Article Per Year (5 Year)
p-Index From 2021 - 2026
0.23
P-Index
This Author published in this journals
All Journal Bulletin of Computer Science Research
Fito Nardian
Universitas Islam Negeri Sultan Syarif Kasim Riau, Pekanbaru
Computer Science & IT

Published : 1 Documents Claim Missing Document
Claim Missing Document
Check
Articles

Found 1 Documents
Search

 1 
Evaluasi Keamanan Website Direktori Akademik Menggunakan NIST SP 800-115 Fito Nardian; Rahmad Abdillah; Benny Sukma Negara; Reski Mai Candra
Bulletin of Computer Science Research Vol. 6 No. 3 (2026): April 2026
Publisher : Forum Kerjasama Pendidikan Tinggi (FKPT)

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.47065/bulletincsr.v6i3.1044

Abstract

Evaluating the security of web-based academic information systems has become crucial as cyber threats in higher education environments increase. The track record of security incidents in information systems at UIN Sultan Syarif Kasim Riau has prompted an urgent need for preventative action; therefore, the website https://seminar-fst.uin-suska.ac.id, as an active academic service that stores sensitive data, requires a proactive evaluation. Testing used a black-box testing approach through four phases: planning, discovery, attack, and reporting. The results revealed a critical vulnerability in the form of SQL injection in URL parameters, which allows unauthorized database enumeration (MariaDB), thus threatening data confidentiality and integrity. Additionally, medium-level vulnerabilities were discovered, such as the use of an outdated JavaScript library (Moment.js 2.8.1) and misconfiguration of HTTP security headers, including the absence of a Content Security Policy (CSP) and an Anti-CSRF mechanism. Recommendations include prepared statements, strict input validation, updating dependencies, and strengthening security configurations.
Co-Authors Negara, Benny Sukma Rahmad Abdillah Reski Mai Candra