Article Per Year (5 Year)
p-Index From 2021 - 2026
0.444
P-Index
This Author published in this journals
All Journal IKRA-ITH Informatika : Jurnal Komputer dan Informatika Applied Information Technology and Computer Science (AICOMS)
Mochamad Fahrul Reza
Universitas Esa Unggul
Computer Science & IT

Published : 2 Documents Claim Missing Document
Claim Missing Document
Check
Articles

Found 2 Documents
Search

 1 
Penerapan Penetration Testing pada Sistem EasyCart dalam Menghadapi Ancaman Keamanan Siber Mochamad Fahrul Reza; Imam Sutanto
Applied Information Technology and Computer Science (AICOMS) Vol 4 No 2 (2025)
Publisher : Pengelola Jurnal Politeknik Negeri Ketapang

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.58466/aicoms.v4i2.1937

Abstract

Information security in e-commerce applications is a crucial aspect in maintaining the integrity, confidentiality, and availability of user data. The method used is penetration testing with a black-box and grey-box approach, referring to the Penetration Testing Execution Standard (PTES) and the OWASP Top 10 framework for 2021. The testing was conducted through the seven PTES phases: Pre-engagement Interactions, Intelligence Gathering, Threat Modeling, Vulnerability Analysis, Exploitation, Post-Exploitation, and Reporting. The testing environment was run locally using tools such as Burp Suite, OWASP ZAP, Nikto, SQLMap, and Nmap. The testing results identified 20 vulnerabilities with high, medium, and low risk levels, including Cross-Site Scripting (XSS), SQL Injection, Broken Access Control, and Security Misconfiguration. Mitigation recommendations are based on ISO/IEC 27001:2022 controls, specifically Annex A.5 (information security policy), A.8 (asset management), and A.12 (operational security). This research contributes to the understanding and application of standards-based security testing in simulation applications, while emphasizing the importance of input validation, secure system configuration, and regular updates as mitigation measures against cyber threats.
Penerapan Pentesting pada EasyCart untuk Menghadapi Ancaman Keamanan Siber Mochamad Fahrul Reza; Imam sutanto
IKRA-ITH Informatika : Jurnal Komputer dan Informatika Vol. 10 No. 1 (2026): IKRAITH-INFORMATIKA Vol 10 No 1 Maret 2026
Publisher : Fakultas Teknik Universitas Persada Indonesia YAI

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.37817/ikraith-informatika.v10i1.5707

Abstract

Perkembangan e-commerce di era digital telah meningkatkan risiko keamanan siber, menjadikan aplikasie-commerce target utama serangan karena menyimpan data sensitif pengguna. Penelitian ini bertujuanmelakukan evaluasi keamanan sistematis pada EasyCart, sebuah aplikasi e-commerce berbasis Angular,Node.js, Express, dan SQLite. Evaluasi dilakukan melalui metode penetration testing berdasarkan standarPenetration Testing Execution Standard (PTES) yang mencakup tujuh tahapan utama, dengan analisiskerentanan mengacu pada OWASP Top 10. Hasil pengujian menunjukkan bahwa EasyCart memilikibeberapa kerentanan kritis, seperti injeksi SQL, cross-site scripting (XSS), dan broken access control.Penelitian ini juga menyajikan hasil perbandingan keamanan sebelum dan sesudah mitigasi diterapkanuntuk menilai efektivitas perbaikan. Pendekatan ini terbukti efektif dalam mengidentifikasi kerentanan dandiharapkan dapat berkontribusi pada pengembangan sistem e-commerce yang lebih aman dan andal.Kata kunci : keamanan siber, penetration testing, e-commerce, OWASP Top 10, PTES.
Co-Authors Sutanto, Imam