article · East African Journal of Information Technology
This research introduces a dual-module machine learning framework designed to enhance vulnerability assessment for government electronic payment gateways, which are critical targets for cyberattacks. Current assessment methods are often manual and struggle with the increasing volume of vulnerabilities and live attack traffic. The framework unifies static prioritisation of disclosed vulnerabilities with runtime detection of malicious traffic. The static module uses TF-IDF and Bayesian-optimised XGBoost to prioritise vulnerabilities from a large dataset, achieving high accuracy and recall. The runtime module employs engineered features and Bayesian-optimised XGBoost to detect malicious HTTP requests, significantly improving attack recall compared to traditional rule-based systems. The models are interpretable and low-cost, developed specifically for contexts like the Tanzanian Government Electronic Payment Gateway.
This framework offers a scalable and cost-effective way to protect vital government financial systems and citizen data from cyber threats. By automating vulnerability assessment and attack detection, it helps secure critical infrastructure, particularly in resource-constrained settings, safeguarding public revenue and trust.
This research presents an applied, tested machine learning framework for enhancing the security of government payment gateways. It could be adopted by government agencies and public institutions responsible for electronic payment infrastructure, especially in developing regions, to improve their cyber defence capabilities. The framework appears to be near-market, offering a data-driven, reproducible model specifically developed for contexts like the Tanzanian Government Electronic Payment Gateway.
AI-generated from the published abstract. Always read the original work before citing.
Government electronic payment gateways concentrate public revenue and citizen data, making them high-value targets whose compromise carries national-security consequences. Yet vulnerability assessment in many public institutions remains manual, severity-driven, and unable to scale against both the growing volume of disclosed weaknesses and the continuous stream of live attack traffic. To address both vulnerability surfaces within a single coherent assessment layer, this paper presents a dual-module machine learning framework that unifies static prioritisation of disclosed vulnerabilities with runtime detection of malicious traffic. Methodologically, the static module prioritises disclosed vulnerabilities by pairing Term Frequency–Inverse Document Frequency (TF-IDF) text representation with Bayesian-optimised XGBoost multi-class classification over a corpus of 386,337 records, built by expanding National Vulnerability Database (NVD) records across their affected libraries using Open Source Vulnerabilities (OSV) data; the runtime module detects malicious HTTP requests using twelve engineered request features and Bayesian-optimised XGBoost binary classification on the CSIC 2010 dataset of 61,065 requests. On the key results, the static module attains a test accuracy of 0.8630, a macro-averaged F1-score of 0.8475, and High-tier recall of 0.9356; the runtime module attains an accuracy of 0.9101, an F1-score of 0.8879, and a ROC-AUC of 0.9796, raising attack recall from 0.087 under a rule-based signature baseline to 0.868. These results demonstrate that interpretable, low-cost learning models can strengthen vulnerability assessment for government payment infrastructure in resource-constrained settings, contributing the first data-driven, reproducible vulnerability-assessment model developed specifically for the Tanzanian Government Electronic Payment Gateway (GePG) context. As principal limitations, we identify the proxy-label limitation, on which the static module is trained against library-exposure breadth rather than a severity or exploitation measure, and the need for institution-specific validation on live GePG traffic, which together define the principal paths for refinement.
This page summarises published work. The authoritative version sits with the publisher.
DOI: 10.37284/eajit.9.2.5696
Is something wrong with this record? Report it or request removal.
Discussion
Have you built on this work, tried to replicate it, or seen it applied in practice? Share what you know. Verified researchers and MARATTO™ domain experts can open a discussion, and any member can reply. Contributions are reviewed before they appear.
No discussion yet. Open the first thread.
New to MARATTO™? Create a free account.
