Penerapan Keamanan Owasp Terhadap Aplikasi GTFW Pada Website Universitas Battuta
DOI:
https://doi.org/10.25008/jitp.v1i2.15Keywords:
Keamanan Owasp, Aplikasi GTFW, Website, keamanan, securityAbstract
In this study, we will test the penetration of GTFW-based applications that have been carried out, then obtain the results as a session management category vulnerability test, namely 3 that did not pass, namely cookie attributes, CSRF, and session timeout, then the vulnerability of the input validation category there was 1 that did not pass, namely stored XSS. The xplorin application has a cookie attribute vulnerability with a Medium vulnerability risk level. The xplorin application has a CSRF vulnerability with a Medium vulnerability risk level. The xplorin application has a session timeout vulnerability with a Low vulnerability risk level. The xplorin application has a stored XSS vulnerability with a Low risk level of vulnerability.
Downloads
References
Faris, ‘Afif, Muhammad. 2017. Implementasi keamanan Owasp Terhadap Aplikasi Berbasis GTFW. Skripsi. Program Studi Informatika Sekolah Tinggi Manajemen Informatika dan Komputer Akakom. Yogyakarta.
Nazwita. Ramadhani, Siti. 2017. Analisis Sistem Keamanan Web Server dan Database Server Menggunakan Suricata. Jurnal Teknologi Informasi, Komunkasi dan Industri SNTIKI. UIN Sultan Syarif Kasim. Riau.
Bella, Sri Setia. 2012. Membangun Aplikasi Pembelajaran Secure Web Programming Berbasis Owasp Top 10. Skripsi. STMIK AKAKOM. Yogyakarta.
Dr. Raden Teduh Dirgahayu, S.T., M.Sc., Yudi Prayudi, S.Si., M.Kom., dan Adi Fajaryanto. 2015. Penerapan Metode ISSAF dan OWASP versi 4 Untuk Uji Kerentanan Web Server. Universitas Islam Indonesia. Yogyakarta.
Elias Athanasopoulos, Vasileios P. Kemerlis, Michalis Polychronakis, dan Evangelos P. Markatos. 2012. ARC: Protecting against HTTP Parameter Pollution Attacks Using Application Request Caches. Department of Computer Science Columbia University. USA.
Fajri Rahmat, Ary Mazharuddin S., dan Hudan Studiawan. 2013. Sistem Pendeteksi dan Pencegah Peretasan Terhadap Aplikasi Berbasis Web dengan Teknik Web Application Firewall (WAF). Institut Teknologi Sepuluh Nopember (ITS). Surabaya.
OWASP. 2013. OWASP Testing Guide 4. https://www.owasp.org/index.php/OWASP_Testing_Guide_v4_Table_of_ Contents, 4 Oktober 2016, 08:01 PM WIB.
Symantec. 2016. A New Zero-Day Vulnerability Discovered Every Week in 2015. https://www.symantec.com/content/dam/symantec/docs/infographics/istrzero-day-en.pdf, 4 Oktober 2016, 07:02 PM WIB.
OWASP. 2016. OWASP Risk Rating Methodology. https://www.owasp.org/index.php/OWASP_Risk_Rating_Methodology, 9 Agustus 2017, 7:27 AM WIB.
S. Dave, B. Trivedi, and J. Mahadevia, “Application Profiling based on Attack Alert Aggregation,”
Glob. J. Comput. Sci. Technol. Network, Web Secur., vol. 13, no. 16, pp. 20–30, 2013.
W. I. E. Nvironment, “Efficacy Of Attack Detection Capability Of IDPS Based On ITSD Eployment In Wired and Wireless Environtment,” Int. J. Netw. Secur. Its Appl., vol. 5, no. 2, pp. 103–115, 2013.
T. Oisf et al., “Known issues & missing features About Suricata,” pp. 1–2.
J.M. Kizza (springer-Verlag London), Computer Communications and Networks. 2013.
A. M. R. Wajong, “Kerentanan yang dapat terjadi dijaringan komputer umumnya,” ComTech, vol. 3, no. 9, pp. 474–481, 2012.
M. Anif, S. Hws, and M. D. Huri, “Penerapan Intrusion Detection System ( IDS ) dengan metode Deteksi Port Scanning pada Jaringan Komputer di Politeknik Negeri Semarang,” J. Tele, vol. 13, no. Maret, pp. 25–30, 2015.
B. S. Candra, “Analisis Penerapan Keamanan Menggunakan IDN dan Honeypot,” Fak. Ilmu Komput., vol. 1, no. Mei, pp. 1–23, 2015.
A. Dan, I. Honeypot, and M. Honeyd, “Analisis dan Implementasi Honeypot menggunakan Honeyd sebagai Alat Bantu Pengumpulan Informasi Aktivitas Serangan pada Jaringan,” J. Jarkom, vol. 1
Downloads
Published
Issue
Section
License
Copyright (c) 2022 Baginda Harahap
This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.
How to Cite
