Muttaqin, Miftahul Fadli
Unknown Affiliation

Published : 1 Documents Claim Missing Document
Claim Missing Document
Check
Articles

Found 1 Documents
Search

STRIDE-Based Threat Analysis and AI-Driven Dataset Design for Securing Educational E-Payment Systems Ferdiansyah, Doddy; Lidya, Leony; Muttaqin, Miftahul Fadli
Media Jurnal Informatika Vol 17, No 2 (2025): Media Jurnal Informatika
Publisher : Teknik Informatika Universitas Suryakancana Cianjur

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.35194/mji.v17i2.5918

Abstract

The increasing adoption of electronic payment (e-payment) systems in educational settings introduces significant cybersecurity challenges. This study conducts a systematic security analysis of a web-based school canteen e-payment system using the STRIDE threat modeling framework. The methodology involves three stages: system modeling with a Data Flow Diagram (DFD), threat mapping across system components, and qualitative risk assessment based on potential impact and likelihood. The analysis identified six STRIDE threat categories, with high-risk findings in Tampering (balance and price manipulation), Spoofing (account takeover), and Denial of Service (flooding attacks). Recommended mitigation strategies include multi-factor authentication, strict server-side input validation, immutable logging, and secure session management. Beyond manual threat analysis, this research contributes by designing a structured threat dataset as a foundation for artificial intelligence (AI) integration. This dataset enables the development of AI models for automated threat classification, risk prediction, and adaptive mitigation recommendations. The findings highlight the importance of proactive and forward-looking security approaches while opening pathways for future research on data-driven security automation in educational digital infrastructures.