Allan Yuliansyah
STMIK Jayakarta

Published : 1 Documents Claim Missing Document
Claim Missing Document
Check
Articles

Found 1 Documents
Search

ANALISIS KEAMANAN SISTEM INFORMASI MANAJEMEN PENGAWASAN INSPEKTORAT JENDERAL KEMENTERIAN KEHUTANAN MENGGUNAKAN METODE OWASP ZAP: INFORMATION SYSTEM SECURITY ANALYSIS OF THE INSPECTORATE GENERAL AT THE MINISTRY OF FORESTRY USING THE OWASP ZAP METHOD Allan Yuliansyah; Zulhalim; Anton Zulkarnain Sianipar
Rabit : Jurnal Teknologi dan Sistem Informasi Univrab Vol 11 No 1 (2026): Januari
Publisher : LPPM Universitas Abdurrab

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.36341/rabit.v11i1.7195

Abstract

This Supervision Management Information System (SIMAWAS) is used to support the internal oversight process within the Inspectorate General of the Ministry of Forestry. However, the application has never undergone a comprehensive security assessment, especially after the domain change. This study aims to identify vulnerabilities in SIMAWAS using penetration testing methods with OWASP ZAP. The testing stages include planning, automated scanning, alert analysis, and recommendation formulation. The risk levels (Medium, Low, and Informational) were classified based on the OWASP Risk Rating Methodology, considering the likelihood and potential impact of each identified vulnerability. The results show that SIMAWAS has no high-risk vulnerabilities, but several Medium, Low, and Informational weaknesses were found, such as security misconfiguration, missing security headers, and insecure cookie settings. These vulnerabilities may be exploited if not addressed properly. Improvement recommendations were developed based on OWASP standards to enhance application security and prevent potential exploitation in the future.