Article Per Year (5 Year)
p-Index From 2021 - 2026
0.23
P-Index
This Author published in this journals
All Journal Technomedia Journal
Muhammad Hafied Hermawan
STKIP PGRI Situbondo
Computer Science & IT Languange, Linguistic, Communication & Media

Published : 1 Documents Claim Missing Document
Claim Missing Document
Check
Articles

Found 1 Documents
Search

 1 
Vulnerability Assessment Strategy Using OWASP ZAP to Support Digital Transformation in Education Muhammad Hafied Hermawan; Firman Jaya; Rahmat Shofan Razaqi
Technomedia Journal Vol 11 No 1 (2026): June
Publisher : Pandawan Incorporation, Alphabet Incubator Universitas Raharja

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.33050/tmj.v11i1.2645

Abstract

School websites function as public educational service platforms that must ensure the confidentiality, integrity, and availability of information. This study evaluates the security of the SMK Negeri 2 Situbondo website using OWASP ZAP as a Dynamic Application Security Testing tool within the public-access scope. The novelty of this research lies in the cross-comparison of three school websites within the same region, the mapping of findings to OWASP A05 Security Misconfiguration, and the integration of the results with educational digital transformation governance, data protection policies, and Sustainable Development Goals. The scanning results of the primary website identified 26 alert types, consisting of 0 High, 12 Medium, 7 Low, and 7 Informational findings. The dominant vulnerabilities were related to weaknesses in Content Security Policy, HTTP security header configuration, cookie controls, and third-party resource governance. The comparison websites exhibited similar vulnerability patterns, although with different quantities and severity levels. Priority recommendations include hardening Content Security Policy, HSTS, anti-clickjacking mechanisms, X-Content-Type-Options, cookie attributes, anti-CSRF tokens, and Subresource Integrity implementation. These findings provide an operational baseline for school administrators to strengthen the security of digital education services gradually and systematically.
Co-Authors Firman Jaya Rahmat Shofan Razaqi