Computing
  topic: keywords
subject: LSTM
  topic: keywords
subject: Secure Resource Management
  topic: keywords
creator: Nguyen Quoc Khanh
creator: Tran Quang Duc
creator: Nguyen Van Toan
creator: Tong Van Van
rights: Copyright (c) 2025 Journal of Science and Technology on Information security
date: 2025-09-30
publication date: 2025-09-30
starting page: 52
ending page: 60
doi: 10.54654/isj.v2i25.1115

Federated Trust-Based Authentication for Secure Mobile Cloud Access
type: item
description: The proliferation of mobile cloud services significantly increases the complexity and risks associated with user authentication. Traditional password-based authentication methods are vulnerable to credential theft and account takeover attacks. Although centralized Risk-Based Authentication (RBA) methods enhance security by evaluating login attempt risks, they often compromise user privacy by aggregating sensitive authentication data. To overcome these challenges, this paper proposes a federated trust-based authentication framework utilizing federated learning (FL) integrated with an Artificial Neural Network enhanced by Batch Normalization (ANN-BN). Specifically, our framework calculates a trust score for each login attempt based on user behavior patterns and contextual threat indicators. This trust-based approach enables accurate detection of malicious login attempts while preserving user privacy by performing decentralized model training across multiple client devices. Experiments conducted on a real-world login dataset demonstrate that the proposed federated ANN-BN approach achieves high detection accuracy with a low false-alarm rate, effectively balancing security enhancement and privacy preservation. Our results confirm the effectiveness and practicality of federated learning for secure authentication in mobile cloud environments, highlighting its potential for real-world deployment and motivating future research directions.
subject: Papers
  topic: section
subject: Federated learning
  topic: keywords
subject: trusted computing
  topic: keywords
subject: mobile cloud computing
  topic: keywords
subject: risk-based authentication
  topic: keywords
creator: Le Vinh Thinh
rights: Copyright (c) 2025 Journal of Science and Technology on Information security
date: 2025-06-30
publication date: 2025-06-30
starting page: 88
ending page: 104
doi: 10.54654/isj.v1i24.1113

A Scalable Telegram-Based Botnet Framework for Stealthy Remote Command and Control
type: item
description: In this study, we analyze how Telegram Bots can be abused as a Command and Control (C2) infrastructure in cyberattacks. We propose a Telegram-based C2 model that enables attackers to control compromised systems without relying on a centralized server, thereby enhancing anonymity and evasion capabilities. Furthermore, we introduce detection and defense strategies based on network behavior monitoring and encrypted message analysis.
subject: Papers
  topic: section
subject: social media
  topic: keywords
subject: command and control
  topic: keywords
subject: botnet
  topic: keywords
subject: information security
  topic: keywords
creator: Pham Van Toi
creator: Nguyen Trung Dung
creator: Hoang Linh Phương
creator: Nguyen Huu Long
rights: Copyright (c) 2025 Journal of Science and Technology on Information security
date: 2025-09-30
publication date: 2025-09-30
starting page: 43
ending page: 51
doi: 10.54654/isj.v2i25.1102

A Novel Approach for 1D-CNN Hyperparameter Optimization in IoT Attack Detection using Particle Swarm Optimization
type: item
description: This study proposes a hyperparameter optimization method for one-dimensional convolutional neural network using the Particle Swarm Optimization algorithm based on a Pareto multi-objective approach to improve the performance of IoT attack detection systems. Specifically, this study enhances the PSO algorithm by introducing an automatic termination criterion for optimization loops and proposes an early stopping mechanism, along with the optimization of the early stopping patience during the 1D-CNN model training process, thereby reducing computational costs and aligning with the resource-constrained hardware conditions of IoT. Additionally, a multi-objective optimization function is developed to balance detection performance and resource efficiency by combining validation accuracy with the 1D-CNN's execution time. The proposed method is evaluated on the Edge-IIoTset dataset. Experimental results demonstrate that the optimized model reduces execution time by 48-63% compared to the baseline model while maintaining high accuracy (over 94%). This research not only provides a practical solution for IoT security but also pioneers a novel approach to integrating evolutionary algorithms into adaptive deep learning systems and introduces a flexible method for hardware-constrained devices.
subject: Papers
  topic: section
subject: IoT attack detection
  topic: keywords
subject: one-dimensional convolutional neural network (1D-CNN)
  topic: keywords
subject: particle swarm optimization (PSO)
  topic: keywords
subject: hyperparameter optimization (HPO)
  topic: keywords
subject: multi-objective optimization
  topic: keywords
creator: Le Thi Hong Van
creator: Nguyen Quang Minh
creator: Pham Van Huong
creator: Nguyen Hieu Minh
rights: Copyright (c) 2025 Journal of Science and Technology on Information security
date: 2025-06-30
publication date: 2025-06-30
starting page: 53
ending page: 71
doi: 10.54654/isj.v1i24.1097

An Efficient Framework for Multi-Class Malware Classification in Cloud Environments
type: item
description: Malware classification in cloud environments remains a critical challenge due to the increasing complexity and volume of cyber threats. This paper proposes CMC (Cloud-based Malware Classification), a novel framework that enhances multi-class malware classification efficiency through the integration of feature selection, dimensionality reduction, and imbalanced data handling techniques. The CMC framework aims to improve classification accuracy and computational efficiency by optimizing feature representation and addressing class imbalance, which are common issues in real-world malware datasets. To evaluate its effectiveness, we apply the proposed model to two public benchmark datasets: CMD_2024 and CIC-MalMem-2022. Experimental results demonstrate that CMC outperforms existing approaches in terms of classification accuracy, F1-score, and computational efficiency, proving its potential for real-world deployment in cloud-based security solutions. These findings highlight the importance of intelligent data preprocessing and feature optimization in enhancing malware classification on cloud platforms.
subject: Papers
  topic: section
subject: Malware classification
  topic: keywords
subject: Random undersampling
  topic: keywords
subject: Low variance filtering and scaling
  topic: keywords
subject: Cloud-based malware detection
  topic: keywords
creator: Pham Sy Nguyen
creator: Pham Ngoc Van
creator: Hoang Viet Long
creator: Pham Duy Trung
rights: Copyright (c) 2025 Journal of Science and Technology on Information security
date: 2025-06-30
publication date: 2025-06-30
starting page: 40
ending page: 52
doi: 10.54654/isj.v1i24.1092

A Combinational Model-Based APT Attack Detection Approach
type: item
description: In the context of a world increasingly reliant on digital technology, Advanced Persistent Threats (APT) pose a significant challenge to global cybersecurity. To address this issue, this paper introduces a novel approach called BiLSTM-Attention-GCN (BiLAG), an advanced model combining Bidirectional Long Short-Term Memory (BiLSTM) networks, Attention mechanisms, and Graph Convolutional Networks (GCN). The goal of BiLAG is to provide an effective and accurate method for detecting APT. BiLSTM is employed to capture temporal features related to event sequences, enabling the detection of anomalies over time. The Attention mechanism focuses on the most critical aspects of the dataset, allowing the model to identify hidden signals that indicate potential attacks. Lastly, GCN is utilized to explore complex relationships among network entities, enhancing APT detection by constructing a detailed and precise relational graph. Experimental results demonstrate that BiLAG achieves an accuracy of 99%, with high recall and significantly reduced false positive rates.
subject: Papers
  topic: section
subject: APT Attack
  topic: keywords
subject: BiLSTM model
  topic: keywords
subject: BiLAG model
  topic: keywords
subject: GCN
  topic: keywords
subject: Deep learning model
  topic: keywords
creator: Nguyen Thanh Tung
creator: Nguyen Tien Trong
creator: Nguyen Thi Hien
creator: Nguyen Quang Hoan
creator: Do Xuan Cho
rights: Copyright (c) 2025 Journal of Science and Technology on Information security
date: 2025-06-30
publication date: 2025-06-30
starting page: 30
ending page: 39
doi: 10.54654/isj.v1i24.1078

Enhancing SPN ciphers: Dynamic substitution-key addition layers via binary block circulant matrices
type: item
description: The SPN (Substitution-Permutation Network) block cipher is one of the fundamental and important structures in the field of symmetric encryption, widely used in modern encryption algorithms such as AES. Due to its ability to efficiently diffuse and obscure data, SPN plays a key role in building secure and reliable encryption systems. However, with the development of the SPN block cipher, many studies have been conducted to identify cryptanalytic attack methods to break this cipher. To enhance the security of the SPN block cipher, recent research has focused on dynamic transformations of its components and often relies on the secret component, the key. In this study, we propose a new method that combines the dynamicization of two key components: the substitution layer and the key addition layer of the SPN block cipher. This method is based on using a binary block circular shift matrix, formed by combining a binary circular shift matrix with a binary Hadamard matrix. Our algorithm only requires the use of 26 additional key bits but can generate up to 228 key-dependent S-boxes with strong cryptographic properties and 233 key-dependent XOR tables. When applying these key-dependent S-boxes and XOR tables to dynamically modify the AES block cipher, it can increase the security level of the dynamic AES block cipher by 233 compared to AES
subject: Papers
  topic: section
subject: AES block cipher
  topic: keywords
subject: Affine transformation
  topic: keywords
subject: Dynamic S-box
  topic: keywords
subject: Dynamic XOR table
  topic: keywords
subject: Binary block circulant matrix
  topic: keywords
creator: Tran Thi Luong
creator: Trương Minh Phuong
creator: Nguyen Van Long
creator: Nguyen Nam Khanh
rights: Copyright (c) 2025 Journal of Science and Technology on Information security
date: 2025-06-30
publication date: 2025-06-30
starting page: 12
ending page: 29
doi: 10.54654/isj.v1i24.1100

Large-scale Android malware detection by integrating Blockchain and IPFS for secure virus signature distribution
type: item
description: The growing threat of Android malware underscores the limitations of centralized antivirus systems, which face challenges such as latency, single points of failure, and susceptibility to attacks. To address these issues, this paper introduces a decentralized framework leveraging blockchain technology via Hyperledger Fabric and the InterPlanetary File System (IPFS). The system, HypatiaX, provides secure, efficient, and transparent virus signature distribution while ensuring scalable and resilient data storage. By utilizing blockchain for virus signature management and IPFS for decentralized storage, HypatiaX supports real-time updates in distributed environment. Performance evaluations reveal low resource consumption, near-instantaneous query responses, and efficient virus scanning under diverse conditions. Advanced components, including a ledger controller, signature crawler, key manager, and IPFS client, further strengthen decentralized storage, secure key management, and automatic signature updates. This framework demonstrates significant improvements in combating Android malware while addressing the inherent flaws of traditional antivirus solutions.
subject: Papers
  topic: section
subject: Virus
  topic: keywords
subject: Signature
  topic: keywords
subject: blockchain
  topic: keywords
subject: Android malware
  topic: keywords
subject: IPFS
  topic: keywords
creator: Nguyen Tan Cam
creator: Pham Nhat Duy
creator: Hoang Mai Thien Phuc
rights: Copyright (c) 2025 Journal of Science and Technology on Information security
date: 2025-06-30
publication date: 2025-06-30
starting page: 72
ending page: 87
doi: 10.54654/isj.v1i24.1085

Malware Analysis: A Perspective from Dynamic Symbolic Execution of Binary Code
type: item
description: Malware analysis typically involves three steps: obfuscation, infection, and malicious action. Many antivirus methods fail because obfuscation hides control structures. This paper provides an overview of dynamic symbolic execution (DSE) applied to binary code, especially x86. DSE is considered the most powerful technique for deobfuscation and can automatically recover control structures such as control‑flow graphs. Several DSE tools target x86 (e.g., angr, Mayhem, S2E, KLEE‑MC, and BE‑PUM); we examine their design choices and trade‑offs. Finally, we evaluate the effectiveness of control‑flow graph similarity for tasks such as packer identification and original entry point (OEP) detection.
subject: Papers
  topic: section
subject: Dynamic symbolic execution
  topic: keywords
subject: binary code
  topic: keywords
subject: x86
  topic: keywords
subject: control flow graph
  topic: keywords
subject: obfuscation
  topic: keywords
creator: Mizuhito Ogawa
rights: Copyright (c) 2025 Journal of Science and Technology on Information security
date: 2025-09-30
publication date: 2025-09-30
starting page: 5
ending page: 20
doi: 10.54654/isj.v2i25.1093

Secure Implementation of Post-Quantum Cryptography
type: item
description: Post-Quantum Cryptography (PQC) is now required by several institutions and vendors, especially for applications related to low-level security functions (secure boot, firmware management, secure channels establishment, etc.). Not only standardized PQC algorithms must match correctly their specification, but also they must be implemented in accordance with market requirements. Those mostly consist of Performance-Power-Area (PPA) and certification constraints. In turn, the PPA encompasses tradeoffs between speed and implementation size, but also optimal adequation with available resources (vectorization in software, parallelism in hardware, dedicated accelerators in embedded systems, etc.) The certification relates to secure implementation in the context of adversaries trying to gain information on the secrets, exploiting for instance some surreptitious information leakage (secret-dependent timing or power consumption). There is an interplay between PPA and certification aspects that we detail in this paper, for different classes of PQC algorithms. We also give some insights on the order in which PQC algorithms will be rolled-out, dictated by the requirements to implement in hardware some services which cannot be retrofitted later on in software, namely those that are in charge of firmware lifecycle management
subject: Papers
  topic: section
subject: Post-Quantum Cryptography
  topic: keywords
subject: algorithm
  topic: keywords
subject: implementation
  topic: keywords
subject: performances
  topic: keywords
subject: countermeasures
  topic: keywords
subject: provisioning
  topic: keywords
subject: authorization
  topic: keywords
subject: secure channel
  topic: keywords
subject: Multi-Factor Authentication
  topic: keywords
subject: attestation
  topic: keywords
creator: Ben El Haj Soulami Souhayl
creator: Connan Yann
creator: Sylvain Guilley
creator: Takarabt Sofiane
rights: Copyright (c) 2025 Journal of Science and Technology on Information security
date: 2025-06-30
publication date: 2025-06-30
starting page: 3
ending page: 11
doi: 10.54654/isj.v1i24.1079

Detection of source code vulnerabilities using Nature language processing and deep graph network
type: item
description: The software production sector gains advantages from automated code generating techniques, yet encounters issues related to vulnerabilities in the resulting code. This research presents a hybrid paradigm, termed GBD, for detecting vulnerabilities in software written in C and C++. It integrates Graph Convolution Network (GCN), Bidirectional Encoder Representations from Transformers (BERT), and Dropout. During Phase 2 of the GBD model, the subsequent tasks are executed concurrently: (i) obtaining node and edge features utilizing the GCN graph convolution network; (ii) deriving segment features employing the BERT model; (iii) constructing a source code profile via the Code Property Graph (CPG). Phase 3 of the model implements the Dropout strategy to mitigate overfitting. Phase 4 is the classifier that ascertains the presence of vulnerabilities in the source code. Experimental findings demonstrate the superiority of the proposed model relative to alternative methods, attaining a prediction accuracy of 61.21% for vulnerable code and 88.94% for normal files. Additionally, the classification outcomes demonstrate that with a token length of 512, the GBD model yields the most uniform results across all metrics: Accuracy (86.65%), Precision (38.59%), Recall (66.21%), and F1-score (48.76%). This corresponds with our analysis of the Verum experimental dataset, indicating that over 70% of the source code files have lengths exceeding 256 but less than 512. Furthermore, the GBD model exhibits strong performance across both individual and multiple datasets. For example, in the Verum dataset, the GBD model surpasses five alternative methodologies—REVEAL [1], Russell [2], VulDeePecker [3], SySeVR [4], and Devign [5] - by 4% in Accuracy and between 15% and 57% in Precision, Recall, and F1-score. In comparison to SySeVR [4], the GBD model exceeds it by 3% to 25% across all metrics. In comparison to Devign [5], GBD achieves improvements of 5% to 39% in Precision, Recall, and F1-score. U…
subject: Papers
  topic: section
subject: Model
  topic: keywords
subject: classification
  topic: keywords
subject: graph
  topic: keywords
subject: neural network
  topic: keywords
subject: BERT
  topic: keywords
creator: Bùi Văn Cong
creator: Do Xuan Cho
creator: Do Trung Tuan
rights: Copyright (c) 2024 Journal of Science and Technology on Information security
date: 2024-12-19
publication date: 2024-12-19
starting page: 27
ending page: 42
doi: 10.54654/isj.v3i23.1057

Amplified Gradient Inversion Attacks on Federated Learning Frameworks
type: item
description: Federated Learning (FL) facilitates collaborative model training while safeguarding data privacy, making it ideal for sensitive fields such as finance, education, and healthcare. Despite its promise, FL remains vulnerable to privacy breaches, particularly through gradient inversion attacks that can reconstruct private data from shared model updates. This research introduces a nonlinear amplification strategy that enhances the potency of such attacks, revealing heightened risks of data leakage in FL environments. Additionally, we evaluate the resilience of privacy-preserving mechanisms, such as Differential Privacy (DP) and Homomorphic Encryption (HE), by employing two proposed metrics AvgSSIM and AvgMSE to measure both the severity of attacks and the efficacy of defenses.
subject: Papers
  topic: section
subject: Federated learning
  topic: keywords
subject: inversion attacks
  topic: keywords
subject: differential privacy
  topic: keywords
subject: homomorphic encryption
  topic: keywords
creator: Tran Anh Tu
creator: Dinh Cong Thanh
creator: Tran Duc Su
rights: Copyright (c) 2024 Journal of Science and Technology on Information security
date: 2024-12-19
publication date: 2024-12-19
starting page: 15
ending page: 26
doi: 10.54654/isj.v3i23.1066

Proposed Optimized Hardware Implementation for the S-box of the PRESENT Algorithm Using Combinational Logic Circuits
type: item
description: The lightweight block cipher PRESENT has been standardized by ISO/IEC 29192-2:2012 and TCVN 12854-2:2020. It is a lightweight block cipher with a block size of 64 bits and key sizes of either 80 or 128 bits. For lightweight block ciphers commonly deployed in resource-constrained embedded and IoT devices, resource optimization is a top priority. The S-box, as the only nonlinear component, plays a crucial role in ensuring the security of the cryptographic algorithm by providing resistance against nonlinear and differential attacks. The S-box also consumes the most resources compared to other components of the algorithm, making the optimization of the S-box implementation essential for minimizing the overall resource usage of the algorithm. The S-box of the PRESENT algorithm is used in many other block cipher algorithms. By surveying existing research on PRESENT implementations and analyzing S-box deployment methods based on combinational logic circuits, this paper proposes new architectures for implementing S-boxes using the lowest resource-consuming logic gates, such as 2-input NAND gates, 2-input NOR gates, and NOT gates. The results demonstrate that the proposed methods achieve reduced resources compared to other designs
subject: Papers
  topic: section
subject: PRESENT
  topic: keywords
subject: S-box
  topic: keywords
subject: lightweight block cipher
  topic: keywords
subject: combitional logic circuit
  topic: keywords
creator: Tran Quang Huy
creator: Do Thi Bac
creator: Bui Duc Trinh
creator: Le Thi Khanh Linh
creator: Hoang Le Hieu Hao
creator: Duong Phuc Phan
rights: Copyright (c) 2024 Journal of Science and Technology on Information security
date: 2024-12-19
publication date: 2024-12-19
starting page: 43
ending page: 52
doi: 10.54654/isj.v3i23.1070

Paradigms in Security Protocol Verification: A Multi-Tool Analysis
type: item
description: In the realm of internet security, ensuring the robustness and integrity of communication protocols is paramount. This paper offers a comprehensive analysis of four leading tools for security protocol verification: Scyther, ProVerif, CryptoVerif, and Tamarin. Each tool is evaluated for its unique strengths and applications, particularly in the contexts of cloud computing and IoT. The study begins with Scyther, highlighting its proficiency in automated falsification and multi-protocol verification. Next, ProVerif is examined for its capabilities in symbolic reasoning and its efficiency in handling complex security protocols. The paper then explores CryptoVerif’s computational approach to protocol verification, focusing on how it models and verifies protocols under a variety of cryptographic assumptions. Finally, Tamarin’s advanced features in symbolic analysis and its ability to manage intricate security properties are discussed, emphasizing its depth in formal protocol verification. This comparative analysis not only underscores the distinct contributions of each tool but also provides a broader perspective on their effectiveness in addressing both current and emerging security challenges. By dissecting the methodologies and limitations of these tools, the paper aims to offer valuable insights into the evolving landscape of security protocol verification and potential future directions in this critical area of cybersecurity research.
subject: Papers
  topic: section
subject: Verification protocol
  topic: keywords
subject: falsification protocol
  topic: keywords
subject: analysis protocol
  topic: keywords
subject: security
  topic: keywords
subject: cryptography
  topic: keywords
creator: Le Vinh Thinh
rights: Copyright (c) 2024 Journal of Science and Technology on Information security
date: 2024-12-19
publication date: 2024-12-19
starting page: 62
ending page: 81
doi: 10.54654/isj.v3i23.1059

Intrusion Detection Using Federated Learning in Non-IID Data Environments
type: item
description: Intrusion Detection Systems (IDS) are essential for protecting networks by detecting threats. Machine learning (ML) based approaches have enhanced the effectiveness for IDS. However, it raises privacy concerns for IDS based on ML approaches due to the need for centralized data. To address this issue, Federated Learning (FL) has been applied to IDS. It allows ML models to be trained on decentralized devices/clients without sharing raw data. However, FL faces challenges with non-independent and identically distributed (non-IID) data, which reduces the performance of intrusion detection models. This paper introduces a loss function that jointly learns compact local representations on each client and a global model across all clients, enhancing the robustness of FL in non-IID data environments. Experimental results demonstrate that our method significantly improves the accuracy and robustness of FL systems for IDS in non-IID environments.
subject: Papers
  topic: section
subject: Anomaly detection
  topic: keywords
subject: deep learning
  topic: keywords
subject: federated learning
  topic: keywords
subject: intrusion detection systems
  topic: keywords
creator: Ha Xuan Tung
creator: Tran Linh Trang
creator: Vo Khuong Linh
rights: Copyright (c) 2024 Journal of Science and Technology on Information security
date: 2024-12-19
publication date: 2024-12-19
starting page: 53
ending page: 61
doi: 10.54654/isj.v3i23.1061

A Reversible Data Hiding Scheme with Security Enhancement Using a Secure Bit Selection Strategy for AMBTC-Compressed Images
type: item
description: Reversible Data Hiding (RDH) is an approach that has garnered significant attention from researchers over the past two decades. In this paper, an Absolute Moment Block Truncation Coding (AMBTC)-based RDH approach is proposed. To increase the embedding capacity (EC), the approach utilizes the high mean and low mean values for data hiding. Additionally, a binary matrix from the AMBTC compressed code is employed to embed the given message bits into encrypted information arrays using the XOR (exclusive OR) operator. This mechanism enhances the security of the hidden message through a secure bit selection method. Consequently, the embedding capacity of the proposed RDH scheme can exceed 98,301 bits when an image block of size 4 × 4 pixels is used. Moreover, the visual quality of the stego-images produced by the proposed RDH scheme surpasses that of state-of-the-art RDH approaches.
subject: Papers
  topic: section
subject: Reversible Data Hiding
  topic: keywords
subject: AMBTC compressed images
  topic: keywords
subject: bit selection strategy
  topic: keywords
subject: security enhancement
  topic: keywords
creator: Nguyen Duc Tuan
rights: Copyright (c) 2024 Journal of Science and Technology on Information security
date: 2024-12-19
publication date: 2024-12-19
starting page: 82
ending page: 96
doi: 10.54654/isj.v3i23.1063

A Robust Watermarking Method Based on RDWT-DCT-SVD in the YCbCr Color Space
type: item
description: In digital copyright protection, watermarking plays a crucial role, particularly in ensuring the watermark remains imperceptible, robust against attacks, and has a high embedding capacity. The new method proposed in this paper utilizes Redundant Discrete Wavelet Transform (RDWT), Discrete Cosine Transform (DCT), and Singular Value Decomposition (SVD) to embed the watermark into a color image. Instead of using traditional methods, this approach calculates the Bhattacharyya distance between the original image and the watermark to determine the embedding factor automatically. The watermark is hidden in the Cb channel of the YCbCr color space, which minimizes the impact on the original image quality and enhances both the imperceptibility and robustness of the watermark. Experimental results show that this method not only preserves the original image quality but also withstands various types of attacks, ensuring the watermark retains its integrity and high recoverability.
subject: Papers
  topic: section
subject: RDWT
  topic: keywords
subject: DCT
  topic: keywords
subject: SVD
  topic: keywords
subject: Bhattacharyya distance
  topic: keywords
subject: Watermarking
  topic: keywords
creator: Vu Tuan Son
creator: Tong Minh Duc
rights: Copyright (c) 2024 Journal of Science and Technology on Information security
date: 2024-12-19
publication date: 2024-12-19
starting page: 5
ending page: 14
doi: 10.54654/isj.v3i23.1054

Research on 5G mobile networks in Vietnam, design selection and testing of 5G Mobile Communications Jamming Device
type: item
description: According to the research presented by the authors in [1], we propose research content, applying new technical technologies to research and design 5G mobile communications jamming devices. The goal of research and product design is to meet the basic requirements of technical indicators, operating features as well as specific requirements of the Public Security. In this article, the authors introduce some initial results of testing and evaluating 5G mobile communications jamming devices in frequency bands n28, n40, n41 (in which, n41 is divided into two frequency bands n41A and n41B) and n77. This not only has practical significance in scientific research and technology mastery, but also serves as a basis for the authors to continue developing products applying SDR technology to design and manufacture intelligently controlled, adaptive jamming devices in the future, meet work requirements of the Public Security, while diversifying the methods of operation for the Public Security force in practice
subject: Papers
  topic: section
subject: 5G
  topic: keywords
subject: n77
  topic: keywords
subject: n78
  topic: keywords
subject: jamming
  topic: keywords
subject: information security
  topic: keywords
subject: frequency band
  topic: keywords
subject: planning
  topic: keywords
subject: amplification
  topic: keywords
subject: spectrum
  topic: keywords
creator: Le Hai Trieu
creator: Nguyen Hong Duan
creator: Truong Thanh Vinh
creator: Bui Thi Bich Loan
creator: Nguyen Dinh Son
creator: Vu Van Son
rights: Copyright (c) 2024 Journal of Science and Technology on Information security
date: 2024-10-01
publication date: 2024-10-01
starting page: 29
ending page: 39
doi: 10.54654/isj.v2i22.1056

DSViT: An Enhanced Transformer Model for Deepfake Detection
type: item
description: The rapid development of artificial intelligence and deep learning models has enabled the creation of highly realistic fake images and videos, posing significant threats to information security and safety. Accurate detection of these forged contents is crucial to prevent the spread of misinformation and to protect the integrity of digital media. Although several advanced studies in this field, such as Vision Transformer (ViT) and Convolutional Vision Transformer (CViT), have been conducted, there remain limitations that need to be addressed. In this paper, we introduce a novel model, improved from CViT, designed to optimize the process of deepfake detection, named DSViT (Deepfake Detection with SC-based Convolutional Vision Transformer). This model judiciously integrates Convolutions and a SCConvolution block with the ViT architecture. We conducted experiments on the Deepfake Detection Challenge (DFDC) dataset and compared the results with the CViT model to demonstrate the effectiveness of the proposed model
subject: Papers
  topic: section
subject: deepfake detection
  topic: keywords
subject: DSViT
  topic: keywords
subject: deepfake
  topic: keywords
subject: spatial deepfake
  topic: keywords
creator: Pham Minh Thuan
creator: Bùi Thu Lam
creator: Pham Duy Trung
rights: Copyright (c) 2024 Journal of Science and Technology on Information security
date: 2024-10-01
publication date: 2024-10-01
starting page: 17
ending page: 28
doi: 10.54654/isj.v2i22.1055