Article Per Year (5 Year)
p-Index From 2021 - 2026
0.444
P-Index
This Author published in this journals
All Journal JURNAL ILMIAH SAINS TEKNOLOGI DAN INFORMASI Jurnal Teknik Informatika dan Teknologi Informasi
Hana Khairunnas
Universitas Bina Sarana Informatika
Computer Science & IT Energy Environmental Science

Published : 2 Documents Claim Missing Document
Claim Missing Document
Check
Articles

Found 2 Documents
Search

 1 
Pelanggaran Keamanan Sistem Komputer: (Studi Kasus Unauthorized Access dan Dampaknya terhadap Privasi Data) Hana Khairunnas; Amelia Rachma Dita; Nuruzzahra Syaputri; Siti Zulaeha; Excelcis Novan Solomasi G; Yunita Yunita
Jurnal Teknik Informatika dan Teknologi Informasi Vol. 5 No. 3 (2025): Desember: Jurnal Teknik Informatika dan Teknologi Informasi
Publisher : Lembaga Pengembangan Kinerja Dosen

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.55606/jutiti.v5i3.6290

Abstract

Unauthorized access incidents often occur stealthily, with password spraying attacks resulting in the misuse of legitimate credentials. This study reconstructs a real-world incident using system logs from Identity Provider/Single Sign-On (IdP/SSO), Security Information and Event Management/Endpoint Detection and Response (SIEM/EDR), and application-level sources. The attack techniques were mapped to the MITRE ATT&CK framework, focusing on T1110 (Brute Force) and T1078 (Valid Accounts). A Data Protection Impact Assessment (DPIA) was conducted based on the Indonesian Personal Data Protection Law (Law No. 27 of 2022), complemented by a gap assessment against ISO/IEC 27001 and 27002 controls. The results show that the attack’s success was driven by incomplete Multi-Factor Authentication (MFA) deployment, the continued use of legacy/basic authentication, weak adaptive rate-limiting and lockout mechanisms, and a monitoring system limited to alert-only functions. The DPIA identified exposure of thousands of personal data records with medium-to-high privacy risks, particularly concerning confidentiality breaches and identity impersonation, necessitating possible notification to authorities and affected data subjects. The study recommends enforcing MFA across all access channels, disabling legacy authentication, implementing risk-based or step-up authentication, activating automatic blocking for password spraying and impossible travel anomalies, extending DPIA coverage during control changes, and updating the Statement of Applicability to reflect modern security controls. Strengthening identity protection and adopting preventive monitoring are shown to significantly reduce privacy risks while easing compliance obligations.
Penerapan Metode Hybrid SAW-WP dalam Sistem Pendukung Keputusan untuk Penggunaan Platform Digital Meeting Hana Khairunnas; Frisky Suryo Lam Aji; Andri Prayoga
JURNAL ILMIAH SAINS TEKNOLOGI DAN INFORMASI Vol. 4 No. 4 (2026): Oktober : JURNAL ILMIAH SAINS TEKNOLOGI DAN INFORMASI (JITI)
Publisher : CV. ALIM'SPUBLISHING

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.59024/jiti.v4i4.2569

Abstract

This study addresses the selection of free digital meeting platforms, where user choice may be influenced by habit and popularity rather than a structured multi-criteria assessment. The study aims to evaluate Zoom, Google Meet, and Microsoft Teams using a Decision Support System based on a hybrid Simple Additive Weighting (SAW) and Weighted Product (WP) approach. A quantitative descriptive design was applied using questionnaire data from 230 respondents who had experience using at least two of the three platforms for educational and/or professional activities. Four benefit criteria were evaluated: popularity, user interface/user experience (UI/UX), accessibility, and user satisfaction. SAW was used to normalize the decision matrix, after which the normalized values were processed using WP with criterion weights of 2, 3, 3, and 2, respectively. The detailed calculation produced preference values of 0.514 for Zoom, 0.450 for Google Meet, and 0.036 for Microsoft Teams. Thus, the resulting order was Zoom, Google Meet, and Microsoft Teams. The findings indicate that the hybrid procedure can integrate usage intensity and perceived quality dimensions into a transparent decision-support process. The result is applicable within the respondent context and criteria used in this study.
Co-Authors Amelia Rachma Dita Andri Prayoga Excelcis Novan Solomasi G Frisky Suryo Lam Aji Nuruzzahra Syaputri Siti Zulaeha Yunita Yunita