https://ir-library.mmust.ac.ke/xmlui/handle/123456789/33 2026-08-01T14:33:35Z 2026-08-01T14:33:35Z WERE, MARTHA DAANA https://ir-library.mmust.ac.ke/xmlui/handle/123456789/3726 2026-07-16T11:31:56Z 2024-11-01T00:00:00Z

SECURITY-BASED FRAMEWORK FOR VIRTUALIZED ENVIRONMENTS WERE, MARTHA DAANA As cloud computing has expanded, ensuring the security of virtualized environments has become increasingly crucial, yet these environments remain susceptible to sophisticated threats such as hypervisor vulnerabilities, Virtual Machine (VM) escapes, inter-VM attacks, Denial of Service attacks, and malware injections. While virtualization technologies offer scalable and highly available services, they also introduce new security risks. These issues are particularly concerning as many enterprises have shifted to online services and remote work. Therefore, the purpose of this study was to develop a robust framework that enhances the security of virtual environments. The study was guided by the following objectives: to investigate the existing security issues and security frameworks in a virtualized environment; to assess the existing solution for security issues in virtualized environments; to develop a security-based framework for virtualized environments and to test and validate the developed framework. Design science integrating mixed-methods, research approaches incorporating systematic literature reviews, surveys, interviews, and simulation studies were used in the study. The study population comprised IT professionals (20) across various industries, including finance, healthcare, technology, and government. A stratified random sampling procedure was used to ensure diverse representation, resulting in a sample size of 385 survey respondents and 20 interview participants. Data collection tools included structured questionnaires for surveys, semi-structured interview guides, and simulation environments configured using C++ to generate and analyze performance metrics. The validity of these tools was established through pilot testing and expert reviews (virtualization technology users). The security-based framework for virtualized environments (SBFVE) developed has the following components: micro-hypervisor layer, VM isolation mechanism, AI-Driven threat, detection system, inter-VM communication security, continuous monitoring and auditing tools and patch management system. Key findings revealed that the proposed framework achieved a detection rate of 92.8%, outperforming existing solutions. The response time was reduced to 25 seconds, compared to 30, 28, and 35 seconds for the existing solutions. System performance impact was minimized to 6.6%, significantly lower than the (10%, 8%, and 12%) observed in current solutions. False positive rates were also reduced to 2.2%, with existing solutions ranging from 3.5% to 5%. Resource utilization metrics, including CPU, memory, and network utilizations, were optimized at 73%, 63.4%, and 61.6% respectively. Interviews highlighted challenges such as high implementation costs, complexity of tools, and lack of skilled personnel, with 75% of participants emphasizing the need for continuous updates and effective integration strategies. This study therefore, demonstrated the potential of an advanced security framework to significantly improve cloud security metrics, thereby providing a more resilient infrastructure against emerging threats. The study recommends ongoing training for IT personnel, regular updates and patch management, enhanced network segmentation, and increased focus on developing user-friendly security tools and future research to focus on the integration of machine learning algorithms to further enhance detection rates and reduce false positives, as well as longitudinal studies to assess the long-term efficacy of the proposed framework in dynamic cloud environments

2024-11-01T00:00:00Z Simiyu, Joseph Mukhwana https://ir-library.mmust.ac.ke/xmlui/handle/123456789/3678 2026-07-14T10:09:56Z 2024-10-01T00:00:00Z

FRAMEWORK FOR EMERGING E-HEALTH SYSTEMS SURVIVABILITY THREATS IN KENYA: CASE OF MOI TEACHING AND REFERRAL HOSPITAL. Simiyu, Joseph Mukhwana The integration of e-health presents numerous medical advantages; however, the safeguarding of these valuable data sources is inadequate. They remain vulnerable to significant threats and attacks. Moreover, the sheer volume of medical data necessitates technological solutions, yet the failure of e health systems to prioritize security survivability renders them more susceptible to compromise. The phenomenon of remote work persists as a contemporary reality; malicious actors are probing e-health vulnerabilities to execute attacks, largely due to insufficient information security personnel and inadequate systems frameworks. The multitude of security concerns may lead the system to experience further degradation, ultimately undermining its ability to reassure users regarding their mission objectives. In spite of initiatives aimed at ensuring the resilience and security of Kenya's cyber space, ongoing attacks continue to threaten the confidentiality, credibility, reliability, and availability of e health services for both providers and users. The emergence of e-health platforms has concurrently given rise to novel forms of crime, which are intricately linked to the advent of various modern technologies. Consequently, it is imperative that we focus on the resilience of systems in the aftermath of an attack, rather than solely concentrating on security measures. Crimes within systems are proliferating globally, and a significant number of internet users have, at some juncture, succumbed to various forms of criminal activity. Many individuals endure hardship in silence, particularly within healthcare institutions, as they are apprehensive about potential repercussions from the public. Furthermore, the risks associated with criminal activities targeting healthcare equipment and electronic healthcare technology are widespread globally, presenting significant opportunities to enhance clinical outcomes and revolutionize the provision of care. This study developed a framework for enhancing system survivability in the context of combating information systems crime within the health sector in Kenya. This research study aimed to delineate the principal threats and vulnerabilities to system survivability, formulate a framework for survivability and security, and validate its applicability for integration within the health sector in Kenya to facilitate autonomous systems. The study employed a descriptive research design. The demographic under examination Composed of personnel from the hospitals. The research concentrated on senior and mid-tier IT personnel, as well as heads of various departments within the hospital. The hospital accommodates a total of 2,056 individuals. This research employed a convenience sampling method. The study sample comprised 332 employees drawn from various departments within the hospital, as determined by the Fischer formula. Primary data was received through a structured a questionnaire. The findings were articulated through the utilization of frequency tables and percentages. Correlation and simple regression analysis were employed to elucidate the straightforward relationships between individual constructs and the dependent variable. Structural Equation Modelling (SEM) was employed for the evaluation of the framework. The research indicated that Management commitment exerted a moderate effect on System survivability (r = .338, p = .000), while organizational factors demonstrated a robust impact on system security survivability (r = .604, p = .000). Conversely, IT policies revealed a weaker influence on security and survivability (r = .209, p = .028), whereas IT literacy showed a significant effect on security and survivability (r = .642, p = .000). This research deepens understanding in the domain of information system survivability and highlights areas where knowledge is lacking, paving the way for future investigations. The research provides a deeper understanding of critical matters related to the resilience of health facilities. The research further empowers public sector policymakers to critically reassess and evaluate current security strategies, aiming to establish a robust IT-based security infrastructure for prospective applications. The research suggests that it is necessary to observe the functioning of security and survivability systems, alongside implementing ongoing awareness and training initiatives on security for all personnel.

2024-10-01T00:00:00Z LUSWETI, SAMUEL WAFULA https://ir-library.mmust.ac.ke/xmlui/handle/123456789/3666 2026-07-13T11:45:16Z 2024-10-01T00:00:00Z

ENHANCED BIO-INSPIRED ANT COLONY OPTIMIZATION ALGORITHM FOR FAULT-TOLERANT NETWORKS LUSWETI, SAMUEL WAFULA This this presents a summary of introduction, literature review, methodology, research finding, conclusion and recommendations. Today, computer networks form a very important part of institutions and organizations helping them to run their operations swiftly and on time while keeping them up to date with the current changing technologies in the market. The networks are also used by many people to access resources on the internet and also for communication purposes. This has made the world to be indeed a global village. However, networks may be intentionally deterred by the introduction of forced physical loops in the switches, which is common in institutions of higher learning and organizations. As a result of these network loops, packets may be got up in cycles limiting communication process due to network convergence issues. Secondly, the research sought a way of addressing the convergence issues in trying to solve network problems in ACO. To do this, the study aimed to understand the number of artificial ants needed to find an optimal solution in the search space. MMAS, RankedAS and EliteAS were studied for optimal number of ants needed. It was found that the optimal number depended largely on various factors including 1) type of ACO algorithm in use, 2) The complexity of the problem under study, and 3) The ratio of the number of specialized ants to that of normal ants. Lastly, the study aimed at establishing the functionality of current network systems, evaluating network faults, and developing an enhanced model based on the existing ACO model to help solve these network issues. The new model developed suggests ways of solving packet looping and traffic problems in common computer networks. The study used simulation method to carry out research whereby an enhanced algorithm was developed and used to monitor and control the flow of packets over the computer network. The research employed experimental research design that involved the development of a computer model and data was collected from the model. Packet traffic was monitored by the Cisco Packet Tracer tool. In this tool, a network of four computers, a router and two switches was and used to simulate a real network system. Data collected from the simulated network was analyzed using the ping tool, direct observation of the movement of packets in simulation mode and message delivery status displayed by the Cisco Packet Tracer in the real time mode. In the experiment, a control was used to show the behavior of the network in ideal conditions without varying any parameters. Here, all the packets sent were completely and correctly received. Secondly, when a loop was introduced in the network it was found that the network was adversely affected because none of the packets sent by the computers on the network was delivered due to stagnation. In the third experiment, still, with the loops on, a new Enhanced ACO (EACO) model was introduced in the Cisco Packet Tracer used to simulate the network. In this experiment, all the packets sent were completely and correctly delivered just like in the control experiment. In summary, this research found that when conditions of networks are varied for instance introduction of forced physical loops in computer networks, the computers lose communication. This is a common situation in colleges and universities where some students forcefully introduce loops into networks affecting the communication process. However, with a new EACO model, it was found that the problem can be solved where the looping packets can still be rerouted to their destination hence no effect on the communication process. From this research, we can conclude that EACO model can be applied in computer network systems especially dynamic systems having many users to solve the common problem of network loops. However, this research has some challenges in that the algorithm must be run on all computers on the network for optimal results.

2024-10-01T00:00:00Z MOGAKA, SARAH KEMUNTO https://ir-library.mmust.ac.ke/xmlui/handle/123456789/3399 2026-04-15T10:48:43Z 2023-06-01T00:00:00Z

EFFECTIVENESS OF USABILITY LEARNING MODELS AND USER SATISFACTION IN UNIVERSITIES IN NAKURU COUNTY, IN KENYA. MOGAKA, SARAH KEMUNTO Effectiveness has been increasingly recognized as a significant quality dimension to determine the usability of mobile applications. Mobile learning applications on the other hand are different in many ways from those innovations due to the mobility nature of mobile devices. Learning institutions in Kenya especially, universities have implemented these scientific innovations as alternative approach to teaching and learning. The uptake was accelerated more with the advent of the Corona Virus pandemic which saw the education sector literally close down. As a way of having their students back to class, majority of the Universities in Nakuru County, adopted the online technologies. Despite the adoption of technologies, there are many complaints from the users, the students, on many inefficiencies coming along with the online learning platform. This puts to doubt the quality of user satisfaction of such technologies in enhancing teaching and learning processes. However, the advent of mobile technologies in learning context has increased the requirements for evaluating the effectiveness of usability learning models to align with user satisfaction in mobile learning applications. Existing metrics concentrates on ease to use, efficiency, reliability and security of the software which has a shortfall since the user is not subjected to contribute in the mobile application development. Even though mobile learning has been studied from different aspects of pedagogy environment and technology acceptance, there is little scientific and published research on effectiveness of usability of mobile learning applications. To fill up the gap, in this study, effectiveness of usability learning models and user satisfaction was established. The main objective of this study was to evaluate the effectiveness of usability learning models on user satisfaction in universities in Nakuru County, Kenya. To serve this purpose, survey questionnaires were issued to sample of university students in the ICT department in Nakuru County in Kenya. The analysis of structured item were mainly done by multiple regression and multivariate analysis from the results of the descriptive statistical tool. The findings from this study contributes to the body of knowledge by coming up with a number of usability guidelines as a significant quality dimension for the design of usable applications in mobile learning that can help improve user satisfactions and reductions in training costs. The decrease in costs attracts many researchers, interface designers and project managers to employ the usability assessment attributes when designing the interfaces for mobile learning applications. The study recommends that given the kind of empirical evidence from the university to consider having a system that is designed with memorability attributes to be considered for the clients to come back to the system from time to time hence improved user satisfaction.

2023-06-01T00:00:00Z