Article Per Year (5 Year)
p-Index From 2021 - 2026
0.408
P-Index
This Author published in this journals
All Journal TIN: TERAPAN INFORMATIKA NUSANTARA Bulletin of Computer Science Research
Lukman Rosyidi
Sekolah Tinggi Teknologi Terpadu Nurul Fikri, Depok
Aerospace Engineering Arts Automotive Engineering Biochemistry, Genetics & Molecular Biology Chemical Engineering, Chemistry & Bioengineering Civil Engineering, Building, Construction & Architecture Computer Science & IT Decision Sciences, Operations Research & Management Dentistry Earth & Planetary Sciences Economics, Econometrics & Finance Energy Engineering Environmental Science Health Professions Immunology & microbiology Industrial & Manufacturing Engineering Law, Crime, Criminology & Criminal Justice Materials Science & Nanotechnology Mathematics Mechanical Engineering Medicine & Pharmacology Neuroscience Nursing Physics Social Sciences Veterinary Other

Published : 2 Documents Claim Missing Document
Claim Missing Document
Check
Articles

Found 2 Documents
Search

 1 
Analisis Komparatif OWASP ZAP dan Nuclei pada Vulnerability Scanning Non-Intrusive Aplikasi Web E-Commerce Publik Bambang Harie Wiyono; Rintan Madi Sari; Lukman Rosyidi
TIN: Terapan Informatika Nusantara Vol 7 No 1 (2026): June 2026
Publisher : Forum Kerjasama Pendidikan Tinggi (FKPT)

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.47065/tin.v7i1.10143

Abstract

This study discusses a comparative analysis of non-intrusive vulnerability scanning results on public e-commerce web applications using OWASP ZAP and Nuclei. This study is not intended to directly prove vulnerability exploitation, but rather to evaluate the characteristics of scanning outputs based on the number of aggregate findings, unique findings after deduplication, CVSS v3.1 severity distribution, OWASP Top 10 mapping, overlap, and priority findings that require manual validation. Testing was conducted using a black-box and non-intrusive approach on five targets coded E1 to E5. The coding was applied to maintain testing ethics on public targets, while target selection was based on open web application access, relevance to the e-commerce context, and variations in service characteristics that could be observed externally. The results showed 83 aggregate findings, consisting of 68 OWASP ZAP findings and 15 Nuclei findings. After the normalization and deduplication process, 81 unique findings were obtained with 2 overlapping findings. OWASP ZAP produced more consistent outputs across several targets and was dominant in the Security Misconfiguration category, particularly security headers, Content Security Policy, cache-control, and cookie attributes. Meanwhile, Nuclei produced fewer findings but made an important contribution by detecting 5 Critical findings and 3 High findings, especially on target E4. The limitation of this study lies in output constraints on several targets; therefore, the scanning results cannot be interpreted as the final security condition of the targets, but rather as initial technical indications that require further validation. This study does not measure precision, recall, false positive rate, or scanning time efficiency because the testing was conducted on public targets under non-intrusive limitations and without Proof of Concept. The results indicate that the combination of OWASP ZAP and Nuclei provides more complete analysis coverage than the use of a single scanner because both have different and complementary detection characteristics.
Persistensi Artefak Telegram Web pada Memori Setelah Perubahan Sistem dengan Metode NIST SP 800-86 Sigit Puspito Wigati Jarot; Lukman Rosyidi; Haura Tsabitah
Bulletin of Computer Science Research Vol. 6 No. 3 (2026): April 2026
Publisher : Forum Kerjasama Pendidikan Tinggi (FKPT)

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.47065/bulletincsr.v6i3.1086

Abstract

The increasing incidence of cyberbullying on online communication platforms presents significant challenges for digital forensic investigations, particularly when perpetrators delete all message histories. Telegram Web, a browser-based messaging platform, produces volatile digital artifacts because its activity data is stored in system memory (RAM). This study aims to analyze the persistence of Telegram Web digital artifacts in volatile memory under six device condition variations using the NIST SP 800-86 framework, addressing a research gap in the quantitative evaluation of acquisition conditions for browser-based platforms. A cyberbullying simulation was conducted via Telegram private chat, generating 10 digital artifacts text messages, images, a document, and an audio file all subsequently deleted by the perpetrator. Memory acquisition was performed using Exterro FTK Imager under six conditions: immediately post-incident, sleep mode, hibernate mode, browser closed, browser closed with subsequent application use, and shutdown. Artifact identification employed keyword-based analysis on memory images. Results show that the first three conditions yielded 100% artifact recovery, as RAM preserved Chrome process data through DRAM self-refresh (ACPI S3) and byte-for-byte copying to hiberfil.sys (ACPI S4). Closing the browser reduced recovery to 40%, subsequent application use further reduced it to 10% due to zero-fill operations on reallocated memory pages, and shutdown produced 0% as all DRAM capacitor charges were lost. These findings demonstrate that artifact recovery rates are predictable from computer memory architecture, providing empirical guidance for digital forensic practitioners in web-based cybercrime cases.
Co-Authors Bambang Harie Wiyono Haura Tsabitah Rintan Madi Sari Sigit Puspito Wigati Jarot