Sniffing Risk Assessment in Campus Wi-Fi Infrastructure Using ISO/IEC 27001 and the KAMI Index
DOI:
https://doi.org/10.59261/jequi.v8i5.413Keywords:
Information Security Governance, ISO/IEC 27001, KAMI Index, Sniffing Attack, Wi-Fi securityAbstract
Background: Campus Wi-Fi networks are vulnerable to sniffing attacks because of their open-access patterns, diverse user devices, and limited security monitoring.
Objective: This study assesses sniffing risks in a campus Wi-Fi infrastructure by integrating ISO/IEC 27001 control domains and the Indonesian Information Security Index (KAMI).
Methods: A quantitative assessment was conducted using questionnaires administered to five network security experts and 158 students who use the Wi-Fi network. Expert responses were analyzed using Failure Mode and Effects Analysis (FMEA) to identify and prioritize security risks. User responses were assessed through a maturity-level evaluation of various Wi-Fi security aspects using a questionnaire mapped to the relevant ISO/IEC 27001 and KAMI Index domains.
Results: The FMEA identified Network Risk Management and Log Recording as having the highest risk priority, with a Risk Priority Number (RPN) of 576, followed by Communications Security, with an RPN of 360. The maturity assessment of Wi-Fi security aspects indicates that all aspects have reached the Defined stage; however, aspects such as Wi-Fi Technology, Performance, Overload, and Stability remain at the Repeatable stage, with an average score of 2.82.
Conclusion: The combined expert-judgment and maturity assessments indicate that network risk management, log recording, and communications security should receive priority attention. The findings support regular log review, centralized logging, formal incident-response and escalation procedures, and improved capacity and performance monitoring as risk-mitigation priorities. However, these findings should be interpreted as assessment-based recommendations rather than as evidence that the technical controls were directly tested.
Downloads
References
Afolalu, O., & Tsoeu, M. S. (2025). Cybersecurity In Higher Education Institutions: A Systematic Review Of Emerging Trends, Challenges And Solutions. Future Internet, 17(12), 575.
Ahmead, M., El Sharif, N., & Abuiram, I. (2024). Risky Online Behaviors And Cybercrime Awareness Among Undergraduate Students At Al Quds University: A Cross Sectional Study. Crime Science, 13(1), 29.
Alamleh, H., Estremera, L., Arnob, S. S., & Alqahtani, A. A. S. (2025). Advanced Persistent Threats And Wireless Local Area Network Security: An In-Depth Exploration Of Attack Surfaces And Mitigation Techniques. Journal Of Cybersecurity And Privacy, 5(2), 27.
Alexei, L. A. (2021). Cyber Security Strategies For Higher Education Institutions. Journal Of Engineering Science, 4, 74–92. Https://Doi.Org/Https://Doi.Org/10.52326/Jes.Utm.2021.28(4).07
Batista, L. M., Gomes, H., & Almeida, J. R. (2024). A Study Of Security Issues Of Eduroam Networks In Portugal. 13th Symposium On Languages, Applications And Technologies (SLATE 2024), 11–14.
Brierley, C., Arief, B., Barnes, D., & Hernandez-Castro, J. (2021). Industrialising Blackmail: Privacy Invasion Based Iot Ransomware. Nordic Conference On Secure IT Systems, 72–92.
Bwiino, K., Mayoka, G. K., Nkamwesiga, L., & Nyamadi, M. (2026). A Systematic Literature Review Of Information Security Practices In Higher Education Contexts. IET Information Security, 2026(1), 6324508.
Chatzisofroniou, G., & Kotzanikolaou, P. (2025). Security Analysis Of The Wi-Fi Easy Connect: G. Chatzisofroniou, P. Kotzanikolaou. International Journal Of Information Security, 24(2), 74.
Chourasiya, L., Khatri, S., Lilhore, U. K., Simaiya, S., Alroobaea, R., Baqasah, A. M., Alsafyani, M., & Khan, M. (2025). Advanced System Log Analyzer For Anomaly Detection And Cyber Forensic Investigations Using LSTM And Transformer Networks. Journal Of Cloud Computing, 14(1), 60.
El-Taj, H., & Miralam, L. (2024). Network Sniffing And Its Consequences: A Comprehensive Survey. International Journal Of Computer Science And Information Security (IJCSIS), 22(3).
Folorunso, A., Mohammed, V., Wada, I., & Samuel, B. (2024). The Impact Of ISO Security Standards On Enhancing Cybersecurity Posture In Organizations. World Journal Of Advanced Research And Reviews, 24(1), 2582–2595.
Gichubi, P. M., Maake, B., & Chweya, R. (2024). Cybersecurity Framework For Kenyan Universities In Conformity With ISO/IEC 27001: 2022 Standard. Open Access Library Journal, 11(8), 1–16.
Hasibuan, M. S. (2024). Analisis Tingkat Kematangan Keamanan Informasi Menggunakan Indeks KAMI Pada Tiyuh Pulung Kencana. Journal Of Digital Literacy And Volunteering, 2(1), 31–37. Https://Doi.Org/10.47747/Jpsii.V2i2.548
Jagannath, R. O., & Jain, A. K. (2024). Browser‐In‐The‐Middle Attacks: A Comprehensive Analysis And Countermeasures. Security And Privacy, 7(5), E410.
Jevelin, J., & Faza, A. (2023). Evaluation The Information Security Management System: A Path Towards ISO 27001 Certification. Journal Of Information Systems And Informatics, 5(4), 1240–1256.
Jin, H. J., Ghashghaei, F. R., Elmrabit, N., Ahmed, Y., & Yousefi, M. (2024). Enhancing Sniffing Detection In Iot Home Wi-Fi Networks: An Ensemble Learning Approach With Network Monitoring System (Nms). IEEE Access, 12, 86840–86853.
Kampourakis, V., Chatzoglou, E., Kambourakis, G., Dolmes, A., & Zaroliagis, C. (2022). Wpaxfuzz: Sniffing Out Vulnerabilities In Wi-Fi Implementations. Cryptography, 6(4), 53. Https://Doi.Org/Https://Doi.Org/10.3390/Cryptography6040053
Khan, N. F., Ikram, N., Murtaza, H., & Javed, M. (2023). Evaluating Protection Motivation Based Cybersecurity Awareness Training On Kirkpatrick’s Model. Computers & Security, 125, 103049.
Lin, Y., Li, Q., Lyu, D., & Wang, X. (2022). A Review Of Wi-Fi-Based Traffic Detection Technology In The Field Of Intelligent Transportation Systems. Buildings, 12(4), 428.
Moamin, S. A. H., Abdulhameed, M. K., Al-Amri, R. M., Radhi, A. D., Naser, R. K., & Pheng, L. G. (2025). Artificial Intelligence In Malware And Network Intrusion Detection: A Comprehensive Survey Of Techniques, Datasets, Challenges, And Future Directions. Babylonian Journal Of Artificial Intelligence, 2025, 77–98.
Pahlavan, K., & Krishnamurthy, P. (2021). Evolution And Impact Of Wi-Fi Technology And Applications: A Historical Perspective. International Journal Of Wireless Information Networks, 28(1), 3–19. Https://Doi.Org/K. Pahlavan And P. Krishnamurthy, “Evolution And Impact Of Wi-Fi Technology And Applications: A Historical Perspective,” Int. J. Wirel. Inf. Networks, Vol. 28, No. 1, Pp. 3–19, 2021.
Palamà, I., Amici, A., Bellicini, G., Gringoli, F., Pedretti, F., & Bianchi, G. (2023). Attacks And Vulnerabilities Of Wi-Fi Enterprise Networks: User Security Awareness Assessment Through Credential Stealing Attack Experiments. Computer Communications, 212, 129–140.
Pietraru, R. N., Andrei, Ş., Nicolae, M., & Merezeanu, D. M. (2021). A Wifi Sniffing Solution For Safe Return To Classes. 2021 12th International Symposium On Advanced Topics In Electrical Engineering (ATEE), 1–5. Https://Doi.Org/10.1109/ATEE52255.2021.9425125
Prastowo, S. L., & Sudiana, D. (2024). Recommendations For A Framework For Handling Security Incidents Of Electronic-Based Government Systems (SPBE) Using The ISO/IEC 27035: 2023 Standard. JINAV: Journal Of Information And Visualization, 5(1), 107–114.
Pratiwi, H. A., & Wulandari, L. (2021). Evaluasi Tingkat Kesiapan Keamanan Informasi Menggunakan Indeks Keamanan Informasi (Indeks KAMI) Versi 4.0 Pada Dinas Komunikasi Dan Informatika Kota Bogor. Journal Of Industrial Engineering & Management Research, 2(5), 146–163. Https://Doi.Org/Https://Doi.Org/10.7777/Jiemar.V2i5.196
Rahman, R., Ramli, N., & Rahmadani, A. P. (2026). Analisis Keamanan Jaringan Wi-Fi Publik Terhadap Serangan Evil Twin. Jurnal Riset Sistem Informasi, 3(2), 35–38.
Riggs, H., Tufail, S., Parvez, I., Tariq, M., Khan, M. A., Amir, A., Vuda, K. V., & Sarwat, A. I. (2023). Impact, Vulnerabilities, And Mitigation Strategies For Cyber-Secure Critical Infrastructure. Sensors, 23(8), 4060.
Savitri, R., Firmansyah, F., Dworo, D., & Hasibuan, M. S. (2024). Information Security Measurement Using INDEX KAMI At Metro City. Journal Of Applied Data Sciences, 5(1), 33–45. Https://Doi.Org/Https://Doi.Org/10.47738/Jads.V5i1.152
Sinthuja, U., & Sridevi, R. (2024). Selfish Carrier Monitoring In Wifi Using Distributed Sniffers. Arxiv Preprint Arxiv:2407.10997. Https://Doi.Org/Https://Doi.Org/10.48550/Arxiv.2407.10997
Standardization, I. O. For, & Commission, I. E. (2022). ISO/IEC 27001:2022 Information Security, Cybersecurity And Privacy Protection — Information Security Management Systems — Requirements (3rd Ed.). International Organization For Standardization. Https://Www.Iso.Org/Standard/27001
Tan, S., Ren, Y., Yang, J., & Chen, Y. (2022). Commodity Wifi Sensing In Ten Years: Status, Challenges, And Opportunities. IEEE Internet Of Things Journal, 9(18), 17832–17843. Https://Doi.Org/10.1109/JIOT.2022.3164569
Vukšić, M., Ćelić, J., Panić, I., & Cuculić, A. (2025). Exploiting Maritime Wi-Fi: Practical Assessment Of Onboard Network Vulnerabilities. Journal Of Marine Science And Engineering, 13(8), 1576.
Waqas, M., Tu, S., Halim, Z., Rehman, S. U., Abbas, G., & Abbas, Z. H. (2022). The Role Of Artificial Intelligence And Machine Learning In Wireless Networks Security: Principle, Practice And Challenges. Artificial Intelligence Review, 55(7), 5215–5261.
Wong, D. Q. S., & Tan, C. E. (2025). Enhanced Load-Aware Handover Algorithm For High-Density IEEE 802.11 ESS Networks. ECTI Transactions On Computer And Information Technology (ECTI-CIT), 19(4), 635–644.
Zheng, R., Ma, H., Wang, Q., Fu, J., & Jiang, Z. (2021). Assessing The Security Of Campus Networks: The Case Of Seven Universities. Sensors, 21(1), 306. Https://Doi.Org/Https://Doi.Org/10.3390/S21010306
Downloads
Published
Issue
Section
License
Copyright (c) 2026 Rut Ramayanti Hutomo, Roy Rudolf Huizen, Dandy Pramana Hostiadi
This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.
Authors who publish with this journal agree to the following terms:
- Authors retain copyright and grant the journal right of first publication with the work simultaneously licensed under a Creative Commons Attribution-ShareAlike 4.0 International (CC-BY-SA). that allows others to share the work with an acknowledgement of the work's authorship and initial publication in this journal.
- Authors are able to enter into separate, additional contractual arrangements for the non-exclusive distribution of the journal's published version of the work (e.g., post it to an institutional repository or publish it in a book), with an acknowledgement of its initial publication in this journal.
- Authors are permitted and encouraged to post their work online (e.g., in institutional repositories or on their website) prior to and during the submission process, as it can lead to productive exchanges, as well as earlier and greater citation of published work.
