This paper gives a review of ADDIE model used in the preparation of teaching materials for use in electronically supported teaching process generally, and especially for electronic learning
With the increasing use of web applications, challenges in the field of cybersecurity are becoming more complex. This paper explores the application of fine-tuned large language models (LLMs) for the automatic generation of synthetic attacks, including XSS (Cross-Site Scripting), SQL Injections, and Command Injections. A web application has been developed that allows penetration testers to quickly generate high-quality payloads without the need for in-depth knowledge of artificial intelligence. The fine-tuned language model demonstrates the capability to produce synthetic payloads that closely resemble real-world attacks. This approach not only improves the model’s precision and dependability but also serves as a practical resource for cybersecurity professionals to enhance the security of web applications. The methodology and structured implementation underscore the importance and potential of advanced language models in cybersecurity, illustrating their effectiveness in generating high-quality synthetic data for penetration testing purposes. The research results demonstrate that this approach enables the identification of vulnerabilities that traditional methods may not uncover, providing deeper insights into potential threats and enhancing overall security measures. The performance evaluation of the model indicated satisfactory results, while further hyperparameter optimization could improve accuracy and generalization capabilities. This research represents a significant step forward in improving web application security and opens new opportunities for the use of LLMs in security testing, thereby contributing to the development of more effective cybersecurity strategies.
4 January 2017 in JITA - Journal of Information Technology and Applications (Banja Luka) - APEIRON
The IT function became the backbone of the company and the central driving force of the entire operations of an organization. Modern electronic commerce is very dependent on the quality of information system supported with information technology. Safety aspects of business and electronic transactions transfer (Internet-supported), particularly in the banking sector, require a more complex audit of the organization, both financial and the information system audit. This paper presents the basic and in practice most frequently applied standards and guidelines for checking of security controls in information systems. The work presents the COBIT and ITIL as the two most prevalent methodologies for quality audit of information systems with the presentation of two ISO 27000 series of standards on information security.
12 January 2018 in IOP Conference Series: Materials Science and Engineering
This paper intent is to analyse different aspects of information system audit and to synthesise them into the feasibility study report in order to facilitate decision making and planning of information system audit process. The TELOS methodology provides a comprehensive and holistic review for making feasibility study in general. This paper examines the use of TELOS in the identification of possible factors that may influence the decision on implementing information system audit. The research question relates to TELOS provision of sufficient information to decision makers to plan an information system audit. It was found that the TELOS methodology can be successfully applied in the process of approving and planning of information system audit. The five aspects of the feasibility study, if performed objectively, can provide sufficient information to decision makers to commission an information system audit, and also contribute better planning of the audit. Using TELOS methodology can assure evidence-based and cost-effective decision-making process and facilitate planning of the audit. The paper proposes an original approach, not examined until now. It is usual to use TELOS for different purposes and when there is a need for conveying of the feasibility study, but not in the planning of the information system audit. This gives originality to the paper and opens further research questions about evaluation of the feasibility study and possible research on comparative and complementary methodologies.
25 May 2017 in IOP Conference Series: Materials Science and Engineering
Audit of the information system, thanks to the increased use of ICT and related cyber-crime, becomes a very important process in modern companies and institutions. It is usual to engage or outsource a third party for independent financial audit. But what about auditing of the information system of public administration institutions? This paper gives an introduction to possible aspects of information system's audit with the aim to discuss possible answer on the question in the title.
15 June 2012 in Quality of Life (Banja Luka) - APEIRON
In order to ensure quality of life of its citizens, the European Union member states are in the process of modernisation of their public services through utilization of information and communication technologies (ICT). In this process, each state is selecting own way to meet citizens’ demands for provision of more quality, efficient and flexible public services. One of the main interests of actual Government in the Republic of Srpska (RS) is to protect economic interests of its citizens, as well as to transform its services and functions in order to improve overall quality of life in RS. The implementation of e-Government and e-Governance is one of the main strategic commitments. In order to meet these EU trends, the Government of the Republic of Srpska made first steps in introducing new public services to facilitate communication with its citizens. The Government of the Republic of Srpska recognized benefits of these trends and their impacts on the overall development of society and economy improvement of quality of life of its citizens. With the introduction of these modern services, the citizens in RS should skip lines and shorten the waiting time for response from Governmental bodies related to their requests that will give them more time for other activities.This paper gives brief analysis of challenges and prospects for implementation of e-Government and e-Governance initiatives, as one of the pillars for successful development of the Republic of Srpska as knowledge based economy and information society with benefits that improve citizens’ life. The paper also gives brief review of main strategic document, which gives governmental vision for implementation, as well as introduction of eSrpska- public administration portal.