Article Per Year (5 Year)
p-Index From 2021 - 2026
0.23
P-Index
This Author published in this journals
All Journal Science, Technology, and Communication Journal
Rahmalia Syahputri
Computer Engineering, Faculty of Computer Science, Institute of Information Technology and Business Darmajaya, Bandar Lampung 35141, Indonesia
Computer Science & IT Electrical & Electronics Engineering Engineering Materials Science & Nanotechnology

Published : 1 Documents Claim Missing Document
Claim Missing Document
Check
Articles

Found 1 Documents
Search

 1 
Security audit of a pharmacy information system using blackbox testing and CIA triad: A case study Rahmalia Syahputri; M Rivaldi Arwin Hadi Wijaya
Science, Technology, and Communication Journal Vol. 6 No. 3 (2026): SINTECHCOM Journal (June 2026)
Publisher : Lembaga Studi Pendidikan dan Rekayasa Alam Riau

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.59190/stc.v6i3.370

Abstract

Pharmacy information systems are essential for managing drug inventory, sales, financial reports, and user administration, yet they are exposed to security risks like data manipulation, account misuse, and information leakage. This study integrates Blackbox Testing and the CIA Triad (Confidentiality, Integrity, Availability) to audit a pharmacy application. Testing employed 19 security scenarios, supported by tools such as SQLmap, Burp Suite, OWASP ZAP, and Apache JMeter to detect vulnerabilities without accessing source code. Results show that the system meets availability requirements and provides audit logging for user activity monitoring. However, confidentiality and integrity weaknesses were identified: input validation allowed illogical data like negative stock, potential SQL Injection existed on the login page, and password encryption was insufficient. Strengthening input sanitization, adopting strong encryption, and enhancing authentication are necessary to close security gaps and improve system reliability.
Co-Authors M Rivaldi Arwin Hadi Wijaya