Claim Missing Document
Check
Articles

Found 2 Documents
Search

Rancang Bangun Sistem Login Berbasis Zero Trust untuk Keamanan Akses Dashboard Karyawan Felix John Pardamean Hutabarat; Dedy Kiswanto; Paskah Abadi Simanullang; Ririn Amelia BR Siregar

Publisher :

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.32672/jnkti.v8i6.9925

Abstract

Abstrak - Perkembangan teknologi informasi menuntut sistem keamanan yang adaptif terhadap ancaman siber modern. Model keamanan tradisional berbasis perimeter sudah tidak efektif, sehingga diperlukan pendekatan baru seperti Zero Trust Architecture (ZTA) dengan prinsip never trust, always verify. Penelitian ini bertujuan merancang dan membangun sistem login berbasis Zero Trust untuk mengamankan akses Dashboard Karyawan menggunakan bahasa pemrograman PHP dan basis data MySQL. Sistem ini mengintegrasikan autentikasi multi-faktor (OTP email), validasi eksplisit di setiap tahap login, pembatasan hak akses (least privilege), serta mekanisme session hardening seperti rotasi session ID, pengaturan cookie aman (Secure, HttpOnly, SameSite), timeout, dan lockout policy. Pengujian dilakukan melalui metode black box, uji integrasi, dan uji keamanan dengan hasil bahwa sistem mampu menolak akses tanpa autentikasi sah, mencegah reuse OTP, serta mencatat seluruh aktivitas keamanan secara real-time dalam log terstruktur. Implementasi ini terbukti meningkatkan keamanan identitas pengguna, melindungi data sensitif, serta menurunkan risiko penyalahgunaan kredensial dan serangan brute-force. Hasil penelitian menunjukkan bahwa penerapan prinsip ZTA dapat diimplementasikan secara efektif pada lingkungan sistem web berskala menengah tanpa mengorbankan kenyamanan pengguna.Kata kunci : Zero Trust Architecture; Autentikasi Multi-Faktor; Dashboard Karyawan; Keamanan Data; Sistem Login; Abstract - The rapid development of information technology requires security systems that can adapt to modern cyber threats. Traditional perimeter-based security models are no longer effective, necessitating a new approach such as the Zero Trust Architecture (ZTA), which operates on the principle of never trust, always verify. This study aims to design and develop a Zero Trust-based login system to secure employee dashboard access using PHP and MySQL technologies. The system integrates multi-factor authentication (OTP via email), explicit verification at every login stage, least privilege access control, and session hardening mechanisms such as session ID rotation, secure cookie configuration (Secure, HttpOnly, SameSite), timeout, and lockout policies. Testing through black-box, integration, and security tests showed that the system effectively denies unauthorized access, prevents OTP reuse, and records all security-related activities in a real-time structured log. The implementation enhances user identity protection, safeguards sensitive data, and reduces risks of credential misuse and brute-force attacks. The results indicate that the Zero Trust approach can be effectively implemented in mid-scale web systems without sacrificing usability.Keywords: Zero Trust Architecture; Multi-Factor Authentication; Employee Dashboard; Data Security; Login System;
Sistem Keamanan Pintu Berbasis Computer Vision dengan Biometric Face Recognition dan Physical Tampering Detection Felix John Pardamean Hutabarat; Dedy Kiswanto; Paskah Abadi Simanullang; Fadilla Amanah

Publisher :

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.32672/jnkti.v9i1.10270

Abstract

Abstrak - Keamanan akses pintu pada lingkungan hunian dan kos membutuhkan sistem yang tidak hanya mampu memverifikasi identitas pengguna, tetapi juga responsif terhadap ancaman fisik terhadap perangkat. Penelitian ini mengusulkan dan merealisasikan S.I.G.H.T. (Secure Intelligent Gate Hardware Tamper-detection), sebuah sistem keamanan pintu berbasis computer vision yang menggabungkan biometric face recognition menggunakan algoritma Local Binary Patterns Histograms (LBPH) dengan physical tampering detection berbasis sensor getaran. Arsitektur sistem terdiri atas backend FastAPI, dashboard web berbasis React sebagai pusat pemantauan dan kontrol, agen kamera untuk pemrosesan citra pada perangkat edge, serta modul IoT gerbang yang mengendalikan kunci dan alarm secara real-time melalui antrian perintah terpusat. Metode pengembangan yang digunakan adalah pendekatan Research and Development (RD) dengan model Waterfall yang mencakup analisis kebutuhan, perancangan, implementasi, dan pengujian terstruktur. Validasi fungsional dilakukan menggunakan black box testing pada skenario utama, seperti otentikasi wajah, pengelolaan data penghuni, respons sensor getaran, dan kontrol aktuator pintu serta alarm. Hasil pengujian menunjukkan seluruh skenario berjalan sesuai harapan dengan status “Lulus”, sehingga S.I.G.H.T. dinilai layak sebagai prototipe solusi keamanan pintu berlapis yang adaptif dan berpotensi dikembangkan lebih lanjut pada skala implementasi yang lebih luas.Kata kunci : Computer vision; Deteksi tampering fisik; Internet of Things; LBPH; Sistem keamanan pintu; Abstract - Door access security in residential and boarding environments requires a system that not only verifies user identity, but also responds to physical threats directed at the device. This study proposes and implements S.I.G.H.T. (Secure Intelligent Gate Hardware Tamper-detection), a computer-vision-based door security system that combines biometric face recognition using the Local Binary Patterns Histograms (LBPH) algorithm with physical tampering detection using a vibration sensor. The system architecture consists of a FastAPI backend, a React-based web dashboard as the central monitoring and control interface, a camera agent for image processing on edge devices, and an IoT gate module that controls the lock and alarm in real time through a centralized command queue. The development process follows a Research and Development (RD) approach with the Waterfall model, covering requirements analysis, system design, implementation, and structured testing stages. Functional validation is carried out using black box testing on key scenarios such as face authentication, resident data management, vibration sensor response, and actuator control for the door and alarm. The results show that all scenarios meet the expected outcomes with a “Pass” status, indicating that S.I.G.H.T. is feasible as a layered and adaptive door security prototype that can be further extended to broader deployment contexts.Keywords: Computer vision; Door security system; Internet of Things; LBPH; Physical tampering detection;