A Cryptographic Protocol Evaluation Model for Internet Security and Compliance
Article content
Abstract
Cryptographic protocols are essential for ensuring data confidentiality, integrity, and authenticity in modern digital systems. However, many real-world cybersecurity breaches arise not from weaknesses in cryptographic algorithms, but from poor implementation practices, system misconfigurations, and limited use of system-generated data. This study proposes an integrated evaluation framework that combines cryptographic assessment with behavioral log analysis to enhance security in web hosting environments. The framework evaluates security across three dimensions: algorithmic strength, implementation quality, and compliance with standards, using a weighted composite scoring model to derive a unified security index. In addition, a predictive component based on logistic regression is incorporated to analyze system log data and identify potential threat patterns. A conceptual-analytical approach is adopted and demonstrated through a case study of TLS 1.3. The results indicate that implementation quality significantly influences overall security effectiveness, even with strong algorithmic design. The study highlights the importance of integrating technical, operational, and data-driven cybersecurity evaluation.
Keywords
Cryptographic protocols, information security, logistic regression, predictive modeling, web security
Downloads
References
F. Alshammari, M. Alenezi, and A. Agrawal, “A scalable framework for evaluating cybersecurity performance using composite metrics,” Computers & Security, vol. 140, p. 103890, 2025. [Online]. Available: https://doi.org/10.1016/j.cose.2024.103890
B. A. Al-Zahrani, “Adaptive deception framework with behavioral analysis for enhanced cybersecurity defense,” 2025. [Online]. Available: https://doi.org/10.48550/arXiv.2510.02424
M. Durumeric, J. Kasten, D. Adrian, J. A. Halderman, M. Bailey, and N. Weaver, “The matter of Heartbleed,” in Proc. ACM Internet Measurement Conf. (IMC), Vancouver, Canada, 2014, pp. 475–488. [Online]. Available: https://doi.org/10.1145/2663716.2663755
European Union Agency for Cybersecurity (ENISA), “ENISA threat landscape 2023,” Publications Office of the European Union, 2023. [Online]. Available: https://doi.org/10.2824/782573
S. Hans, S. Marsella, S. Hirschmann, and N. Gurney, “Security logs to ATT&CK insights: Leveraging LLMs for threat understanding,” 2025. [Online]. Available: https://doi.org/10.48550/arXiv.2510.20930
IBM, “What is cryptography?” Oct. 11, 2025. [Online]. Available: https://www.ibm.com/think/topics/cryptography
ISACA, “What is the CISM difference?” 2025. [Online]. Available: https://www.isaca.org/credentialing/cism
S. Jajodia, P. Liu, V. Swarup, and C. Wang, Eds., Cyber Situational Awareness: Issues and Research. New York, NY, USA: Springer, 2010. DOI: https://doi.org/10.1007/978-1-4419-0140-8.
B. Li, Y. Wang, P. Shi, H. Chen, and L. Cheng, “FPPB: A fast and privacy-preserving method based on the permissioned blockchain for fair transactions in sharing economy,” in Proc. IEEE TrustCom/BigDataSE, 2018. [Online]. Available: https://doi.org/10.1109/TrustCom/BigDataSE.2018.00189
C. C. Lo, C. C. Huang, and J. Ku, “A cooperative intrusion detection system framework for cloud computing networks,” Computers & Security, vol. 79, pp. 58–72, Nov. 2018. DOI: https://doi.org/10.1016/j.cose.2018.07.001
B. Lourenço, P. Adão, J. F. Ferreira, and M. Marques, “Structuring security: Cybersecurity ontologies and semantic log processing,” 2025. [Online]. Available: https://doi.org/10.48550/arXiv.2510.16610
K. A. McKay and D. Cooper, “Guidelines for the selection, configuration, and use of transport layer security (TLS) implementations,” NIST Special Publication 800-52 Rev. 2, National Institute of Standards and Technology, 2019. [Online]. Available: https://doi.org/10.6028/NIST.SP.800-52r2.
T. T. Ow and M. Zolkipli, “A review on secure communication protocols and cryptographic mechanisms for network security,” International Journal of Advanced Computer Science and Applications, vol. 12, no. 5, pp. 456–465, 2021. DOI: https://doi.org/10.14569/IJACSA.2021.0120554
E. Rescorla, “The transport layer security (TLS) protocol version 1.3,” IETF RFC 844. DOI: https://doi.org/10.17487/RFC8446
R. Robert, “A survey of intrusion detection systems and machine learning approaches for cybersecurity,” International Journal of Information Security, vol. 21, no. 4, pp. 567–584, 2022.
S. Rose, O. Borchert, S. Mitchell, and S. Connelly, “Zero Trust Architecture,” NIST Special Publication 800-207, National Institute of Standards and Technology, Gaithersburg, MD, USA, Aug. 2020. DOI: https://doi.org/10.6028/NIST.SP.800-207
M. F. Umer, M. Sher, Y. Bi, and A. Hussain, “Network intrusion detection using feature selection and machine learning algorithms,” Computers & Security, vol. 87, Art. 101568, 2019. DOI: https://doi.org/10.1016/j.cose.2019.101568
M. Victor, D. W. Devanayan, and R. Sasirekha, “Cryptography: Advances in secure communication and data protection,” E3S Web Conf., 2023. [Online]. Available: https://doi.org/10.1051/e3sconf/202339907010
Y. Zhang, J. Liu, T. Wang, and K. Zhao, “Multi-criteria decision-making for cybersecurity risk assessment using hybrid models,” IEEE Trans. Inf. Forensics Security, vol. 19, pp. 1123–1137, 2024. [Online]. Available: https://doi.org/10.1109/TIFS.2023.3321456
Article details
This work is licensed under a Creative Commons Attribution-NonCommercial 4.0 International License.
You must read and accept the copyright terms and conditions(click here for copyright terms).