Article Per Year (5 Year)
p-Index From 2021 - 2026
1.665
P-Index
This Author published in this journals
All Journal JIK Jurnal Ilmu Komputer IKRA-ITH Informatika : Jurnal Komputer dan Informatika IKRA-ITH ABDIMAS Cyber Security dan Forensik Digital (CSFD) Journal Of Human And Education (JAHE) Digital Transformation Technology (Digitech) Nusantara Journal of Multidisciplinary Science
Widyawan, Tri Ismardiko
Universitas Esa Unggul
Religion Humanities Computer Science & IT Education Languange, Linguistic, Communication & Media Law, Crime, Criminology & Criminal Justice Library & Information Science Social Sciences Other

Published : 11 Documents Claim Missing Document
Claim Missing Document
Check
Articles

Found 11 Documents
Search

 1   2 
Pengujian Kerentanan Website Menggunakan Metode Penetration Testing Dengan OWASP (Studi Kasus : Pemerintah Kabupaten Semarang) Reynanda Al Ridwan Bintang Firdaus; Tri Ismardiko Widyawan
Cyber Security dan Forensik Digital Vol. 8 No. 2 (2025): Edisi November 2025
Publisher : Fakultas Sains dan Teknologi UIN Sunan Kalijaga Yogyakarta

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.14421/csecurity.2025.8.2.5372

Abstract

Keamanan website merupakan aspek yang sangat penting dalam menjaga integritas, ketersediaan, dan kerahasiaan data, terutama bagi instansi pemerintahan yang mengelola informasi publik dan sensitif. Serangan siber yang semakin kompleks dan beragam dapat menyebabkan kebocoran data, peretasan sistem, hingga gangguan layanan yang berdampak pada kepercayaan publik. Oleh karena itu, diperlukan pengujian keamanan secara menyeluruh untuk mengidentifikasi dan mengatasi potensi kerentanan sebelum dapat dimanfaatkan oleh pihak yang tidak bertanggung jawab. Penelitian ini bertujuan untuk menguji keamanan dan kerentanan website Pemerintah Kabupaten Semarang guna meningkatkan standar keamanannya dengan menggunakan metode penetration testing berbasis standar OWASP (Open Web Application Security Project). Metode ini mencakup beberapa tahapan utama, yaitu perencanaan dan pengumpulan informasi, analisis kerentanan, eksploitasi celah keamanan, serta pelaporan hasil beserta rekomendasi mitigasi yang diperlukan. Pengujian dilakukan dengan mensimulasikan berbagai jenis serangan siber untuk mengidentifikasi celah keamanan yang dapat dieksploitasi oleh peretas. Implementasi dari rekomendasi yang diberikan agar dapat digunakan dalam meningkatkan ketahanan website Pemerintah Kabupaten Semarang terhadap ancaman siber, sehingga dapat mencegah kebocoran data, memastikan layanan tetap berjalan dengan baik, serta meningkatkan kepercayaan publik terhadap keamanan sistem pemerintahan berbasis digital. Kata kunci: Cybersecurity, Penetration Testing, OWASP, Keamanan Website, Pemerintah Kabupaten Semarang -------------------------------------------------------------------------------------------------- Website Vulnerability Testing Using the Penetration Testing Method with OWASP (Case Study: Semarang Regency Government) Website security is an important aspect in maintaining the integrity, availability, and confidentiality of data, particularly for government institutions that manage public information and sensitive records. With the increasing complexity of cyberattacks, the risks of data breaches, system intrusions, and service disruptions may significantly undermine public trust in digital government services. This study aims to assess the security level of the official website of the Semarang Regency Government by applying the penetration testing method based on the OWASP Top 10 standard of 2021, which involves several stages, including planning and information gathering, vulnerability analysis, exploitation, and reporting of findings with corresponding mitigation recommendations. The testing process was conducted by simulating various cyberattacks categorized under OWASP Top 10 to identify exploitable vulnerabilities. The results quantitatively revealed the presence of high-risk vulnerabilities, namely SQL Injection and Cross-Site Scripting (XSS), identified across several subdomains of the government website. These vulnerabilities may allow attackers to steal, manipulate, or misuse critical data, as well as disrupt the continuity of public services. Based on these findings, this research provides technical recommendations such as strengthening input validation, enhancing application security configuration, and implementing continuous monitoring. The application of these mitigation steps is expected to improve the resilience of the Semarang Regency Government website against cyber threats, prevent data breaches, ensure service availability, and reinforce public trust in digital government systems. Keywords: Cybersecurity, Penetration Testing, OWASP, Website Security, Semarang Regency Government
Co-Authors Ananda, Dita Andika Dzaki Ramadhan Aulia Ilham Zukri Binastya Anggara Sekti Diana Novita Evi Martaseli Hendry Gunawan Hendry Gunawan, Hendry Hermansyah Hermansyah Herwanto, Agus Iswahyudi, Raden Teddy Iwan Setiawan Jefry Sunupurwa Asri Martin T, Richard Muhammad Hadi Arfian Nixon Erzed Nizirwan Anwar Nugroho Budhisantosa Putri, Elsa Diana Reynanda Al Ridwan Bintang Firdaus Romadhon, Rafi Nur Santosa, Naditra Sutanto, Imam Yulfitri, Alivia