KMITL

Permanent URI for this communityhttps://dspace.kmitl.ac.th/handle/kmitl/1

Browse

Settings

Author: search.filters.author.Janpitak, Nanta

Search Results

Now showing 1 - 4 of 4
  • Loading...
    Thumbnail Image
    Some of the metrics are blocked by your 
    consent settings
    Item type:Publication,
    The novel secure testament methodology for cryptocurrency wallet using mnemonic seed
    (2020-07-03)
    Janpitak, Nanta
    ;
    Lilakiatsakun, Woraphon
    ;
    Sathitwiriyawong, Chanboon
    Recently, cryptocurrencies such as Bitcoin, Ethereum, etc, have rapidly been recognized as an asset, often called a digital asset. Comparing to the real assets, it would be handled carefully due to its own characteristics that are completely different. The disadvantage of such digital assets, on the one hand, is that whoever knows the private key of the wallet, they can easily take over that digital asset. On the other hand, if the wallet’s owners are dead without passing credential information to others, that asset will be lost forever. We thus propose the novel secure testament methodology for a digital asset such as Bitcoin to solve the mentioned problems. The mechanism is based on managing the mnemonic seed of the wallet so that an inheritor will obtain the mnemonic seed in a secure way. Two mechanisms of the proposed methodology are implemented. The first is to save the mnemonic seed in a secure repository. Therefore, no one can access to the cryptocurrency wallet while the owner still being alive and does not wish anybody to access. The second is to deliver the mnemonic seed securely to legitimate inheritor when the owner is suspected to be dead or disappeared. Finally, based on our experiment, the results show that the aforementioned problems can be solved. Furthermore, the proposed mechanism can help the owner of the asset to managing the confidentiality of their assets.
  • Loading...
    Thumbnail Image
    Some of the metrics are blocked by your 
    consent settings
    Item type:Publication,
    Information security requirement extraction from regulatory documents using GATE/ANNIC
    (2019-03-01)
    Janpitak, Nanta
    ;
    Sathitwiriyawong, Chanboon
    ;
    Pipatthanaudomdee, Phatwarat
    Compliance is a concept of acting in accordance with established laws, regulations, etc. In order to judge that an organization is following the given rules or not, a compliance auditing is required. A compliance checking is an important activity of compliance auditing which require the extraction of compliance requirement from legal documents. There have been a more and more research challenges to automate the extraction of compliance requirements from the legal documents. This is because most legal documents are embodied in natural language which cannot be understood by the traditional computer system. Though a regulatory document comprises thousands of words, not every word is required in the automation of compliance checking requirement. Extracting only the essential content from the regulatory document can help to shorten the process of compliance requirement retrieving. This paper presents a methodology to extract the compliance requirements in term of goals (subject, object, target, action) which is the essential contents from the legal or regulatory documents by using GATE. GATE is a widely used tool for language engineering to support the machine to process the information extraction (IE) for queries and reasoning. Most researchers proposed to use the readymade application named ANNIE in GATE to extract the essential statements from any target documents. In our proposed method, we add the ANNIC which is a plug-in tool in GATE to help in searching for annotations, visualizing them and inspecting features. Using ANNIC can extract more detail from the ANNIE outcomes which is still in form of unstructured text into structured data such as table.
  • Loading...
    Thumbnail Image
    Some of the metrics are blocked by your 
    consent settings
    Item type:Publication,
    Automated Compliance Checking Methodology for Non-Log Operations
    (2015-12-31)
    Janpitak, Nanta
    ;
    Sathitwiriyawong, Chanboon
    Compliance Management (CM) is the management process that an organization implements to ensure organizational compliance with relevant requirements and expectations. The most complicated, time-consuming, and costly process in CM is compliance checking because it requires a person who has a good knowledge in policy to examine whether the current operations meet the policy requirements. Many researchers have tried to study better ways to automate the compliance checking process, but most of them require the operation logs in to the computer systems. This paper proposes a methodology to enable the automation of compliance checking for those operations that have no log in computer systems by using questions and answers principle to cooperate with the semantic web technologies. Since there are some operations that cannot be understood by computer systems, using questions is one way to gather the answers, such as operation log to evaluate their compliance. The proposed methodology can help noncertified auditors perform the compliance checking so that the time and cost of compliance checking would be greatly reduced.
  • Loading...
    Thumbnail Image
    Some of the metrics are blocked by your 
    consent settings
    Item type:Publication,
    Run-time enforcement model for dynamic separation of duty
    (2010-12-01)
    Janpitak, Nanta
    ;
    Sathitwiriyawong, Chanboon
    Separation of duty (SoD) is a primary internal control in many businesses including information systems intended to prevent frauds and errors due to the conflict of interest. To enforce the separation of duty in the information systems, Role-Based Access Control (RBAC) has been proposed and been the most popular access control model in today's security management. This paper focuses on the Dynamic Separation of Duty (DSD) which is one of the four components of the ANSI RBAC standard. To maximize the utilization of human resources, one user is allowed to have multiple mutually exclusive roles but can activate only one role at a time. The DSD does not only provide more flexibility for business system but also create more vulnerability in the separation of duty compliance because of the complication in checking the conflict of interest. This paper proposes a very simple but effective model to solve the problem of the DSD by integrating the workflow sequence to the concept of mutually exclusive roles (MER) constraint. From the proposed model, the conflict of interest can be verified at run time. The system will not allow the continuity of any process if the activation of conflicting users has been found. ©2010 IEEE.