Habibullah, Yazid (2024) Analisis Keamanan Web Server Soaft Uir Dengan Menggunakan Metode Penetration Test. Other thesis, Universitas Islam Riau.

Text 193510478.pdf - Submitted Version Restricted to Registered users only Download (10MB) | Request a copy

Abstract

This research aims to identify and evaluate the security level of the Online Administration System for the Faculty of Engineering (SOAFT) at the Islamic University of Riau. Through penetration testing using OWASP ZAP, Burp Suite, Sudomy, and Sherlock, this study successfully identified several security vulnerabilities such as SQL Injection, Cross-Site Scripting (XSS), Cross-Site Request Forgery (CSRF), and weak security configurations. The research findings indicate that SOAFT UIR is susceptible to various types of cyberattacks. Based on these findings, this study provides comprehensive recommendations for improvement, including the implementation of Anti-CSRF tokens, the configuration of security headers (CSP, HSTS), and improvements in cookie management. Thus, this research is expected to raise awareness of the importance of cybersecurity and make a significant contribution to protecting SOAFT UIR's digital assets

Actions (login required)

View Item