p-Index From 2021 - 2026
6.951
P-Index
This Author published in this journals
All Journal Syntax Jurnal Informatika CommIT (Communication & Information Technology) Scan : Jurnal Teknologi Informasi dan Komunikasi Proceeding International Conference on Information Technology and Business Jurnal Teknologi Informasi dan Ilmu Komputer International conference on Information Technology and Business (ICITB) Jurnal Sistem Informasi dan Bisnis Cerdas Informatika Mulawarman: Jurnal Ilmiah Ilmu Komputer INTEGER: Journal of Information Technology JIEET (Journal of Information Engineering and Educational Technology) Pendas : Jurnah Ilmiah Pendidikan Dasar JIPI (Jurnal Ilmiah Penelitian dan Pembelajaran Informatika) Jutisi: Jurnal Ilmiah Teknik Informatika dan Sistem Informasi Jurnal Informatika dan Rekayasa Elektronik bit-Tech Journal of Appropriate Technology for Community Services JATI (Jurnal Mahasiswa Teknik Informatika) CICES (Cyberpreneurship Innovative and Creative Exact and Social Science) Jurnal Layanan Masyarakat (Journal of Public Service) Jifosi Nusantara Science and Technology Proceedings KERNEL: Jurnal Riset Inovasi Bidang Informatika dan Pendidikan Informatika Abdimas Altruis: Jurnal Pengabdian Kepada Masyarakat Jurnal Informatika Dan Tekonologi Komputer (JITEK) East Asian Journal of Multidisciplinary Research (EAJMR) Jurnal Informatika Teknologi dan Sains (Jinteks) Jurnal Teknik Informatika dan Teknologi Informasi Jurnal Krisnadana JUSIFOR : Jurnal Sistem Informasi dan Informatika Jurnal Pepadu Jurnal Ilmiah Teknik Informatika dan Komunikasi Jurnal Krisnadana Jurnal Informatika Polinema (JIP) Horizon: Indonesian Journal of Multidisciplinary Router : Jurnal Teknik Informatika dan Terapan Bridge: Jurnal Publikasi Sistem Informasi dan Telekomunikasi Repeater: Publikasi Teknik Informatika dan Jaringan Prosiding Seminar Nasional Ilmu Teknik Router : Jurnal Teknik Informatika dan Terapan Jurnal Informatika Dan Tekonologi Komputer
Claim Missing Document
Check
Articles

PENGUJIAN WEBSITE DINAS SOSIAL SURABAYA MENGGUNAKAN METODE PENETRATION TESTING DAN OWASP TOP 10 Bregas Arya Bagaskara; Mohammad Idhom; Henni Endah Wahanani
Jurnal Informatika dan Rekayasa Elektronik Vol. 8 No. 1 (2025): JIRE APRIL 2025
Publisher : LPPM STMIK Lombok

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.36595/jire.v8i1.1375

Abstract

Keamanan sistem informasi menjadi faktor penting dalam pengembangan teknologi informasi. Kemajuan teknologi membuat banyaknya potensi celah kemanan yang dapat dimanfaatkan oleh pihak yang tidak bertanggung jawab. Dari hal tersebut dilakukan penelitian yang bertujuan untuk mengidentifikasi dan menganalisis kerentanan pada website Dinas Sosial Surabaya menggunakan metode penetration testing dengan pendekatan OWASP Top 10. Sebagai salah satu aplikasi pelayanan publik, website Dinas Sosial Surabaya memiliki potensi menjadi target serangan siber yang dapat mengancam keamanan data pengguna. Penelitian ini melibatkan lima tahap dalam metode penetration testing, yaitu information gathering, footprinting & scanning, vulnerability assessment, exploitation, serta analyze & report. Pendekatan OWASP Top 10 digunakan untuk mengevaluasi kerentanan, dengan fokus pada sepuluh kerentanan paling kritis yang dapat membahayakan aplikasi web. Hasil pengujian mengungkapkan enam kerentanan utama pada website ini, yaitu Browsable Web Directories, web.config File Information Disclosure, Content Security Policy (CSP) Header Not Set, Strict-Transport-Security Header Not Set, Timestamp Disclosure - Unix, dan X-Content-Type-Options Header Missing. Untuk mengatasi kerentanan tersebut, disarankan penerapan header keamanan seperti Content-Security-Policy (CSP), Strict-Transport-Security (HSTS), dan X-Content-Type-Options: nosniff. Selain itu, pengamanan terhadap direktori dan file konfigurasi sensitif perlu dilakukan untuk meminimalkan risiko kebocoran data. Penelitian ini memberikan wawasan penting dalam meningkatkan keamanan website pemerintah sehingga lebih terlindungi dari ancaman siber.
Development of Blockchain-Based Escrow System with IPFS Protocol for Secure Digital Transactions Pelean Alexander Jonas Sitompul; Henni Endah Wahanani; Achmad Junaidi
bit-Tech Vol. 8 No. 3 (2026): bit-Tech
Publisher : Komunitas Dosen Indonesia

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.32877/bt.v8i3.3337

Abstract

Digital transactions are essential to modern economic activities, yet challenges related to trust, transparency, and security persist. This research develops a blockchain-based escrow system integrated with the InterPlanetary File System (IPFS) to address these issues through a decentralized, tamper-resistant architecture. The primary aim is to create an escrow platform that minimizes human intervention while ensuring data integrity, thereby overcoming limitations found in traditional escrow mechanisms that rely heavily on legality and banking institutions. This study demonstrates the feasibility of blockchain technology enhancement to existing escrow models, especially for traders conducting high-value digital transactions. The system enables secure interactions between buyers, sellers, and viewers through a decentralized application (dApp) that assigns user roles and executes transaction logic. Funds are securely locked within the smart contract, while digital assets are stored in IPFS. In cases of dispute, the viewer can cancel the transaction, triggering an automated refund to the buyer and deletion of associated asset data to maintain fairness and security. Smart contract development and testing are carried out using the Hardhat framework before deployment to networks such as the Ethereum-based Sepolia Testnet. The results show that the proposed system reduces transaction risks, increases user trust, and enhances transparency throughout the digital transaction process. This research introduces a practical framework for decentralized escrow systems and provides valuable insights for industries seeking secure, blockchain-driven transaction solutions. The system developed in this study serves as a reference model for integrating traditional transaction with blockchain technology, encouraging broader adoption and future exploration of decentralized systems.
Design and Development of an IoT-Based Rain Intensity Prediction System Using LoRa M. Arif; Mohammad Idhom; Henni Endah Wahanani
bit-Tech Vol. 8 No. 3 (2026): bit-Tech
Publisher : Komunitas Dosen Indonesia

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.32877/bt.v8i3.3704

Abstract

An Internet of Things (IoT)–based system for rain intensity monitoring and next-day prediction is presented by integrating low-power wide-area communication using LoRa with cloud-based processing for outdoor and rural environments. This study evaluates the feasibility of LoRa communication and the end-to-end operational reliability of an IoT–cloud pipeline, while positioning machine learning as a supporting decision-aid module. A low-cost sensing node equipped with temperature, humidity, and wind-speed sensors is connected to a LoRa-based gateway that forwards measurements to an Amazon EC2 cloud server via MQTT for centralized storage, processing, and notification delivery. The system is evaluated through a 10-day single-node real-world outdoor deployment, focusing on sensor data acquisition reliability, LoRa link quality, and end-to-end operation from data acquisition to user notifications. The classification module achieves an overall accuracy of 0.74 with a weighted F1-score of 0.71, while minority-class performance remains limited due to class imbalance. LoRa communication remains stable with RSSI values of −80.91 to −79.19 dBm, SNR values of 9.86–9.95 dB, and packet loss rates below 3%. By jointly evaluating LPWAN communication reliability and cloud-side predictive services within a single field deployment, the results demonstrate the practicality of LPWAN-based IoT sensing with cloud integration for rain intensity monitoring in resource-constrained environments, while highlighting the need for future improvements in minority-class prediction and multi-node scalability.
Uncovering Hidden Security Risks in Government Web Portals Using Penetration Testing and Attack Modeling Belia Putri Salsabila; Henni Endah Wahanani; Achmad Junaidi
bit-Tech Vol. 8 No. 3 (2026): bit-Tech
Publisher : Komunitas Dosen Indonesia

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.32877/bt.v8i3.3776

Abstract

Government web portals that consolidate public services and process personally identifiable data are prime targets for cyber adversaries. However, many existing assessments rely on single-framework methodologies that provide limited adversarial context and insufficient prioritization guidance. This study evaluates the security posture of System X, a public-facing government portal in Indonesia, using a grey-box penetration testing approach that integrates OWASP Top 10:2021, CVSS v3.1, and MITRE ATT&CK. Automated scanning using OWASP ZAP and Nessus identified 12 potential vulnerabilities, which were subsequently validated through manual testing using Burp Suite, cURL, SQLmap, and browser developer tools. The validation process confirmed nine True Positives and three False Positives, resulting in a 25% false positive rate, consistent with prior studies on government web applications. The identified vulnerabilities fall within Broken Access Control, Security Misconfiguration, and Identification and Authentication Failures, with CVSS Base Scores ranging from 4.2 to 6.1. Unlike traditional severity-based assessments, the integration of MITRE ATT&CK enables adversarial behavior mapping and reveals dependency relationships between vulnerabilities. For example, a single Content Security Policy (CSP) misconfiguration was found to enable multiple attack techniques (T1059.007), demonstrating that addressing one root cause can mitigate several related vulnerabilities simultaneously. This integrated approach enhances vulnerability prioritization by providing both severity and attacker-context insights, offering more actionable remediation strategies compared to single-framework methods. The findings contribute to improving practical security assessment methodologies for government systems and support evidence-based cybersecurity decision-making.
RANCANG BANGUN SISTEM SMART TRAFFIC LIGHT BERBASIS IOT UNTUK MEMPRIORITASKAN KENDARAAN DARURAT MENGGUNAKAN FUZZY TYPE-2 Alfi Ramadhaniar; Basuki Rahmat; Henni Endah Wahanani
JIPI (Jurnal Ilmiah Penelitian dan Pembelajaran Informatika) Vol 11, No 1 (2026)
Publisher : STKIP PGRI Tulungagung

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.29100/jipi.v11i1.7790

Abstract

Kemacetan lalu lintas di area perkotaan menjadi salah satu hambat-an utama bagi kendaraan darurat yang membutuhkan akses cepat untuk menyelamatkan nyawa atau menuju tempat terjadinya in-siden. Penelitian ini bertujuan merancang dan mengimplementasi-kan prototipe sistem smart traffic light berbasis Internet of Things (IoT) yang dapat memprioritaskan kendaraan darurat dengan mendeteksi suara sirine menggunakan sensor suara KY-037. Sistem ini dikendalikan oleh mikrokontroler Arduino Uno R3 ditambah dengan WiFi ESP8266 dan menggunakan metode Fuzzy Logic Type-2 untuk menangani ketidakpastian tingkat intensitas suara yang diterima sensor, serta menentukan durasi lampu hijau pada arah kendaraan darurat menggunakan delaytime. Selain itu, sistem dilengkapi dengan fitur kontrol manual berbasis aplikasi Blynk IoT untuk memungkinkan intervensi lampu lalu lintas secara langsung dalam situasi tertentu. Hasil pengujian menunjukkan bahwa sistem prototipe mampu mengidentifikasi suara sirine kendaraan darurat dan merespon dengan mengubah sinyal lampu lalu lintas menjadi hijau untuk memprioritaskan laju kendaraan darurat, serta kembali ke mode normal setelah kendaraan melintas. Sistem ini diharapkan dapat meningkatkan efisiensi layanan darurat dan mengurangi dam-pak dari kendaraan darurat yang terjebak kemacetan pada jalur per-simpangan.
PENGUJIAN USABILITY WEBSITE E-LEARNING DI SMAN 3 MOJOKERTO MENGGUNAKAN WHITE BOX TESTING, SYSTEM USABILITY SCALE, DAN TECHNOLOGY ACCEPTANCE MODEL Firlie Aurellia Az-zahra; Henni Endah Wahanani; Afina Lina Nurlaili
JIPI (Jurnal Ilmiah Penelitian dan Pembelajaran Informatika) Vol 10, No 3 (2025)
Publisher : STKIP PGRI Tulungagung

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.29100/jipi.v10i3.6337

Abstract

Pemanfaatan teknologi informasi, e-learning telah mengubah cara belajar mengajar menjadi lebih efisien dan praktis. Guru dan siswa dapat belajar secara virtual tanpa harus bertemu langsung di kelas, menggunakan internet untuk menyampaikan materi tanpa batasan tempat dan waktu. Banyak sekolah, termasuk SMAN 3 Mojokerto, telah menerapkan sistem e-learning ini. Meskipun e-learning menawarkan banyak keuntungan. Beberapa tantangan dan masalah perlu mendapat perhatian, terutama terkait dengan kemudahan penggunaan dan penerimaan teknologi oleh pengguna. Tujuan penelitian ini adalah untuk mengevaluasi penggunaan dan penerimaan sistem atau teknologi oleh pengguna menggunakan White Box, System Usability Scale (SUS), dan Technology Acceptance Model (TAM). Hasil penelitian menunjukkan jumlah fungsi yang diuji dalam pengujian white box adalah 30, dengan 31 test case. Semua fungsi berjalan sesuai dengan fungsionalitasnya dan tidak ditemukan error pada setiap fungsi yang diuji. Pada pengujian System Usability Scale yang dilakukan melalui penyebaran kuesioner, diperoleh skor SUS sebesar 52,055 yang masuk dalam kategori marginal low dan ok, dengan grade F. Hasil perhitungan nilai F dari Model Penerimaan Teknologi (Technology Acceptance Model) menunjukkan angka sebesar 0,738, dengan tingkat signifikansi mencapai 0,597, yang jauh melebihi batas 0,05. Oleh karena itu, dapat disimpulkan bahwa semua variabel independen dalam Technology Acceptance Model tidak menunjukkan pengaruh yang signifikan terhadap variabel dependen System Usability Scale (SUS).
Analisis Pengaruh Strategi Augmentasi Data Terhadap Performa Model Hybrid Cnn–Swin Transformer dalam Klasifikasi Citra Mikroskopis Malaria Ramadhani, Muhammad Nabil; Haromainy, M. Muharrom Al; Wahanani, Henni Endah
HORIZON: Indonesian Journal of Multidisciplinary Vol. 4 No. 4 (2026): HORIZON: Indonesian Journal of Multidisciplinary
Publisher : Lembaga Intelektual Muda (LIM) Maluku

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.54373/hijm.v4i4.7178

Abstract

Malaria diagnosis through microscopic images still faces challenges due to variations in the shape, size, and quality of blood cell images that can reduce the generalization ability of deep learning models. One approach to address this problem is data augmentation, but the effectiveness of various augmentation strategies on a hybrid Convolutional Neural Network (CNN) and Swin Transformer model has not been systematically compared. This study aims to compare the effect of five data augmentation strategies on the performance of the Hybrid CNN–Swin Transformer model in classifying malaria microscopic images. The NIH Malaria dataset consisting of 27,558 blood cell images was divided using the stratified split method with a ratio of 80:10:10. The model was trained using five augmentation strategies, namely Baseline (A0), Basic (A1), Geometric (A2), Advanced (A3), and RandAugment (A4), then evaluated using accuracy, precision, recall, F1-score, ROC-AUC, and Train-Val Gap. All strategies produced accuracy above 96% and ROC-AUC above 99%. Strategy A3 provided the highest classification performance with an accuracy of 97.79%, an F1-score of 97.78%, and an ROC-AUC of 99.52%, while strategy A2 showed the most stable generalization ability based on the Train-Val Gap value. The results of this study provide empirical evidence that the choice of augmentation strategy affects the performance and generalization of the model, and serve as a reference in the development of a Hybrid CNN–Swin Transformer-based malaria classification system.
Analisis Kerentanan Keamanan Sistem Enterprise Resource Planning Menggunakan PTES dan Owasp Zap Ekamartha, Ken Narendra; Wahanani, Henni Endah; Junaidi, Achmad
HORIZON: Indonesian Journal of Multidisciplinary Vol. 4 No. 4 (2026): HORIZON: Indonesian Journal of Multidisciplinary
Publisher : Lembaga Intelektual Muda (LIM) Maluku

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.54373/hijm.v4i4.7179

Abstract

This study aims to identify and analyze security vulnerabilities in the XYZ ERP system using the Penetration Testing Execution Standard (PTES) approach. The study was conducted through pre-engagement interactions, intelligence gathering, threat modeling, vulnerability analysis, exploitation, and reporting, utilizing OWASP ZAP as the primary testing tool. Vulnerabilities were classified based on the Common Weakness Enumeration (CWE), while their severity was assessed using the Common Vulnerability Scoring System (CVSS) version 3.1. The study identified four main vulnerabilities: SQL Injection (CVSS 8.3; High), Brute Force Login Page (CVSS 8.2; High), Cross-Site Scripting (CVSS 5.4; Medium), and the risk of active session abuse (CVSS 4.2; Medium). These vulnerabilities have the potential to threaten data confidentiality, integrity, and availability through unauthorized access, data manipulation, account takeover, and user session abuse. This research provides technical recommendations for improving ERP system security and serves as a reference for organizations in systematically evaluating and mitigating web application vulnerabilities.
Penerapan Explainable Boosting Machine Pada Hasil Pencarian Best Matching 25 Sebagai Rekomendasi Kualitas Buku Dengan Penjelasan Fitur Bagus Satrio Wicaksono; Intan Yuniar Purbasari; Henni Endah Wahanani
Pendas : Jurnal Ilmiah Pendidikan Dasar Vol. 11 No. 03 (2026): Volume 11 No. 03, September 2026 Produce
Publisher : Program Studi Pendidikan Guru Sekolah Dasar FKIP Universitas Pasundan

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.23969/jp.v11i03.61788

Abstract

The rapid growth of digital book collections creates information overload, complicating book discovery for readers. Traditional BM25 search systems retrieve keyword-relevant documents but completely ignore book quality signals. Furthermore, conventional machine learning re-ranking models act as black-boxes, obscuring their decision-making processes, while post-hoc explanation methods only provide approximations that do not represent the model's exact logic. This study proposes a two-stage ranking architecture integrating an Explainable Boosting Machine (EBM) as a glass-box re-ranker over BM25 initial retrievals. Trained on 13.4 million Goodreads interaction records, the EBM predicts general book quality based on metadata. Evaluation using 50 queries demonstrates that EBM with feature interactions achieves an NDCG@10 of 0.9373, outperforming the BM25 baseline (0.9284) specifically on exploratory genre queries by prioritizing popular, high-quality books. Global interpretability analysis reveals that popularity contributes most significantly to prediction scores, whereas local explanations precisely map individual feature attributions. Ablation testing confirms the faithfulness of these explanations; removing dominant features consistently reduces prediction scores matching their exact shape function values. In conclusion, integrating EBM successfully enhances BM25 ranking quality through community-based signals while providing fully transparent and auditable feature explanations.
PEMBUATAN SMARTCONTRACT APLIKASI FUNDRAISING BERBASIS BLOCKCHAIN Budianto Budianto; Retno Mumpuni; Henni Endah Wahanani
Jurnal Informatika Dan Tekonologi Komputer (JITEK) Vol. 3 No. 3 (2023): November : Jurnal Informatika dan Tekonologi Komputer
Publisher : Lembaga Pengembangan Kinerja Dosen

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.55606/jitek.v3i3.2001

Abstract

Fundraising activities have become a common method to achieve various objectives, including charitable activities and gathering funds from investors for companies. However, cases of fund misuse often occur, leading to inappropriate use of funds or even unfair loss. Therefore, an innovative approach is needed to enhance trust and transparency in the fundraising process. In this study, the use of smart contracts on a blockchain network will be employed as a solution to ensure the security and integrity of each transaction in fundraising activities. By utilizing smart contracts, all transactions in fundraising activities can be verified by all users on the blockchain network. Transaction data recorded on the blockchain is permanent and tamper-proof, preventing any manipulation or fund misuse. Leveraging smart contracts and blockchain technology, fundraising activities can be conducted more efficiently, transparently, and securely. This approach helps improve trust among involved parties and reduces the risk of fund misuse
Co-Authors Abdi, Harris Cipta Abiyan Naufal Hilmi Achmad Junaidi Aditia Mieka Darminta Adityawati, Dewi Affro, Salma Agung Mustika Rizki Agung Mustika Rizki, Agung Mustika Agussalim Agussalim Agussalim, Agussalim Ahmad Anwar Saifurridzal Akbar, Fawwaz Ali Al Hamda, Veqqy Alfi Ramadhaniar Ananda Azra Razali Andreas Nugroho Sihananto Anggraini Puspita Sari Anggraini Puspitasari Sari Aniisah Eka Rahmawati Arif Saifudin, Muhamad Arimawan, Kesya Sakha Nesya Arrosyid, Muhammad Habib Arum Prabowo, Galih Bagus Satrio Wicaksono Bariq Satrio Yudoko Basuki Rahmat Basuki Rahmat Masdi Siduppa Belia Putri Salsabila Bregas Arya Bagaskara Budi Mukhamad Mulyo Budianto Budianto Chystia Aji Putra Darminta, Aditia Mieka Eka Zuni Selviana Ekamartha, Ken Narendra Endang Sholihatin Erlangga Wicaksono, Dewa Erlina Diah Karisma Eva Yulia Puspaningrum Fadhilasari, Annisa Fetty Tri Anggraeny Fikri Dwilaksono Firlie Aurellia Az-zahra Firza Prima Aditiawan Fitriansyah, Muhammad Daffa Hamzah Dimas Syah Reza Hermawan, Oky I Made Suartana I Nyoman Sujana idhom, Mohammad IMANDAYANTI, NUR EZA Intan Yuniar Purbasari Intan Yuniar Purbasari inthan anggraini, dieas Islah Rachmawati Lina Nurlaili, Afina M. Arif Made Hanindia Prami Swari Mandyartha, Eka Prakarsa Mohamad Ilham Prasetyo Raharjo Mohammad Idhom Mohammad Idhom Mohammad Idhom Muchammad Syamsu Huda Muhammad Abdullah Hafizh Muhammad Idhom Muhammad Muharrom Al Haromainy Muhammad Rizki Alamsyah Muhammad, rizal Muttaqin, Faisal Nafa Nabila El Indri naufal firdaus, ahmad Nugroho, Budi Nugroho, Budi Nugroho, Budi Nugroho, Budi Nurlaili, Afina Lina Nurlaili, Afina Lina Pelean Alexander Jonas Sitompul Phitria, Shaum Prakoso, Galih Indo Putra, Chrystia Aji Putra, Chystia Aji Putri, Della Atika Raditya Dimas Libriawan Rahmawati, Aniisah Eka Ramadhani, Muhammad Nabil Rayhan Rizal Mahendra Retno Mumpuni Retno Mumpuni Rhiziqo Adjie Syahputra Sandy Rizkyando Sandy, Aditya Noor Saputra, Wahyu S.J. Saputro, Fajar Arif Eko Shabika Aqmarina, Azzuraa Soedarto, Teguh Suartana, I Made Sugiarto Sugiarto - SUGIARTO - Sukirmiyadi, Sukirmiyadi Swasti, Ika Korika Syahbagus Radithya Haryo Santoso Thohir, A. Zaki Thomas Andrew Imanzaghi Vita Via, Yisti Wahono, Bari Hade Variant Yudha Asmara, I Wayan