Muh Firdaus Garra Daeng Sikki
Department of Information Systems, Telkom University Surabaya Campus, Indonesia

Published : 1 Documents Claim Missing Document
Claim Missing Document
Check
Articles

Found 1 Documents
Search

Security assessment and security hardening of a laravel-based e-government web application using OWASP top 10 Muh Firdaus Garra Daeng Sikki; Adzanil Rachmadhi Putra; Rizqi Ramadhan
Journal of Soft Computing Exploration Vol. 7 No. 3 (2026): September 2026
Publisher : SHM Publisher

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.52465/joscex.v7i3.210

Abstract

The rapid adoption of e-government web applications has increased the need for effective cybersecurity measures to protect public services and sensitive information from evolving cyber threats. This study aims to identify security vulnerabilities, evaluate their severity, and implement security hardening measures for a Laravel-based e-government web application using the OWASP Top 10 (2021) framework. A Vulnerability Assessment and Penetration Testing (VAPT) approach was applied by combining automated vulnerability scanning with White Box and Grey Box penetration testing. Identified vulnerabilities were classified using the OWASP Top 10 (2021), prioritized with the Common Vulnerability Scoring System (CVSS) v3.1, and addressed through targeted security hardening followed by security verification. The assessment identified six High-severity vulnerabilities (CVSS v3.1 scores 7.1–8.8) across six OWASP categories. The implemented security controls, including HTTPS enforcement, input sanitization, security headers, rate limiting, dependency updates, and stronger authentication, successfully mitigated all identified vulnerabilities and improved the application's overall security posture. Overall, integrating OWASP-based security assessment with systematic security hardening provides an effective and practical strategy for improving the security resilience of Laravel-based e-government web applications.