Article Per Year (5 Year)
p-Index From 2021 - 2026
2.804
P-Index
This Author published in this journals
All Journal Techno.Com: Jurnal Teknologi Informasi Jurnal Teknologi Informasi dan Ilmu Komputer Sistemasi: Jurnal Sistem Informasi RABIT: Jurnal Teknologi dan Sistem Informasi Univrab JURNAL TEKNOLOGI DAN OPEN SOURCE Jurnal Teknik Industri Terintegrasi (JUTIN) Jurnal Teknologi Sistem Informasi dan Sistem Komputer TGD JITSI : Jurnal Ilmiah Teknologi Sistem Informasi Sibatik Journal : Jurnal Ilmiah Bidang Sosial, Ekonomi, Budaya, Teknologi, Dan Pendidikan Insand Comtech : Information Science and Computer Technology Journal Proceeding Applied Business and Engineering Conference Journal of Embedded Systems, Security and Intelligent Systems Journal of Accounting Law Communication and Technology Jurnal ilmiah teknologi informasi Asia TANJAK : Jurnal Pengabdian Kepada Masyarakat
Nurmi Hidayasari
Politeknik Negeri Bengkalis
Religion Agriculture, Biological Sciences & Forestry Arts Humanities Automotive Engineering Civil Engineering, Building, Construction & Architecture Computer Science & IT Control & Systems Engineering Decision Sciences, Operations Research & Management Economics, Econometrics & Finance Education Electrical & Electronics Engineering Energy Engineering Environmental Science Industrial & Manufacturing Engineering Languange, Linguistic, Communication & Media Law, Crime, Criminology & Criminal Justice Library & Information Science Materials Science & Nanotechnology Mathematics Mechanical Engineering Physics Social Sciences Transportation Other

Published : 20 Documents Claim Missing Document
Claim Missing Document
Check
Articles

Found 20 Documents
Search

 1   2 
Workshop Pengelolaan Administrasi Data Internal Inventaris Sekolah SMK N 1 Bengkalis Berbasis Online Mansur, Mansur; Kasmawi, Kasmawi; Hidayasari, Nurmi; Karisma, Elana; Azzuhra, Nur Aida; Mansur
TANJAK : Jurnal Pengabdian Kepada Masyarakat Vol 5 No 2 (2024): TANJAK : Jurnal Pengabdian Kepada Masyarakat
Publisher : P3M Politeknik Negeri Bengkalis

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.35314/v261a590

Abstract

Sekolah sebagai lembaga pendidikan perlu mengikuti perkembangan teknologi, termasuk dalam pengelolaan data inventaris secara digital. Pengelolaan inventaris yang efektif sangat penting untuk mendukung efisiensi operasional dan kualitas pendidikan. SMKN 1 Bengkalis menghadapi tantangan dalam pengelolaan inventaris yang masih dilakukan secara manual, menyebabkan ketidakakuratan data, kesulitan dalam pemantauan, dan hambatan dalam pengambilan keputusan. Tujuan pengabdian ini adalah pembuatan aplikasi untuk mempermudah proses distribusi, peminjaman, dan pengembalian barang, serta meningkatkan efisiensi operasional sekolah. Kegiatan ini menggunakan metode penelitian tindakan dengan tahapan sosialisasi kegiatan, identifikasi kebutuhan, desain database, proses setup sistem, melakukan workshop, evaluasi sistem, dan pembuatan laporan akhir. Kegiatan pengabdian ini berlangsung selama dua hari dalam bentuk teori maupun praktik. Hasil pengabdian ini adalah Aplikasi Administrasi Data Internal Inventaris Sekolah Berbasis Online yang merupakan layanan pencatatan dan kontrol untuk melakukan pengendalian terhadap data internal inventaris baik berupa barang habis pakai, barang yang pinjam dan barang yang diserahkan kepada bagian sekolah yang membutuhkan sehingga mempermudah proses pelaksanaan aktivitas sekolah.
PENGAMANAN AKSES LAPORAN KEUANGAN UMKM MENGGUNAKAN QR CODE TERENKRIPSI DAN MULTI-FACTOR AUTHENTICATION Riduwan, Riduwan; Hidayasari, Nurmi; Ikhsan Wibowo, Muhammad
SIBATIK JOURNAL: Jurnal Ilmiah Bidang Sosial, Ekonomi, Budaya, Teknologi, Dan Pendidikan Vol. 5 No. 1 (2025)
Publisher : Penerbit Lafadz Jaya

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.54443/sibatik.v5i1.4235

Abstract

The web-based financial recording and reporting system for Micro, Small, and Medium Enterprises is a digital solution designed to assist business actors in managing financial transactions in a structured, safe, and efficient manner, including recording income, expenses, business capital, and operational expenses, and generating automated financial reports. The development of this system uses the Waterfall method which includes the stages of analysis, design, implementation, testing, and deployment. The system is equipped with a security mechanism in the form of Quick Response Code authentication and PIN verification to improve access protection to accounts and financial statements. The results of the study show that the system is able to generate financial reports accurately, as well as implement effective security controls based on Black Box testing. Thus, the implementation of a Quick Response Code-based login and report access mechanism has been proven to be able to increase the security and ease of access to financial statements for Micro, Small, and Medium Enterprises without requiring business owners to log in directly to the system.
Penerapan Enkripsi AES-256 Untuk Pengamanan Data Pada Website Layanan Administrasi Desa Cantik Febiola, Febiola; Kasmawi, Kasmawi; Hidayasari, Nurmi
Jurnal Ilmiah Teknologi Informasi Asia Vol 20 No 1 (2026): Volume 20 Issue 1 2026 (8)
Publisher : LP2M Institut Teknologi dan Bisnis ASIA Malang

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.32815/jitika.1229

Abstract

Data security in village administration service systems is a critical concern, as these systems manage sensitive personal information such as full names, National Identity Numbers (NIK), Family Card (KK) numbers, addresses, and supporting documents. Many existing village administration systems store such data without adequate protection, increasing the risk of data leakage, identity theft, and unauthorized access. This study implements the Advanced Encryption Standard (AES-256) algorithm to enhance data security in a village administration services website. The research methodology includes system requirements analysis, system design, AES-256 implementation for personal data and document encryption, and functional and performance evaluation. The system automatically encrypts all sensitive data before storing it in the database and decrypts it only for authorized administrators. In addition, the system supports secure processing of statistical Excel files to facilitate the Desa CANTIK program. Experimental results show that the proposed system provides strong data protection with minimal performance overhead, averaging less than 120 ms for encrypting and decrypting 5 MB files, while maintaining acceptable CPU and memory usage. These results indicate that AES-256 can be effectively integrated into village administration services to improve data security without compromising system efficiency.
Wazuh-Based Security Monitoring for Public Service Web Systems: Detection Effectiveness, Alert Latency, and Resource Overhead Mansur; Nurmi Hidayasari; Kasmawi; Zuliar Efendi
Journal of Embedded Systems, Security and Intelligent Systems Vol 7 No 2 (2026): June 2026
Publisher : Program Studi Teknik Komputer

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.59562/jessi.v7i2.2636

Abstract

Purpose - This study evaluates the effectiveness of Wazuh-based security monitoring in detecting cyber threats in public service web systems, particularly XSS, SQL Injection, SSH brute-force attacks, and file integrity violations. Design/methods/approach – An experimental quantitative approach was conducted in a controlled virtualized environment using Proxmox VE. Wazuh was deployed as a centralized Security Information and Event Management (SIEM) system with active threat detection and File Integrity Monitoring (FIM). Simulated attacks and file modification events were executed, and system performance was assessed based on detection rate, alert latency, and resource utilization. Findings - Wazuh achieved a 100% detection rate across all tested attacks, including XSS (10/10), SQL Injection (10/10), and SSH brute-force (20/20). The average alert latency was 6.8 seconds for XSS, 132.6 seconds for SQL Injection, and 52 seconds for SSH brute-force attacks. Although CPU and memory usage increased after deployment, the overhead remained within acceptable operational limits in the experimental environment. Research implications/limitations – The system demonstrates effective real-time centralized monitoring capability; however, the evaluation was limited to a controlled virtual environment and predefined attack scenarios, which may not fully represent real-world conditions. Originality/value – This study provides empirical evidence of Wazuh’s performance as a centralized SIEM solution for public service web systems, highlighting its detection effectiveness and operational trade-offs in terms of alert latency and system resource usage.
Implementasi Prototipe SIEM Berbasis Wazuh pada Website dengan Pengujian FIM dan Threat Hunting Nurmi Hidayasari; Mansur; Kasmawi; Zuliar Efendi
JITSI : Jurnal Ilmiah Teknologi Sistem Informasi Vol 6 No 4 (2025)
Publisher : SOTVI - Society of Visual Informatics

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.62527/jitsi.6.4.523

Abstract

This study implements a Wazuh-based Security Information and Event Management (SIEM) prototype to enhance security monitoring for a web application. The architecture uses two VPS instances: a web server as the log source equipped with a Wazuh Agent, and a monitoring server running the Wazuh Manager and Dashboard for event analysis and visualization. The evaluation combines threat hunting and File Integrity Monitoring (FIM) using several test scenarios: OWASP ZAP scanning, XSS, SQL injection (login-form testing and automated sqlmap attacks), and SSH brute force using hydra. The results show that Wazuh successfully detects XSS via rule 31105 (level 6) and sqlmap-based SQL injection via rule 31106 (level 6) because the attack patterns are clearly recorded in the web access logs. SSH brute force is strongly detected by rule 5763 (level 10), indicating repeated failed login attempts. In addition, FIM records file changes such as added and modified files (e.g., rules 554/550); however, it may generate noise when monitoring dynamic directories. The SQL injection attempt through the login form does not produce a specific SQL injection alert, suggesting limitations in log visibility/format and the need for decoder/ruleset tuning. Overall, Wazuh is effective for log-based security monitoring, while detection quality depends on log completeness, rule configuration, and FIM scope.
SISTEM PREDIKSI HARGA PANGAN DI KABUPATEN BENGKALIS BERBASIS WEB MENGGUNAKAN METODE SARIMA Azmil Fikri; Nurmi Hidayasari; Zuliar Efendi
Rabit : Jurnal Teknologi dan Sistem Informasi Univrab Vol 11 No 1 (2026): Januari
Publisher : LPPM Universitas Abdurrab

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.36341/rabit.v11i1.7384

Abstract

Fluctuations in food commodity prices such as chili, onions, and other staple commodities in Bengkalis Regency often occur unpredictably due to the influence of weather conditions, distribution, supply availability, and increased demand during certain periods, such as religious holidays. The historical daily food price data used in this study indicate the presence of weekly and annual seasonal patterns, making them suitable for modeling using the Seasonal Autoregressive Integrated Moving Average (SARIMA) method. This study aims to develop a web-based food price prediction system that is capable of presenting daily price information as well as price forecasts for the upcoming days. The data used consist of daily records from January 2022 to October 2025, obtained from the Bengkalis Regency Food Security Agency. The data were processed through data cleaning, stationarity testing, model training, and forecasting stages using the Python programming language with the statsmodels library. The system was developed using the Flask framework and a MySQL database. The results show that the SARIMA model is able to generate price forecasts that follow the trends and seasonal patterns of the historical data. Accuracy evaluation using the Root Mean Square Error (RMSE) indicates that the Minyakita commodity has an RMSE of 1,415.04, equivalent to approximately 8–9% of its average price, while commodities with high volatility, such as bird’s eye chili and imported soybeans, exhibit higher prediction errors.  
EVALUASI PERFORMA ALGORITMA HILL CIPHER DAN AFFINE CIPHER PADA PENGAMANAN DATA PENGGUNA WEBSITE E-COMMERCE : PERFORMANCE EVALUATION OF HILL CIPHER AND AFFINE CIPHER ALGORITHMS IN SECURING E-COMMERCE WEBSITE USER DATA Ona Mazura; Nurmi Hidayasari
Rabit : Jurnal Teknologi dan Sistem Informasi Univrab Vol 11 No 1 (2026): Januari
Publisher : LPPM Universitas Abdurrab

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.36341/rabit.v11i1.7490

Abstract

User data security is a crucial aspect in e-commerce systems, especially to protect sensitive data stored in databases (data at rest). One approach that can be used to maintain the confidentiality of this data is the application of cryptographic algorithms. This study aims to evaluate the performance of the classic cryptographic algorithms Hill Cipher and Affine Cipher in securing user data on web-based e-commerce websites. The research method is carried out by implementing both algorithms in an e-commerce system and conducting tests on the encryption and decryption processes of user data. The evaluation focused on two main aspects, namely the efficiency of the processing time and the quality of the resulting ciphertext. Security testing was carried out using the Ciphertext Only Attack approach and measuring the level of ciphertext randomness using Shannon Entropy. The test results show that the Affine Cipher algorithm has a faster encryption and decryption processing time than the Hill Cipher, making it more efficient in terms of performance. Conversely, the Hill Cipher produces ciphertext with a slightly higher level of randomness, as indicated by a larger Shannon Entropy value. This finding indicates a trade-off between processing speed and the quality of ciphertext randomness in both classic cryptographic algorithms. This research contributes by conducting a head-to-head comparative evaluation between Hill Cipher and Affine Cipher in the context of securing stored data in web-based e-commerce systems. The results are expected to be used as considerations in selecting classical cryptographic algorithms for learning, simulation, or small-scale systems with limited computational requirements.
PERANCANGAN SISTEM INFORMASI WEBSITE DESA UNTUK PELAYANAN SURAT-MENYURAT DENGAN PENDEKATAN SECURE SOFTWARE DEVELOPMENT LIFE CYCLE (SSDLC) MONA RATULIU; Nurmi Hidayasari
Rabit : Jurnal Teknologi dan Sistem Informasi Univrab Vol 11 No 1 (2026): Januari
Publisher : LPPM Universitas Abdurrab

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.36341/rabit.v11i1.7589

Abstract

Correspondence administration services are one of the primary services provided by village governments to the community. However, in Teluk Lancar Village, the correspondence service process is still carried out manually, resulting in various issues such as service delays, data recording errors, and potential security risks to community data. In addition, the manual system makes it difficult for the community to monitor the status of submitted correspondence requests. This study aims to design and implement a village website information system for correspondence services by applying the Secure Software Development Life Cycle (SSDLC) approach with a focus on improving system security. The implementation of SSDLC in this study focuses on three main stages, namely Secure Design, Secure Coding, and Security Testing. In the Secure Design stage, the system is designed by implementing Role-Based Access Control (RBAC) to restrict user access based on the roles of community members, operators, and village administrators. The Secure Coding stage is implemented through role-based access control, input validation, and page access protection to prevent unauthorized access. Furthermore, the Security Testing stage is conducted using OWASP ZAP to identify potential security vulnerabilities in the system. The results show that the RBAC mechanism has been successfully implemented and is able to restrict user access according to their roles. Security testing results indicate the presence of vulnerabilities categorized as High, Medium, Low, and Informational, with the majority classified as low risk. The identified high-risk finding is related to application security misconfiguration (missing security headers), which does not directly affect data confidentiality but serves as an important basis for security evaluation and remediation in subsequent development stages.
Implementation of The Information Service Application Portal for Registration of Prospective Santri and Recording of School Activities Using The Extreme Programming Method Nurmi Hidayasari; Mansur Mansur; Elfira Nurul Ilma; Dinda Anisa
JURNAL TEKNOLOGI DAN OPEN SOURCE Vol. 6 No. 1 (2023): Jurnal Teknologi dan Open Source, June 2023
Publisher : Universitas Islam Kuantan Singingi

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.36378/jtos.v6i1.3125

Abstract

For Islamic boarding schools, the website functions as a medium of information and school introduction to the public. In order for prospective students to register easily, complete information is needed so that the boarding school can easily manage the data of prospective students. Apart from teaching and learning, teachers and students also have other activities at school. The categories of activities carried out by teachers are training, teaching, RPP (Learning Implementation Plans), and clubs or CCA (Co-Curricular Activities), while the categories of activities carried out by students are extracurricular activities, organizations, and competitions. All information on teacher and student activities requires data to be stored properly for a certain period of time. This study aims to build an information service application for registration of prospective students and recording of school activities using the extreme programming method. This application is made using the PHP programming language with the CodeIgniter framework, a MySQL database, and extreme programming as an application development method. Based on the tests carried out, this application can run on various browser applications, such as Google Chrome, Mozilla Firefox, and Microsoft Edge.
Implementation of Role-Based Access Control (RBAC) in a Drug Stock Management Information System Dea Agustina Purba; Nurmi Hidayasari
SISTEMASI Vol 15, No 2 (2026): Sistemasi: Jurnal Sistem Informasi
Publisher : Universitas Islam Indragiri

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.32520/stmsi.v15i2.5958

Abstract

Role-Based Access Control (RBAC) is a role-based access management mechanism that restricts user privileges according to their authority within an information system. The implementation of this mechanism is particularly important in pharmacy drug stock management systems, especially at Apotek Pratama dr. Moris, which still relies on manual stock recording. This condition often results in data discrepancies, delays in monitoring expired medications, difficulties in report generation, and the absence of clear access restrictions for each user. This study focuses on developing a web-based drug stock management information system with RBAC as the primary mechanism for user authorization and security. The system was developed using the Waterfall methodology, which includes requirement analysis, system design, implementation, and testing. The application was built using Laravel framework version 11, MySQL database, and the Laravel Spatie Permission package for managing roles and permissions. Black Box Testing results indicate that all functional test scenarios were executed successfully, achieving a 100% success rate. User acceptance testing, conducted using the System Usability Scale (SUS), yielded an average score of 76, categorized as Good. The findings demonstrate that the implementation of RBAC effectively restricts user access based on roles, enhances data security, and improves the accuracy and efficiency of drug stock management compared to the previous manual system.
Co-Authors Agus Tedyyana, Agus Azmil Fikri Azzuhra, Nur Aida Dea Agustina Purba Desi Wahana Dinda Anisa Dirgantara, Rimba Elfira Nurul Ilma Febiola, Febiola Husaini, M. Iqbal Ikhsan Wibowo, Muhammad Imam Riadi Karisma, Elana Kasmawi Lumban, Andre Pardamean Mansur Mansur Mansur Mansur Mansur MONA RATULIU Nuranisa, Putri Nurasmawati, Nurasmawati Ona Mazura Rezki Kurniati, Rezki Riduwan Riduwan, Riduwan Rosyidah Rosyidah, Rosyidah Saragih, Elpi Aprianti Sihombing, Hendra Natanael Syahli, Alfian Yudi prayudi Zuliar Efendi Zuliar Efendi