MSc.ISS Theses and Dissertations (2020)
Permanent URI for this collection
Browse
Recent Submissions
Now showing 1 - 2 of 2
- ItemApplication of approximate matching on industrial control system (ICS) network communication using ssdeep algorithm(Strathmore University, 2020) Mutua, Nelson MakauIndustrial Control Systems (ICSs) are significant for functioning of numerous critical infrastructures for instance power plants, water treatment facilities and gas pipelines. In spite of the fact that security of such systems deserves attention, application of thorough security intelligence approaches to ICS is not a standard practice. ICS are becoming more and more connected, so they require heightened security. Intrusion Detection Systems (IDSs) do not work well to secure ICSs because they mostly work on a signature basis and there are not many known signatures to detect attacks on ICSs. Network communication is associated with many security challenges. Changes in Internet technologies have allowed for an increase in networked devices, the complexity of cybercrimes and the transfer of huge amounts of data, which can easily be intercepted and manipulated by attackers. Due to vulnerabilities in IDS used in ICS, there is need for a solution that can detect attacks at a higher rate. There have been several real-world documented incidents and cyber-attacks affecting ICSs which clearly illustrates critical infrastructure vulnerabilities. These reported incidents demonstrate that cyber-attacks on ICSs might cause a variety of financial damage and harmful events to humans and their environment. Based on the aforementioned challenges, the solution was actualized by implementing a technique for International Electrotechnical Commission (IEC) 60870-5 also known as IEC 104 network communication protocol analysis based on approximate pattern matching. This protocol was intentionally selected in this study because it is crucial for the communication control and the controlled stations in many ICSs. ICS profile was computed from normal ICS network communication. To detect anomalies, unknown ICS communication was compared to the profile using approximate pattern matching algorithm. This prototype applied Agile Software Methodology, for building of an evaluation tool. It provides opportunities to assess the project progress and direction throughout the development lifecycle. This is achieved though iterations and more frequent release with subsequent feedback. A python-based application was developed, tested and validated.
- ItemBlockchain enabled drug traceability solution: a case of drug counterfeiting in a pharmaceutical supply chain(Strathmore University, 2020) Ogwel, Patricia TanyaThe pharmaceutical industry deals with manufacturing, packaging and supply of drugs to the end consumers. Being one of the major industries in Kenya, it plays a big role in the Kenyan economy as well. Most countries are tackling this menace of fake drugs penetrating their markets at a high rate. The drug cartels have embarked on this business and are growing their wings to various parts of the world. The drugs packaging is so similar to the original manufacturer’s Product that at first glance one cannot tell the difference between a legit Product and a counterfeit one. Unfortunately, most drug users over the years have been on these fake medications and as a result some of them have not been successful in the treatment of their diseases. In the direst of situations, some patients have aggravated their conditions with the worst-case scenarios resulting to death. The main objective of this dissertation was to come up with a blockchain enabled drug traceability solution that enabled visibility in the supply chain. This solution ensured the drug registered by the company was genuine, and that the end user will be able to see who handled the Product before reaching them. In a way, this will aid in reducing, eventually eradicating the challenge of drug counterfeits in the market. The dissertation area of focus was a pharmaceutical manufacturing company’s supply chain setup and the Waterfall Approach was the SDLC (Software Development Life Cycle) approach used. The study devised a solution that can aid in drug traceability of the drug issued to an end user thus a patient in the drug chain. This helped a patient determine if the drug they are purchasing is genuine. The study used blockchain technology to come up with the application.