Claim Missing Document
Check
Articles

Found 2 Documents
Search
Journal : SPIRIT

PERTAHANAN PENCEGAHAN SERANGAN SOCIAL ENGINEERING MENGGUNAKAN TWO FACTOR AUTHENTICATION (2FA) BERBASIS SMS (SHORT MESSAGE SYSTEM) Slamet Slamet
SPIRIT Vol 14, No 2 (2022): Spirit
Publisher : LPPM ITB Yadika Pasuruan

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.53567/spirit.v14i2.260

Abstract

Advances in digital technology have made communication between humans faster and easier. On the other hand, a lot of personal information is available online through social media and services that do not have security measures in place to protect this information. Therefore, the communication system is very vulnerable and easily penetrated by intruder due to social engineering attacks. This attack aims to deceive individuals or companies by taking actions that benefit the attacker. The trick is to provide personal data such as PIN numbers, health records, and passwords. This attack phenomenon is one of the biggest challenges in maintaining the security of personal data because this attack model takes advantage of human nature which is easy to trust others. This paper provides an in-depth survey of high-success social engineering attacks, using a 2 Factor Authentication (2FA) model by examining user accounts, to detect and avoid attempted account fraud via SMS (Short Message System). Experimental results show that attack success can be reduced to 10% and aggressive intruders can be caught by 70% of users in forwarding user verification code.
DESAIN ARSITEKTUR APLIKASI QR CODE SEBAGAI ANTI PHISHING SERANGAN QR CODE Slamet Slamet
SPIRIT Vol 15, No 1 (2023): Spirit
Publisher : LPPM ITB Yadika Pasuruan

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.53567/spirit.v15i1.280

Abstract

QR Codes are very vulnerable to falsification because it is difficult to distinguish the original QR Code from a fake QR Code. Because of this vulnerability, the scanning process on fake QR Codes can direct users to dangerous sites with important information or data from the user. To assess QR Code security vulnerabilities and actions using a secure Application-based QR Code Architecture as Anti Phishing against QR Code attacks using hash functions and digital signatures. In experiments simulated attack types to malicious QR codes that redirect users to phishing sites. The real URL is disguised into the QR Code, where the user does not suspect, the URL is redirected to the fake site. As a result, intruders can easily use QR codes as vectors for phishing attacks targeted at smartphone users, even if they are using a browser that has security features.Â