Journal of Advanced Research in Networking and Communication Engineering

AI-Generated API Test Suites vs Real-World API Vulnerabilities: An Empirical Study

2026-09-16T06:06:21+00:00

Application Programming Interfaces (APIs) form the backbone of modern distributed systems, yet they remain prime targets for security exploits. While AIpowered test generation tools promise automated, intelligent coverage of API endpoints, their effectiveness against real-world vulnerability classes remains underexplored. This paper presents an empirical study evaluating the detection capabilities of AI-generated API test suites against a curated dataset of real-world API vulnerabilities, including OWASP API Security Top 10 issues such as Broken Object Level Authorization (BOLA), injection flaws, and authentication bypasses. We benchmark multiple AI-driven testing frameworks— including LLM-based payload generators and specification-aware test synthesizers—against vulnerability-oriented inspection tools like VOAPI2 and traditional fuzzers. Our experiments reveal that while AIgenerated tests achieve 60–85% path coverage and reduce manual effort by up to 80%, they systematically miss 30–50% of high-severity, context-dependent vulnerabilities that require stateful request sequences or business-logic exploitation. We identify key failure modes: over-reliance on schema conformance, inability to model multi-step attack chains, and blind spots in authorization boundary testing. Based on these findings, we propose a hybrid testing paradigm that combines AIgenerated breadth with targeted, vulnerability-patterndriven depth, and we release an open benchmark suite of 50+ real-world vulnerable API endpoints for future research. Our results underscore that AI-generated test suites are powerful accelerators but insufficient as standalone security assurance mechanisms for production APIs.

THINK BEFORE YOU CLICK: A STUDY OF CYBER SECURITY AWARENESS

2026-09-16T06:27:00+00:00

Cyber security has become an essential requirement in an increasingly connected digital society. Students, educational institutions, businesses and individuals depend on computers, smartphones, cloud services, online banking, social media and digital communication. This dependence also creates opportunities for cyber criminals to exploit technical weaknesses and human mistakes. This paper studies cyber security awareness, common cyber threats and practical protection techniques that can reduce security risks. The study focuses on threats such as phishing, malware, ransomware, password attacks and social engineering. It also discusses the role of strong passwords, multi-factor authentication, encryption, software updates, backups, firewalls and security awareness. The paper concludes that technology alone cannot provide complete security; responsible user behaviour and continuous awareness are equally important.

The Automation Paradox in Security Operations Centers: A Human-in-the-Loop Framework for Task Suitability

2026-09-16T06:42:43+00:00

Security Operations Centers (SOCs) are increasingly using SOAR platforms and AI-based security tools to improve cybersecurity operations, reduce analyst workload, and respond to threats more quickly. However, despite continued investment in automation, SOC teams still face challenges such as alert fatigue, slow incident response, and highly reactive security operations. This research investigates the automation paradox in SOCs and examines why automation does not always provide the expected operational benefits. The study focuses on limited trust in AI-driven systems, high false-positive alerts, and weak integration between automation tools and existing SOC processes. It also addresses the lack of a widely accepted and validated framework for deciding which SOC tasks should be fully automated, semi-automated with human involvement, or handled mainly by humans. The research follows a mixed-methods approach using structured surveys and semi-structured interviews with SOC analysts, managers, and security architects, together with secondary data from industry reports and peer-reviewed literature. The study aims to identify automation adoption patterns, examine barriers that limit automation effectiveness, evaluate the relationship between automation maturity and MTTD, MTTR, and analyst workload, and develop a validated three-tier framework for automation suitability

IoT-Driven Smart Surveillance: Architecture, Design, and Implementation

2026-05-04T10:22:28+00:00

A key benefit of this project is the ability to integrate small devices into the internet, enabling easy communication, management, and control without human intervention. Additionally, it offers a high level of protection, well-being, ease, and efficiency. efficiency. The proposed home automation system makes use of a Raspberry Pi, which is a small, affordable, versatile, and portable device. The credit card-sized single-board computer supports a variety of peripherals and network interfaces, including an Ethernet jack, multiple USB ports, an HDMI interface, and an SD card reader. This work proposes a method to wirelessly connect several nodes to the Raspberry Pi. Each node can monitor environmental conditions and execute control tasks via a relay, such as switching devices like fans, lights, TVs, or air conditioners on or off, while transmitting all collected data to the Raspberry Pi. Cloud-based solutions facilitate the connection to surrounding devices, allowing users to access and manage anything from anywhere at any time through user-friendly interfaces and built-in applications. Consequently, the cloud serves as the front-end interface for accessing these functionalities.

DOI: https://doi.org/10.24321/3117.4825.202601

A Study of Security Challenges, Fraud Prevention, Authentication and Risk Management in Unified Payments Interface

2026-09-16T06:18:53+00:00

Unified Payments Interface (UPI) has become a major component of India’s digital-payment ecosystem by enabling fast, interoperable account-to-account payments through mobile applications. The growth of UPI has increased convenience, but it has also created a wider attack surface for phishing, social engineering, QR-code fraud, fake applications, malware, SIM-related attacks, fraudulent payment requests and account takeover. This paper studies UPI security by reviewing authentication mechanisms, device security, application security, transaction monitoring, fraud detection, customer awareness and regulatory controls. The methodology combines secondary literature with an analytical threat-and-control assessment. The results indicate that user-centric attacks form an important part of the identified threat landscape and that no single security mechanism can address every risk. A layered model combining authentication, secure devices, secure applications, transaction controls, fraud monitoring, awareness and incident response is therefore recommended. Emerging on-device biometric authentication provides an additional option for eligible UPI transactions, while RBI and NPCI controls continue to strengthen digital-payment security

COMPUTER SCIENCE AND APPLICATION SMARTPHONE AND SECURITY

2026-09-16T06:35:43+00:00

Smartphone security has become a critical challenge as mobile devices handle sensitive personal, financial, and enterprise data. This paper investigates the primary threat vectors, architectural vulnerabilities, and protective frameworks across contemporary smartphone operating systems. Drawing upon mobile security literature, vulnerability databases, and network threat analysis, the paper explores mobile malware, hardware exploits, biometric vulnerabilities, zero-click attacks, microarchitectural risks, and network-level vectors. It further analyzes the implications for personal privacy, enterprise mobility (BYOD), regulatory compliance, and security policy frameworks. The findings suggest that smartphone security requires a multi-layered defense combining hardwarebacked encryption, secure application ecosystems, memory tagging, pointer authentication, dynamic RASP enforcement, and proactive user awareness.