Investigating Secure Implementation of Government Web based Systems in Tanzania
| dc.contributor.author | Kondoro, Aron | |
| dc.contributor.author | Mtebe, Joel | |
| dc.date.accessioned | 2019-04-15T18:42:49Z | |
| dc.date.available | 2019-04-15T18:42:49Z | |
| dc.date.issued | 2018-08 | |
| dc.description.abstract | The government of Tanzania has been adopting various webbased systems to improve public services to its citizens. With these systems being online, security and privacy have started to play a key role. Many systems use HTTP over Transport Layer Security (HTTPS) to secure their web front ends. However, many HTTPS implementations still suffer from several security and privacy problems. This study investigated the security of HTTPS implementations government webbased systems in Tanzania. Using a sample of 74 government web-based systems, an automated tool testssl was used to check for well-known HTTPS/SSL vulnerabilities, configuration mistakes, support for outdated and vulnerable protocols, and adherence to HTTPS best practices. Results show that 43% of web systems have serious HTTPS security issues due to vulnerabilities, and configuration mistakes. These issues can lead to system com- promise, disclosure of sensitive information, and loss of privacy to citizens. The study highlights these security issues that may have been overlooked and offers suggestions that may prevent them in the future | en_US |
| dc.identifier.uri | http://hdl.handle.net/20.500.11810/5183 | |
| dc.title | Investigating Secure Implementation of Government Web based Systems in Tanzania | en_US |
| dc.type | Journal Article | en_US |