Jul 2026· International Research Journal on Advanced Engineering Hub (IRJAEH)· 0 citations· 14 references
TL;DR
A SmartGaurd: Real-Time Behavioral Analysis System for Malicious File Activity Detection is designed to protect confidential organizational data using a layered security architecture that improves data confidentiality while minimizing the risk of unauthorized data exposure.
Abstract
The rapid growth of digital documentation in enterprises has created significant challenges in ensuring secure storage, controlled access, and reliable auditing of sensitive information. This research presents a SmartGaurd: Real-Time Behavioral Analysis System for Malicious File Activity Detection designed to protect confidential organizational data using a layered security architecture. The proposed system is developed using a React-based user interface for responsive and dynamic client interaction, while the server-side operations are handled through the Django framework, enabling robust authentication, authorization, and document processing. The platform integrates SQLite3 as the database engine to maintain structured document metadata, user credentials, and audit logs. To strengthen access control, the system incorporates One-Time Password (OTP) verification mechanisms and encryption techniques to ensure that only authorized users can access or download protected files. This architecture improves data confidentiality while minimizing the risk of unauthorized data exposure. The system workflow includes secure user authentication, encrypted document upload, malware inspection, controlled file sharing, and real-time audit logging to maintain transparency in document access activities. Whenever a user attempts to retrieve protected documents, the system dynamically generates an OTP to validate the request and prevent unauthorized downloads. Additionally, administrative and auditing modules monitor user behavior and maintain detailed activity logs that can be analyzed for compliance verification and anomaly detection. By combining modern web technologies (React and Django) with security mechanisms such as encryption and OTP-based validation, the proposed system provides a scalable and efficient approach to enterprise document security. The implementation demonstrates how integrated authentication, encryption, and auditing mechanisms can significantly enhance data protection while maintaining system usability and operational efficiency.
From a cybersecurity standpoint, the security of the data stored in these systems has become a crucial concern as cloud storage continues to proliferate in digital infrastructure. Credential compromise, brute-force attacks, and sophisticated, persistent infiltration tactics have demonstrated the vulnerability of traditional security techniques, especially those that rely on static encryption keys or password-based authentication. This study offers a multi-layered security approach that combines multi-stage authentication with a dynamic key-release method for Blowfish-encrypted file storage, in response to constantly evolving cyber threats. Before allowing the controlled recovery of the Blowfish decryption key, the model described here used sequential verification with user credentials, a time-based one-time password, and a registered device token validation procedure. By keeping encryption keys unreadable until identity is fully confirmed, the system architecture reduces the exposure risks associated with conventional key storage methods. FastAPI, Streamlit, PostgreSQL, and MinIO were used in the implementation; the configuration was simple but deployable in both academic and business environments. According to experimental evaluation, the framework significantly increases resistance to unauthorised access attempts while maintaining low latency for both authentication and decryption. The findings make it clear that the suggested architecture provides a safe and effective way to protect files in cloud environments, balancing computational efficiency and user accessibility while ensuring robust cryptographic security.
Vandyala Yukthasri, Manchanpally Arun Kumar, Mohammad Ayaan et al.· Engineering & Technology· 0 citations
LegacyVault is a web-based digital will management system that integrates authentication with password hashing, AES document encryption, rule-based behavioral risk scoring, inactivity detection, and comprehensive audit logging within a single lightweight system.
J. A. Hampo, Kinyuy Marie-Noel Ngala, Fomukom Mark Nsah Tanyi et al.· International Journal Of Eng...· 0 citations
Due to the rapid increase in digital data and cloud-based systems, there is an increased requirement of securing the storage and transmission of data. Normal encryption makes things secret, but does not always prevent the tampering, nor does it monitor a suspicious activity. In this paper, I have proposed a secure file encryption system wherein blockchain and AI are used to identify abnormal activity. The system is secured in three areas: through encryption to ensure that data are confidential, blockchain to ensure that data cannot be altered, and AI to determine the risks of something. A symmetric encryption system uses passwords that encrypt files within the device of the user and ensures that the plaintext data is never left in the device. The hash of the encrypted file is saved on a blockchain registry, which allows verifying file operations without modifying them, and it is easy to detect any unauthorized modification. The AI-based anomaly detection module monitors activities of the system such as uploaded files, encryption time, access frequency and file tampering attempts to formulate a dynamic risk score. This will enable them to detect abnormal conduct and issue alerts in real-time. The experiment findings demonstrate that the proposed structure is effective in locating file tampering, monitoring suspicious activity, and ensuring safe storage of files. Encryption, blockchain, and AI together will create a lightweight, scalable, and intelligent cybersecurity solution to modern apps.
Madhav Kota, S. Sai, Mani Deepika et al.· International Conference Com...· 0 citations
The proposed system demonstrates the potential to serve as an effective and practical host-level security layer for strengthening cybersecurity resilience in academic server environments, although the evaluation was limited to three monitored servers and did not include advanced adversarial attack scenarios.
Access control to networked resources has been a longstanding challenge. The conventional solution relies on authentication mechanisms, which introduce additional complexities associated with Identity and Access Management (IAM). Such systems require user authentication, identity management, and authorization services, while also introducing security risks arising from vulnerabilities, misconfigurations, or implementation flaws. Furthermore, different file formats employ different mechanisms for ensuring authenticity and integrity through digital signatures. For example, PDF documents support the PDF Advanced Electronic Signature (PAdES) standard, whereas plain text files typically lack a standardized mechanism for embedding digital signatures. This paper proposes an architecture based on the Selective Disclosure JSON Web Token (SD-JWT) standard for securely sharing read-only files. The proposed architecture embeds cryptographic signatures and integrity protection directly into the shared resource, providing verifiable authenticity without relying on complex IAM infrastructures, such as centralized user databases, authentication services, or authorization mechanisms. By eliminating these components, the proposed solution simplifies deployment while maintaining strong security guarantees for the distribution of immutable resources.
The increasing use of digital learning resources has created a growing demand for secure ebook distribution systems. However, many existing ebook platforms remain vulnerable to unauthorized access, credential sharing, and uncontrolled digital content distribution. This study proposes an Authentication-Based Access Control Framework for secure web-based ebook distribution by integrating authentication, role-based authorization, session management, transaction validation, and ebook access protection within a unified security architecture.The research employed the Waterfall software development model consisting of requirement analysis, system design, implementation, testing, and deployment. The proposed framework was implemented using PHP and MySQL and evaluated through functional and security testing.The implementation results demonstrate that the developed system successfully manages 153 registered users, 151 ebook transactions, and six published ebook collections while maintaining controlled access to digital content. Functional testing achieved a 100% success rate across authentication, authorization, session validation, and ebook protection scenarios. The session management mechanism effectively prevented concurrent account usage and unauthorized access attempts.The novelty of this study lies in the integration of authentication, authorization, session validation, and ebook access protection within a dedicated framework specifically designed for ebook distribution. The proposed framework provides a practical, scalable, and cost-effective alternative for educational institutions and digital content providers seeking secure digital resource distribution without relying on complex Digital Rights Management (DRM) infrastructures.
