Implementasi OWASP ZAP untuk Menguji Kerentanan Sistem Informasi Akademik (SIA Universitas Teknologi Yogyakarta Domain: sia.uty.ac.id)
DOI:
https://doi.org/10.21580/wjit.2024.6.1.25390Keywords:
OWASP, Academic Information System, Vulnerability Assessment, Web Application SecurityAbstract
The security of academic information systems is essential to maintaining the confidentiality, integrity, and availability of academic data. This study aims to identify web application vulnerabilities in an academic information system using the OWASP framework. Vulnerability testing identified three main findings: NGINX server misconfigurations, potential exposure of sensitive files, and the need to strengthen authentication and access controls. The identified misconfigurations and potential file exposure indicate security risks that require further verification to determine their actual exploitability and impact. Recommended mitigation measures include correcting server configurations, strengthening authentication mechanisms, and restricting unauthorized access. These findings highlight the importance of systematic vulnerability assessment and appropriate security controls to improve the protection and reliability of academic information systems.
Downloads
References
Bagas, N. A., Hendradi dan Sasongko, P. D., Bagas Adinugroho, N., Hendradi, P., & Sasongko, D. (2022). ANALISIS KEAMANAN E-LEARNING MENGGUNAKAN OPEN WEB APPLICATION SECURITY PROJECT (OWASP) (STUDI KASUS: MOCA UNIMMA). In Jurnal Informatika (Vol. 22).
Book, ·. (2023). AUDIT SISTEM INFORMASI TEORI, FRAMEWORK DAN STUDI KASUS MENGGUNAKAN FRAMEWORK. Https://www.researchgate.net/publication/366806651
Dewangkara, I. B. I., Santi, K. S., Putri, V. A., & Listartha, I. M. E. (n.d.). Penerapan Analisis Kerentanan XSS dan Rate Limiting pada Situs Web mtsn 3 Negara Menggunakan OWASP ZAP. In JURNAL INFORMATIKA UPGRIS (Vol. 8, Issue 1). Https://www.zaproxy.org/download/.
Elanda, A., & Lintang Buana, R. (2021). ANALISIS KUALITAS KEAMANAN SISTEM INFORMASI E-OFFICE BERBASIS WEBSITE PADA STMIK ROSMA DENGAN MENGGUNAKAN OWASP TOP 10 (Vol. 6, Issue 2).
Febriana, R. (n.d.). Blackbox Testing Sistem Informasi Absensi Pegawai Karawang Dengan Metode Top 10 Owasp Attack. Jurnal Ilmiah Wahana Pendidikan, 2022(12), 327–334. Https://doi.org/10.5281/zenodo.6945632
Hariyadi, D., & Nastiti, F. E. (2021a). Analisis Keamanan Sistem Informasi Menggunakan Sudomy dan OWASP ZAP di Universitas Duta Bangsa Surakarta. Jurnal Komtika (Komputasi Dan Informatika), 5(1), 35–42. Https://doi.org/10.31603/komtika.v5i1.5134
Hariyadi, D., & Nastiti, F. E. (2021b). Analisis Keamanan Sistem Informasi Menggunakan Sudomy dan OWASP ZAP di Universitas Duta Bangsa Surakarta. Jurnal Komtika (Komputasi Dan Informatika), 5(1), 35–42. Https://doi.org/10.31603/komtika.v5i1.5134
Irawadi Alwi, E., & Budi Ilmawan, L. (2021). Analisis Keamanan Sistem Informasi Akademik (SIAKAD) Universitas XYZ Menggunakan Metode Vulnerability Assessment. In Informatics Journal (Vol. 6, Issue 3).
Kerentanan Keamanan, A., Menggunakan, W., Aryanti, D., Dan, N., & Utamajaya, J. N. (2021). METODE OWASP (OPEN WEB APPLICATION SECURITY PROJECT) PADA DINAS TENAGA KERJA (Vol. 1, Issue 3).
Lee, D. (2023). Analisis Kerentanan Aplikasi Akademik Berbasis Website XYZ Menggunakan OWASP. 11(2).
Pendidikan, J., & Konseling, D. (n.d.). Penetration Testing pada Website Universitas Singaperbangsa Karawang Menggunakan Open Web Application Security Project (OWASP) (Vol. 4).
Riandhanu, I. O. (2022). Analisis Metode Open Web Application Security Project (OWASP) Menggunakan Penetration Testing pada Keamanan Website Absensi. Jurnal Informasi Dan Teknologi. Https://doi.org/10.37034/jidt.v4i3.236
Riyan Farismana, & Dian Pramadhana. (2023). Perbandingan Vulnerability Assesment Menggunakan Owasp Zap dan Acunetix Pada Sistem Informasi Repositori Politeknik Negeri Indramayu. Jurnal Teknik Informatika Dan Teknologi Informasi, 3(2), 26–32. Https://doi.org/10.55606/jutiti.v3i2.2853
Rochman, A., Rohian Salam, R., Sandi Agus Maulana Sekolah Tinggi Manajemen Ilmu Komputer, dan, & Likmi, S. (2021). DI RUMAH SAKIT XYZ. ANALISIS KEAMANAN WEBSITE DENGAN INFORMATION SYSTEM SECURITY ASSESSMENT FRAMEWORK (ISSAF) DAN OPEN WEB APPLICATION SECURITY PROJECT, 2(4).
Tinambunan, F., Junaidi, A., Mustika Rizki Informatika, A., Timur Jl Rungkut Madya No, J., Anyar, G., Gn Anyar, K., & Timur, J. (2024). PENGUJIAN SISTEM INFORMASI AKADEMIK UNIVERSITAS X MELALUI PENDEKATAN PENETRATION TESTING BERDASARKAN OWASP TOP 10. In Jurnal Mahasiswa Teknik Informatika (Vol. 8, Issue 1).
Yunus, M. (2019). ANALISIS KERENTANAN APLIKASI BERBASIS WEB MENGGUNAKAN KOMBINASI SECURITY TOOLS PROJECT BERDASARKAN FRAMEWORK OWASP VERSI 4. Jurnal Ilmiah Informatika Komputer, 24(1), 37–48. Https://doi.org/10.35760/ik.2019.v24i1.1988
Downloads
Published
How to Cite
Issue
Section
License
This work is licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International License.
The copyright of the received article shall be assigned to the journal as the publisher of the journal. The intended copyright includes the right to publish the article in various forms (including reprints). The journal maintains the publishing rights to the published articles. Authors are allowed to use their articles for any legal purposes deemed necessary without written permission from the journal with an acknowledgment of initial publication to this journal.
Licensing
This work is licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International License.
