An increase in the number of Maritime Intelligent Transport Systems (MITSs) also means an increase in the number of information security risks. Usually, the administration and operation of MITSs are done through web servers that are frequently targeted by hackers. In marine transportation industry, malicious code injection attacks (webshell) has been widely exploited by hackers to take full control of Web servers. Traditional webshell detection methods based on pattern matching that are no longer effective against new types of webshell. This motivates us to investigate the problem of detecting obfuscation or unknown webshells, termed OUW problem. In this work, we propose a pattern-matching-deep-learning hybrid ASP.NET webshell detection method (H-DLPMWD) to address the OUW problem. H-DLPMWD is based on Yara-based pattern matching to clean dataset; modeling ASP.NET code files as an operation code index (OCI) vectors; and applying CNN method to train and predict webshell in OCI vectors. To validate H-DLPMWD, our rigorous experimentation demonstrates that H-DLPMWD achieves an excellent accuracy of 98.49%, F1-score of 99.01%, and a low false positive rate of 1.75%.
In this paper, we concentrate on the process of managing the land valuation certificate using blockchain in Vietnam. To approach this problem, we base on the e-government application framework published by the Ministry of Information and Communication and Ministry of Natural Resources and Environment to develop a blockchain-based component which will be linked to the framework. Our component has three layers corresponding to three main layers of the architecture. After that, we develop a decentralized application serving the procedures of land valuation certificate management. With our application, certificates are stored and can be traced from the blockchain network. Our component hence helps create the transparency of management processes. We also carry out preliminary experiments using the proposed system to prove its feasibility during test operation processes. Our research also paves the way for applying blockchain technology to the state management field in general.