Article Per Year (5 Year)
p-Index From 2021 - 2026
0.408
P-Index
This Author published in this journals
All Journal Jurnal Informatika Ekonomi Bisnis Jurnal Informatika Ekonomi Bisnis
Tiara Wigati Septiani
Universitas Pelita Bangsa
Economics, Econometrics & Finance

Published : 2 Documents Claim Missing Document
Claim Missing Document
Check
Articles

Found 2 Documents
Search

 1 
An Automated Web Application Vulnerability Assessment Framework Based on the OWASP ZAP API Tiara Wigati Septiani; Dendy K Pramudito; Hendra Arya Syaputra
Jurnal Informatika Ekonomi Bisnis Vol. 8, No. 3 (September 2026)
Publisher : SAFE-Network

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.37034/infeb.v8i3.1487

Abstract

The increasing reliance on web applications has expanded the attack surface and intensified the need for systematic vulnerability assessment. However, manual security testing remains resource intensive and often requires specialized expertise, while fragmented reporting can hinder vulnerability tracking, risk prioritization, and remediation. This study aims to design and develop a web-based vulnerability assessment system integrating the OWASP ZAP API to support automated scanning and centralized security monitoring. The system was developed using the Rapid Application Development methodology, which emphasizes iterative development, rapid prototyping, and reusable components. Its main features include administrator authentication, a monitoring dashboard, automated website scanning, scan history management, vulnerability risk classification, and automated mitigation recommendations. The system also incorporates controlled brute-force testing to assess the resilience of its login mechanism. By integrating scanning, reporting, and remediation guidance within a single interface, the proposed system is intended to reduce the operational complexity of routine vulnerability assessment and improve the accessibility of security information for developers and administrators. The resulting implementation demonstrates the feasibility of integrating OWASP ZAP into a web-based platform for managing vulnerability assessment workflows. Rather than replacing expert security analysis, the system provides a structured mechanism for identifying potential weaknesses, reviewing their reported severity, and supporting remediation decisions. This research contributes a practical implementation approach for integrating open-source security testing tools into application development and maintenance processes, with the broader goal of supporting consistent, traceable, and repeatable vulnerability management. Further empirical evaluation is required to quantify scanning accuracy, execution time, and operational effectiveness across different environments.
An Automated Web Application Vulnerability Assessment Framework Based on the OWASP ZAP API Tiara Wigati Septiani; Dendy K Pramudito; Hendra Arya Syaputra
Jurnal Informatika Ekonomi Bisnis Vol. 8, No. 3 (September 2026)
Publisher : SAFE-Network

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.37034/infeb.v8i3.1487

Abstract

The increasing reliance on web applications has expanded the attack surface and intensified the need for systematic vulnerability assessment. However, manual security testing remains resource intensive and often requires specialized expertise, while fragmented reporting can hinder vulnerability tracking, risk prioritization, and remediation. This study aims to design and develop a web-based vulnerability assessment system integrating the OWASP ZAP API to support automated scanning and centralized security monitoring. The system was developed using the Rapid Application Development methodology, which emphasizes iterative development, rapid prototyping, and reusable components. Its main features include administrator authentication, a monitoring dashboard, automated website scanning, scan history management, vulnerability risk classification, and automated mitigation recommendations. The system also incorporates controlled brute-force testing to assess the resilience of its login mechanism. By integrating scanning, reporting, and remediation guidance within a single interface, the proposed system is intended to reduce the operational complexity of routine vulnerability assessment and improve the accessibility of security information for developers and administrators. The resulting implementation demonstrates the feasibility of integrating OWASP ZAP into a web-based platform for managing vulnerability assessment workflows. Rather than replacing expert security analysis, the system provides a structured mechanism for identifying potential weaknesses, reviewing their reported severity, and supporting remediation decisions. This research contributes a practical implementation approach for integrating open-source security testing tools into application development and maintenance processes, with the broader goal of supporting consistent, traceable, and repeatable vulnerability management. Further empirical evaluation is required to quantify scanning accuracy, execution time, and operational effectiveness across different environments.
Co-Authors Dendy K. Pramudito Hendra Arya Syaputra