Analysis of modern LMS platforms in Kazakhstan: Structure, functionality, cybersecurity⋆ Berik Akhmetov1,†, Sergiy Gnatyuk2,*,†, Bakhytzhan Akhmetov3,† and Bauyrzhan Tynymbayev1 1 Yessenov University, 32 Microdistrict, 130000 Aktau, Kazakhstan 2 National Aviation University, 1 Liubomyra Huzara ave., 03058 Kyiv, Ukraine 3 Abai Kazakh National Pedagogical University, 13 Dostyk ave., 050010 Almaty, Kazakhstan Abstract Today, higher education institutions actively use information platforms (Learning Management System, LMS). The LMS platforms cover many functions in the educational process: organization of the learning process, content management, assessment and feedback, monitoring and reporting, communication and interaction, personalization of learning, administration, and user management. There are many up-to-date approaches to provide effective structure, wide functionality, and cybersecurity issues of LMS platforms. The main objective of this study is to analyze the modern and most popular LMS systems in Kazakhstan (Platonus, Univer, Canvas). The analysis has shown that the most effective system used by Kazakh universities is Canvas LMS. It provides several benefits that make it attractive to educational institutions and corporate users. But the cybersecurity issues should be studied deeply in future works, as it will provide anomaly detection in the information flows. Keywords cybersecurity, functionality, structure, LMS, education, academic information, AI, data leakage 1 1. Introduction The challenges of digital transformation facing higher education require the formation of new models of “digital” In the modern world, information technologies play a key organizations with new approaches to the implementation role in the functioning of educational institutions. Higher of all types of activities, basic and auxiliary processes, new education institutions actively use information platforms principles of interaction between participants in the (Learning Management Systems, LMS) to manage the educational process, and new digital services. Under these educational process, and store and process large amounts of conditions, the growing need for secure information data on students, teachers, and research. However, as the systems for educational institutions is extremely important volume and importance of data grows, the risk of and relevant, especially in the context of the increasing unintentional or malicious modification increases. This number of cyberattacks and stricter requirements for the raises the need to develop a secure LMS that can withstand protection of personal data. Preliminary studies have shown internal and external threats. that the existing LMS of educational institutions in Another key challenge is the processing and analysis of Kazakhstan is not always able to provide an adequate level large amounts of data generated in higher education of protection against modern threats, which is confirmed by institutions. Information about students, study programs, regular incidents of data leakage. lecturers, and learning processes is continuously accumulated in LMS. Innovative methods and tools need to 2. Review of the modern approaches be developed and applied to efficiently process and analyze this volume of information. Solving specific problems related to cybersecurity in The up-to-date LSM should include an optimal set of Kazakhstan’s educational institutions involves integrating security features, utilizing the latest advances in procedures and tools with used LMS. cybersecurity and AI to detect and prevent anomalies and First, research in the application of AI to detect threats to data security. This will ensure not only protection anomalies in LMS and other information systems shows the from external and internal cyberattacks but also improve significant potential of AI in detecting and preventing the efficiency of managing academic and administrative cyberattacks [1]. However, many of these approaches do processes, guaranteeing the integrity and confidentiality of not consider the specifics of LMS, which opens the door for academic information. our study. CSDP-2024: Cyber Security and Data Protection, June 30, 2024, Lviv, 0000-0001-9695-4543 (B. Akhmetov); 0000-0003-4992-0564 Ukraine (S. Gnatyuk); 0000-0001-5622-2233 (B. Akhmetov); 0000-0002-3213-1203 ∗ Corresponding author. (B. Tynymbayev) † These authors contributed equally. © 2024 Copyright for this paper by its authors. Use permitted under berik.akhmetov@gmail.com (B. Akhmetov); s.gnatyuk@nau.edu.ua Creative Commons License Attribution 4.0 International (CC BY 4.0). (S. Gnatyuk); bakhytzhan.akhmetov.54@gmail.com (B. Akhmetov); bauyrzhan.tynymbayev@gmail.com (B. Tynymbayev) CEUR Workshop ceur-ws.org ISSN 1613-0073 106 Proceedings Second, many of the project managers’ works mentioned universities [6]. This will make it possible to determine the above stand out by developing decision support systems real value and applicability of the proposed solutions. based on different mathematical apparatus for analyzing The eighth direction includes the formation of anomaly and cyberattack trait data. These approaches can recommendations based on the results obtained to improve be adapted and extended in our project to create more the degree of information security and cybersecurity of efficient and specialized anomaly detection tools. universities in Kazakhstan [7]. The third area is related to the integration of teacherless ML to analyze information from LMS databases. Techniques 3. Statement of a research problem such as ML can detect abnormal behavior patterns without first identifying the parameters of normal behavior. Current The global goal of the project is to develop and implement research emphasizes the importance of adapting these a prototype of a secure LMS for a higher education methods to the specificity of data in educational institution, incorporating AI techniques to detect anomalies environments [2]. in data, improve cybersecurity optimize educational The fourth direction of the research includes the processes, and increase their efficiency. development of mechanisms to ensure the security of the To achieve the global goal, it is necessary to start with LMS, using genetic algorithms to determine the most the study and analysis of the existing information flows of effective set of security features. Genetic algorithms allow the university and the formation of terms of reference, for optimization of the process of selecting protection including requirements for functionality, security, and means adapted to specific conditions and threats, which is interface of the system. Also, it is important to define the confirmed by studies in the field of cybersecurity [3]. indicators collected in LMS of Kazakhstan universities The fifth unique feature is the integration of the (Platonus, Univer, Canvas). anomaly detection system with the Power BI platform to From this viewpoint, the main objective of this study is provide the results of data processing in the form of digital to analyze the modern and most popular LMS systems in analytics and visualizations [4]. This will allow university Kazakhstan by criteria of structure, functionality, and administrations to effectively monitor and analyze the cybersecurity. security of information flows. The sixth direction of the research includes a 4. Main part of the research study comprehensive study of the level of personal data 4.1. Analysis of the main tasks of up-to-date cybersecurity in the developed prototype of the LMS [5]. This will make it possible to assess the effectiveness of the LMS platforms implemented security features and anomaly detection The LMS are key tools for organizing, managing, and mechanisms. supporting the learning process in educational institutions The seventh direction is related to the assessment of the and businesses. The main tasks of LMS systems include a effectiveness and potential of the application of the variety of functions that contribute to the effective training developed prototype in the real conditions of Kazakhstani and development of users. Below are the examples of architecture as well as the main tasks of LMS systems: Figure 1: Example of the LMS architecture [7] 107 The main tasks of LMS systems are the following: The main tasks of LMS systems cover a wide range of functions aimed at supporting and improving the learning 1. Organization of the learning process: process. From content organization and management to – Structuring of training courses: LMSs allow you assessment, monitoring, personalization, and to create, organize, and structure training courses, communication, LMSs provide a comprehensive approach to including modules, lectures, assignments, and other learning that allows for efficient use of resources and high learning materials. learning outcomes. – Learning planning: Provide the ability to schedule training sessions, including class schedules, and deadlines for assignments and 4.2. Cybersecurity of LMS systems assessments. The main aspects of cybersecurity of LMS systems include 2. Content management: the following issues: – Uploading and storing materials: LMSs provide the ability to upload and store a variety of learning 1. Authentication and authorization materials, such as videos, audio, texts, presentations, – Multi-factor authentication (MFA): The use of and more. multiple factors to verify a user’s identity – Content organization: Cataloging and (password, biometrics, tokens). organizing content to provide easy access and – Role-based access control (RBAC): Role-based navigation for users. access control that allows you to control who has 3. Assessment and feedback: access to what resources. – Testing and assessment: LMSs provide tools for 2. Data encryption creating tests, quizzes, and other methods of – Data at Rest Encryption: Use encryption assessing knowledge. algorithms to protect data stored on servers. – Automatic grading: Automating the process of – Data in Transit Encryption: Ensures the security grading tests and assignments, allowing you to of data transmitted over the network by using quickly and efficiently assess user knowledge. TLS/SSL protocols. – Feedback: Provide feedback to students on their 3. Protection against malicious software performance and progress. – Anti-virus software: Using antivirus solutions to 4. Monitoring and reporting: protect servers and endpoints from malware. – Progress tracking: LMSs allow you to track – Intrusion detection and prevention systems users’ progress in training courses, including (IDS/IPS): Monitoring network activity to detect and module completion, test scores, and assignment prevent unauthorized activity. completion. 4. Code and development security – Analytics and reporting: Generate reports on – Regular security testing: Conducting user activity, course performance, and other metrics penetration tests and code analysis to identify and to analyze the learning process. fix vulnerabilities. 5. Communication and interaction: – Secure software development: Utilizing security – Forums and discussions: LMSs provide tools for best practices during software development, organizing forums, discussion panels, and group including code reviews and static code analysis. discussions. 5. Access and identity management – Notifications and alerts: Notification systems to – Access control: Ensure that only authorized inform users about new materials, schedule users have access to sensitive data and functions. changes, and other important events. – Webinars and online meetings: Integration with Logging and monitoring: Maintaining detailed event webinar and online meeting tools. logs and continuous monitoring to detect anomalous 6. Personalization of learning: activity. – Individualized learning trajectories: LMSs can customize individualized learning paths for users 4.3. LMS in Kazakh Universities based on their needs and knowledge level. – Adaptive learning: The use of adaptive 1) Univer technologies to customize the learning process to The LMS Univer [8] is an important part of the the individual needs and progress of the user. educational infrastructure of some universities in 7. Administration and user management: Kazakhstan. This system (Fig. 2) is used to organize distance – User management: Registering, managing roles, learning and provides a wide range of tools for students and and access of users in different parts of the system. teachers. – User support: Providing technical support and assistance to LMS users. 108 Figure 2: Authorization screen in Univer LMS The main functions of the LMS Univer are the following: The LMS Univer combines the following structural modules: 1) Course management: – Creating and administering training courses,  Rector including uploading materials, organizing modules,  Vice-Rector and testing.  Dean – Integration with other platforms, such as Moodle, which allows you to effectively use both  Deputy Dean systems.  Education Department 2) Monitoring and evaluation:  Method Office – Track student progress, record grades, and  Distance learning analyze results.  Exams. Issues – Automatic grading of tests and assignments, which simplifies the work of teachers and increases  Accounting Department the accuracy of grades.  Testing Department 3) Communication and interaction:  Management – Tools for communication between students and  Registrar’s office teachers, including forums, chats, and video  Methodist conferencing.  Admissions Office – Possibility to organize webinars and online classes.  Human Resources 4) Administrative functions:  Student Affairs – Manage student records, class schedules, and  Academic department other administrative tasks.  Methodical department – Support for the work of the Admissions Office,  Head of Department including managing applications and registration of new students.  Teacher 5) Integration with other systems:  Schedule – Supports integration with platforms such as  Faculty rating Microsoft Teams, Google Meet, and other tools to  Bachelor ensure an integrated approach to learning.  Master – This system ensures high efficiency in organizing the educational process, allowing  Doctoral student teachers to focus on course content and students to  Monitoring learn.  Support Department  Additional semester  Mentor—Advisor  Administrator  Commandant  Reports  Handbooks. 109 2) Platonus universities and colleges to automate and optimize the The Platonus LMS [9] is one of the leading educational learning process. platforms in Kazakhstan (Fig. 3). It is widely used in Figure 3: Workspace screen in Platonus LMS The main features and benefits of the Platonus LMS are the The LMS Platonus combines the following structural following: modules: 1) Automation of the educational process:  Information about the university – Platonus allows you to automate the planning  Faculties and management of academic calendars, class  Specialties/GOP schedules, exams, and state certifications. – The system supports credit-based learning  Teachers technology, which ensures efficient distribution of  University staff academic disciplines and teacher workload.  Students 2) Course and content management:  Applicants – The platform provides the ability to create and  Parents administer training courses, upload training materials, and conduct tests.  Orders+Extracts from orders – Integration with other systems, such as Moodle,  Transcript provides a wide range of learning opportunities.  Graduates 3) Transparency and control:  Discipline catalogs – Maintaining electronic journals and information  Training cases on grades increases the transparency of the learning  Calendar process and reduces the risk of corruption. – The system supports appeals after exams and  Curricula tests, ensuring the fairness of assessment.  Learning streams 4) Monitoring and reporting:  Journal of grades and attendance – Platonus allows you to track students’ progress,  State certification and generate reports on their performance and  Records other statistical information. – Integration with a unified higher education  Summary sheets management system for centralized data  Summary sheets for the whole period accounting.  Schedule 5) Communication and learning support:  Testing – The system provides tools for communication  GPA calculator between students and teachers, including electronic  Preparatory Department messaging and document exchange. – It supports distance learning, allowing you to  Card file of trainees reach a wide audience and provide flexibility in the  Military department learning process.  Questionnaire for user – Platonus is also actively used in medical schools,  Reports where it is adapted to the specifics of medical  Publications of university teachers education, including the management of research activities and clinical practices.  Messages  Announcements 110  Library  SMS notification of system users  Online registration for disciplines  Integration with MS Active Directory  Composition of appeal commissions of  Integration with MS Teams examination sessions  Integration with Power BI  Employment of graduates  Generating reports (analytics) in Business  Distribution of graduates intelligence format  File storage  Checking written works (for borrowings)  Military records  Minor  Electronic bulletins (online signing of bulletins in  Settings the system)  Distribution of faculty disciplines  Intermediate certification online  Education documents constructor  Distribution of academic load  Integration with 1C: Accounting Office  Online registration of applicants  Online registration for applicants  Practical training of students  Testing for applicants  Control over the fulfillment of graduation works  Reading data from ID card  Integration with the system of checking for  Tasks. borrowings  Antiplagiarism/StrikePlagiarism/Turnitin 3) Canvas LMS  Online proctoring. Integration with AeroExam The Canvas LMS [10] was developed by Instructure  Online Proctoring. Integration with Examus company, it’s a powerful LMS (Fig. 4) that is actively used in many countries around the world, including Kazakhstan.  Dormitory Canvas LMS offers a wide range of tools and features that  Dormitory. Autodistribution of places help educational institutions effectively organize and  Service center for students/dropouts/ graduates manage the learning process. Figure 4: Workspace screen in Canvas LMS Canvas LMS is actively used in various educational institutions interact with the system from any device at any in Kazakhstan to organize distance learning, ensure the time. continuity of the educational process, and support modern 3) Personalization of learning: teaching methods. It helps universities and schools in – Canvas provides the ability to create individual Kazakhstan to implement innovative approaches to teaching, learning paths using adaptive learning features and personalized recommendations. providing students and teachers with all the necessary tools for 4) Interactive content: effective interaction and learning. – The system supports the creation of interactive The main features of Canvas LMS are the following: video content through Canvas Studio, which allows you to turn passive learning into active interaction. 1) Integration with other systems: 5) Analytics and reporting: – Canvas integrates seamlessly with student – Canvas provides advanced analytics and management systems (SIS) and hundreds of external reporting capabilities to help track student educational applications, making it a versatile performance and course effectiveness. solution for any type of educational institution. 6) Security and accessibility: 2) Mobile access: – The platform provides a high level of data – The platform supports mobile applications for security and meets international accessibility students, teachers, and parents, allowing users to standards, making it reliable and convenient for all users. 111 The LMS Canvas combines the following structural Table 1 modules: Comparison of LMS in Kazakhstan LMS/Features Univer Platonus Canvas  Integration with SIS, LTI, and other systems Flexibility +/- +/- +  Home page Free access - - +/-  Dashboard Wide use - + +  Reporting and analytics modules Scalability - +/- + Remote study - - +  Course creation tools Mobile version + + +  Modules for student management Integration +/- +/- +  Survey tools Cloud storage - - +  Modules for interacting with faculty Cybersecurity +/- +/- +  Assessment tools Update + + +  Modules for organizing distance learning  Integration with various external systems 5. Conclusions  Competency-Based Learning module A study of LMS systems most commonly used by  Tools for tracking students’ progress universities in Kazakhstan has shown that the most  Calendar effective system is Canvas LMS. It provides several benefits  Modules for conducting tests and exams that make it attractive to educational institutions and  Assessment module corporate users. Here are some of the key benefits of Canvas  Tools for providing feedback LMS:  Integration with video conferencing tools  Publish course materials  It is known for its simple and intuitive interface  User access and role management that makes it easy to use for both teachers and  File Storage students. The interface is easily adaptable to  Notifications and reminders different types of courses and teaching methods.  Collaboration tools  It has powerful mobile applications for Android and iOS that allow users to access their courses  Module for organizing group projects from anywhere. This ensures continuous access to  Tools for creating and managing quizzes learning materials and communication with  Analytics and reports on learning outcomes instructors and students.  Tools for communicating with students  Canvas LMS integrates seamlessly with a variety  TurnItIn support of external applications and tools through the LTI  Support for StrikePlagiarism (LTI 1.3). (Learning Tools Interoperability) standard. This includes integration with tools from Google, Comparative analysis of LMS platforms Microsoft, and many others, allowing you to create Table 1 provides a comparative analysis of the LMS comprehensive learning solutions. systems under consideration by the main characteristics  Provides teachers with a variety of tools for that are important for Kazakh and other universities. For the creating and editing learning materials. This comparison the following features were used: Flexibility includes video lectures, interactive exercises, (possibility to change by needs of the university), Free quizzes, discussion forums, and other types of access (availability of the free version of the platform), Wide learning content. use (use in various universities in Kazakhstan and other  Provides advanced analytics and reporting states), Scalability (possibility to increase number of users capabilities that allow you to track student and databases), Remote study (support of the distant progress, course performance, and assignment learning), Mobile version (availability of the iOS-based, completion. This data can be used to improve Android-based and other mobile platforms), Integration curricula and increase student success. (possibility to integration with other educational and research platforms as well as instrumental tools like Google  Supports a variety of learning formats, including Drive, Microsoft Office 365), Cloud storage (data saving in blended learning, fully online courses, and cloud storage), Cybersecurity (support the tools and traditional classroom learning. This allows procedures for data confidentiality, integrity, and institutions to easily adapt the system to their availability), Update (constantly being updated to integrate specific needs. the latest technologies and features to improve the learning  Provides a variety of tools for communication process). between students and teachers, such as messages, discussion forums, video conferencing, and group projects. This promotes active interaction and collaboration within the learning process.  Meets high standards of data security and privacy, ensuring the protection of users’ personal information. The system also meets various 112 regulatory requirements, making it a reliable Notes on Data Engineering and Communications choice for educational institutions in different Technologies 83 (2021). doi: 10.1007/978-3-030-80472- countries. 5_28. Further research will be devoted to a thorough analysis of Canvas LMS information flows, as well as cybersecurity issues of the platform (threats, vulnerabilities, risks, etc.). Acknowledgments This work is carried out within the framework of research grant №AP22787045 “Development of a prototype of a secure university information system using artificial intelligence methods to detect anomalies in data” (2024- 2026), funded by the Ministry of Science and Higher Education of the Republic of Kazakhstan. References [1] R. Chalapathy, S. Chawla, Deep Learning for Anomaly Detection: A Survey (2019). doi: 10.48550/arXiv.1901.03407. [2] L. Ruff, et al., A Unifying Review of Deep and Shallow Anomaly Detection, Proceedings of the IEEE 109(5) (2021) 756–795. doi: 10.1109/JPROC.2021.305 2449. [3] P. Harper, J. DeFranco, A Genetic Algorithm for Cybersecurity Decision Support, Appl. Sci. 11(9) (2021). [4] R. Sallam, et al., The Augmented Analytics and Business Intelligence Market (2021). [5] M. Alazab, et al., Cybersecurity and Artificial Intelligence: Recent Advances, Future Development, and Research Challenges (2020). [6] W. Huang, K. MacCallum, Security Issues in Online Learning and Countermeasures: A Systematic Review of the Literature (2020). [7] O. Zawacki-Richter, et al., Systematic Review of Research on Artificial Intelligence Applications in Higher Education—where are the Educators? (2019). doi: 10.1186/s41239-019-0171-0. [8] Z. Balogh, M. Turčáni, Possibilities of Modelling Web- Based Education Using IF-THEN Rules and Fuzzy Petri Nets in LMS, Communications in Computer and Information Science 251 (2011). doi: 10.1007/978-3- 642-25327-0_9. [9] Univer 2.0 LMS System. URL: https://univer.kaznu.kz/user/login [10] Platonus University LMS System. URL: https://platonus.kz/products/platonus-university [11] Canvas LMS System. URL: https://www.instructure.com/canvas [12] Z. Hu, et al., Method of Searching Birationally Equivalent Edwards Curves Over Binary Fields, Advances in Intelligent Systems and Computing 754 (2019) 309–319. doi: 10.1007/978-3-319-91008-6_31. [13] R. Odarchenko, et al., Traffic Offload Improved Method for 4G/5G Mobile Network Operator, 14th International Conf. on Advanced Trends in Radioelectronics, Telecommunications and Computer Engineering (TCSET-2018) (2018) 1051–1054. [14] Z. Hu, et al., Method for Cyber Threats Detection and Identification in Modern Cloud Services, Lecture 113