Claim Missing Document
Check
Articles

Found 3 Documents
Search

Pemanfaatan Rekayasa Perangkat Lunak untuk Meningkatkan Literasi Digital Pelajar Hendra Arya Syaputra; Antika Zahrotul Kamalia; Ayu Ratna Juwita; Suryana Suryana; Abi Rivaldo
Jurnal Hasil-Hasil Pengabdian dan Pemberdayaan Masyarakat Vol. 5 No. 2 (2026): Volume 05 Nomor 02 (Mei-Juli 2026)
Publisher : Jurusan Matematika FMIPA UNM

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.35580/nh8tkz41

Abstract

Kegiatan Pengabdian kepada Masyarakat ini dilaksanakan di SMK Binakarya Mandiri Kota Bekasi dengan tujuan meningkatkan literasi digital pelajar melalui pemanfaatan Rekayasa Perangkat Lunak. Metode kegiatan meliputi sosialisasi, penyampaian materi, studi kasus, praktik perancangan sistem sederhana, pendampingan, serta evaluasi menggunakan pre-test dan post-test. Materi mencakup konsep dasar RPL, analisis kebutuhan, perancangan alur dan antarmuka, serta etika dan keamanan digital. Hasil evaluasi menunjukkan peningkatan rata-rata pemahaman siswa dari 50% pada pre-test menjadi 84,4% pada post-test. Peningkatan tertinggi terjadi pada kemampuan merancang alur sistem dan antarmuka, sedangkan capaian tertinggi diperoleh pada pemahaman etika dan keamanan digital. Kegiatan ini menunjukkan bahwa pendekatan berbasis praktik dan studi kasus efektif dalam meningkatkan pemahaman teknis, kemampuan berpikir sistematis, kreativitas, dan tanggung jawab siswa dalam memanfaatkan teknologi digital.
An Automated Web Application Vulnerability Assessment Framework Based on the OWASP ZAP API Tiara Wigati Septiani; Dendy K Pramudito; Hendra Arya Syaputra
Jurnal Informatika Ekonomi Bisnis Vol. 8, No. 3 (September 2026)
Publisher : SAFE-Network

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.37034/infeb.v8i3.1487

Abstract

The increasing reliance on web applications has expanded the attack surface and intensified the need for systematic vulnerability assessment. However, manual security testing remains resource intensive and often requires specialized expertise, while fragmented reporting can hinder vulnerability tracking, risk prioritization, and remediation. This study aims to design and develop a web-based vulnerability assessment system integrating the OWASP ZAP API to support automated scanning and centralized security monitoring. The system was developed using the Rapid Application Development methodology, which emphasizes iterative development, rapid prototyping, and reusable components. Its main features include administrator authentication, a monitoring dashboard, automated website scanning, scan history management, vulnerability risk classification, and automated mitigation recommendations. The system also incorporates controlled brute-force testing to assess the resilience of its login mechanism. By integrating scanning, reporting, and remediation guidance within a single interface, the proposed system is intended to reduce the operational complexity of routine vulnerability assessment and improve the accessibility of security information for developers and administrators. The resulting implementation demonstrates the feasibility of integrating OWASP ZAP into a web-based platform for managing vulnerability assessment workflows. Rather than replacing expert security analysis, the system provides a structured mechanism for identifying potential weaknesses, reviewing their reported severity, and supporting remediation decisions. This research contributes a practical implementation approach for integrating open-source security testing tools into application development and maintenance processes, with the broader goal of supporting consistent, traceable, and repeatable vulnerability management. Further empirical evaluation is required to quantify scanning accuracy, execution time, and operational effectiveness across different environments.
An Automated Web Application Vulnerability Assessment Framework Based on the OWASP ZAP API Tiara Wigati Septiani; Dendy K Pramudito; Hendra Arya Syaputra
Jurnal Informatika Ekonomi Bisnis Vol. 8, No. 3 (September 2026)
Publisher : SAFE-Network

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.37034/infeb.v8i3.1487

Abstract

The increasing reliance on web applications has expanded the attack surface and intensified the need for systematic vulnerability assessment. However, manual security testing remains resource intensive and often requires specialized expertise, while fragmented reporting can hinder vulnerability tracking, risk prioritization, and remediation. This study aims to design and develop a web-based vulnerability assessment system integrating the OWASP ZAP API to support automated scanning and centralized security monitoring. The system was developed using the Rapid Application Development methodology, which emphasizes iterative development, rapid prototyping, and reusable components. Its main features include administrator authentication, a monitoring dashboard, automated website scanning, scan history management, vulnerability risk classification, and automated mitigation recommendations. The system also incorporates controlled brute-force testing to assess the resilience of its login mechanism. By integrating scanning, reporting, and remediation guidance within a single interface, the proposed system is intended to reduce the operational complexity of routine vulnerability assessment and improve the accessibility of security information for developers and administrators. The resulting implementation demonstrates the feasibility of integrating OWASP ZAP into a web-based platform for managing vulnerability assessment workflows. Rather than replacing expert security analysis, the system provides a structured mechanism for identifying potential weaknesses, reviewing their reported severity, and supporting remediation decisions. This research contributes a practical implementation approach for integrating open-source security testing tools into application development and maintenance processes, with the broader goal of supporting consistent, traceable, and repeatable vulnerability management. Further empirical evaluation is required to quantify scanning accuracy, execution time, and operational effectiveness across different environments.