Article Per Year (5 Year)
p-Index From 2021 - 2026
6.376
P-Index
This Author published in this journals
All Journal Jurnal Penelitian dan Evaluasi Pendidikan Novum : Jurnal Hukum Journal of Educational Science and Technology Jurnal Inspiration Jurnal Informatika Upgris Al Ishlah Jurnal Pendidikan KOMIK (Konferensi Nasional Teknologi Informasi dan Komputer) Celebes Engineering Journal Celebes Computer Science Journal Teacher in Educational Research Journal of Applied Science, Engineering, Technology, and Education Mattawang: Jurnal Pengabdian Masyarakat Journal of Natural Science and Technology Adpertisi: Bidang Sains dan Teknologi Indonesian Journal of Fundamental Sciences Ceddi Journal of Information System and Technology (JST) Ceddi Journal of Education Inspiration: Jurnal Teknologi Informasi dan Komunikasi Journal of Embedded Systems, Security and Intelligent Systems Jurnal Abdimas Cendekiawan Indonesia
Akbar Iskandar
Universitas Teknologi Akba Makassar
Humanities Chemical Engineering, Chemistry & Bioengineering Civil Engineering, Building, Construction & Architecture Computer Science & IT Control & Systems Engineering Decision Sciences, Operations Research & Management Education Electrical & Electronics Engineering Energy Engineering Environmental Science Health Professions Immunology & microbiology Industrial & Manufacturing Engineering Languange, Linguistic, Communication & Media Law, Crime, Criminology & Criminal Justice Library & Information Science Materials Science & Nanotechnology Mathematics Mechanical Engineering Medicine & Pharmacology Nursing Physics Public Health Social Sciences Other

Published : 61 Documents Claim Missing Document
Claim Missing Document
Check
Articles

Found 1 Documents
Search
Journal : journal of embedded systems security and intelligent systems

 1 
Faculty Academic Web Security Assessment via Grey-Box VAPT and CVSS v3.1 Akbar; Muh.Riyaldi Pratama; Akbar Iskandar; Riska Khaerani; Kamaruddin; Listia Utami
Journal of Embedded Systems, Security and Intelligent Systems Vol 7 No 3 (2026): September 2026
Publisher : Program Studi Teknik Komputer

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.59562/jessi.v7i3.11921

Abstract

Purpose – This study evaluates the security posture of a faculty-level academic web application by applying a grey-box Vulnerability Assessment and Penetration Testing (VAPT) approach and classifying validated vulnerabilities using the Common Vulnerability Scoring System (CVSS) v3.1. Design/methods/approach – An evaluative case study was conducted on a live Research Registration Information System using an authenticated non-administrative account. The assessment combined attack-surface mapping, automated vulnerability scanning, HTTP request–response observation, controlled request manipulation, and repeated manual validation. Each suspected vulnerability was evaluated through at least three controlled request variations and was classified as confirmed only when its behavior was reproducible, security-relevant, and distinguishable from normal application behavior or false-positive detection. Confirmed vulnerabilities were subsequently assessed using CVSS v3.1. Findings – Automated and manual assessment produced 14 candidate findings, of which three (21.4%) were confirmed after analytical validation and 11 were rejected as non-reproducible or false positives. The validated vulnerabilities comprised SQL injection, authentication bypass, and cross-site scripting (XSS) associated with file upload functionality. All three were classified as high severity, with CVSS v3.1 base scores of 8.8, 8.3, and 7.6, respectively. The findings indicate weaknesses across backend input processing, authentication and session control, and user-generated content handling, suggesting that security risks extend across multiple operational layers of the application. Research implications/limitations – The results demonstrate the importance of combining automated detection with manual validation to improve the reliability of web security assessments and support risk-based remediation. However, the study is limited to a single faculty-level system and a specific grey-box access context, which restricts direct generalization to other institutional architectures. Originality/value – Rather than proposing a new security framework, this study provides a transparent and traceable application of grey-box VAPT at the underreported faculty-subdomain level, linking reproducible technical findings with CVSS-based severity prioritization and practical cybersecurity governance implications.
Co-Authors . Haryanto A.A. Ketut Agung Cahyawan W Abdul Jalil Abdul Latief Arda Abdul Rahman Agung Iqramzah Ahmad Rudi Ahmad Rudi Ahmar, Ansari Saleh Ahmed Abdulmajeed Ahmed J. Obaid Ahmed J. Obaid Akbar Akbar Hendra Alfairus, Muh. Qodri Amanda, Andi Dimas Prasetyo Amin, Syahril Amiruddin, Amran Amran Amiruddin Ana Rusmardiana Andani Achmad Andi Jusriani Andi Muh Reza B Makkaraka Andryanto A Arinto Nugroho Asnimar ASNIMAR ASNIMAR, ASNIMAR Asri Asri Bobur Sobirov Daud Daud Dayun Miyanti Dellas, Dellas Dewi Yanti Dian Saputri S Dian Wardiana Sjuchro Dwika Assrani Edy Suryanto Erwin Gatot Amiruddin Erwin Gatot Amiruddin Fathurrahman Faurani I Santi Singagerda Fitri Daryanti Fitriyani Fitriyani Fitta Ummaya Santi Giri Artoyo Hamdan Gani Harfawan Matturungan Harman Akbar Tullah Haryanto Haryanto Heri Ratnawati Heri Retnawati Ilham Ilham Irwan Ismiyati, Ismiyati Kamaruddin Kamaruddin Kamaruddin Kamaruddin Karan Sharma Katie Katie Kavya Patel Kherani, Riska Kumar Vivek Kumar Vivek Lisah Lisah Listia Utami Lukas, Imelda Lusiana Wulansari Mahmud Mustapa Makhabbat Ramazanova Makhabbat Ramazanova Mamadiyarov, Zokir Mansyur Mansyur Mansyur Mansyur Mansyur Mansyur Maria Yertas Marwa Sulehu Maslihatin, Tatik Mesran, Mesran Ming-Chung Chang Misbayani Misbayani Muh Riyaldi Pratama Muh.Riyaldi Pratama Muhajirin, Muhajirin Muhammad Akbar Azis Muhammad Akil, Muhammad Muhammad Akram Hamzah Muhammad Rizal Muliadi Munsyir, Mulawarman Nardo Azalio Bangri Neneng Awaliah Neneng Awaliyah Nurhalisa Nurhalisa Nuridayanti, Nuridayanti Nurul Huda Pato, Markani Pratama, Muh Riyaldi Pratama, Muh. Riyaldi Purnamawati Purnamawati R. Rusli Rais, Zulkifli Resky Wahyuni Ridha Nur Ilahi Riska Khaerani Riska Kherani Robbi Rahim Romario Firera Ronda Deli Sianturi Ruth Ruth Sabitu, Kamoru Sahibu, Supriadi Saltanat Meiramova Sholikah, Mar'atus Siti Nurhabibah Hutagalung Sonni, Alem Febri Syahrul Syahrul Tahir, Tamus Bin Tamra Taufik, Imran Ummiati Rahmah Vitara Aji Bimantara Vivek Sharma Wang Yang Yuhandri Yuhandri, Yuhandri Yulianto, Romi Yutaka Matsuo Yuyun