Article Per Year (5 Year)
p-Index From 2021 - 2026
0.961
P-Index
This Author published in this journals
All Journal EDUMATIC: Jurnal Pendidikan Informatika Jurnal Manajemen Informatika dan Sistem Informasi Jurnal Komputer Teknologi Informasi Sistem Komputer (JUKTISI) Jurnal Sistem Cerdas dan Rekayasa Information Technology Education Journal Journal of Embedded Systems, Security and Intelligent Systems
Muhlis Tahir
Universitas Trunodjoyo Madura
Computer Science & IT Control & Systems Engineering Decision Sciences, Operations Research & Management Education Electrical & Electronics Engineering Engineering

Published : 6 Documents Claim Missing Document
Claim Missing Document
Check
Articles

Found 6 Documents
Search

 1 
RANCANG BANGUN VULNERABLE WEB SIMULATION PADA REPLIKA PORTAL AKADEMIK UNTUK PENGUJIAN PENETRASI XSS DAN SQL INJECTION Fadli Maghfirli; Najwa Wahyu Azzuhra; Muhlis Tahir
Jurnal Manajemen Informatika dan Sistem Informasi Vol. 9 No. 2 (2026): MISI Juni 2026
Publisher : LPPM STMIK Lombok

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.36595/misi.v9i2.2057

Abstract

Keamanan aplikasi berbasis web sering kali diabaikan, padahal kelalaian pada validasi parameter masukan dapat berakibat fatal seperti pengambilalihan hak akses dan kebocoran basis data. Risiko ini sangat tinggi pada platform akademik institusi pendidikan yang mengelola aset data sensitif. Berangkat dari masalah tersebut, penelitian ini bertujuan merancang bangun Vulnerable Web Simulation mandiri berbentuk replika portal akademik universitas berarsitektur Role-Based Access Control (RBAC) sebagai lingkungan evaluasi kerentanan yang transparan dan legal. Pengujian dilakukan secara eksperimental melalui metode penetration testing manual dan otomatis dengan mengintegrasikan ParamSpider, DalFox, dan SQLMap. Hasil pengujian empiris membuktikan bahwa ketiadaan Prepared Statements memicu celah SQL Injection kritis. Melalui pengujian manual dengan muatan bypass otentikasi admin' -- -, gerbang login administrator berhasil ditembus. Lebih lanjut, pemindaian otomatis menggunakan SQLMap berhasil membongkar struktur internal dan mengekstrak seluruh data kredensial sensitif dari tabel pengguna. Pada lapisan antarmuka, absennya fungsi output encoding memicu kerentanan Cross-Site Scripting (XSS). Penyisipan skrip JavaScript tersimpan permanen pada fitur forum diskusi (Stored XSS), dan DalFox mendeteksi satu titik rentan Reflected XSS pada parameter pencarian. Kesimpulannya, pengabaian prinsip secure coding secara empiris meruntuhkan seluruh integritas kontrol akses akademik. Hasil penelitian ini berimplikasi sebagai panduan praktis penambalan celah keamanan dan rujukan pembangunan laboratorium virtual keamanan siber di lingkungan pendidikan.
Hybrid Deception–Detection Approach Using Dionaea Honeypot and Snort IDS for Wireless Network Security Alvin Kamil; Muhlis Tahir
Information Technology Education Journal Vol. 5, No. 2, May (2026)
Publisher : Jurusan Teknik Informatika dan Komputer

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.59562/intec.v5i2.277

Abstract

Purpose – This study implements a hybrid deception–detection approach by integrating Snort IDS and the Dionaea honeypot, supported by the ELK Stack for centralized monitoring and visualization within a wireless school network environment. The proposed approach provides a practical and low-cost security monitoring solution for educational institutions with limited cybersecurity resources.Design/methods/approach – The research method involved literature review, system design, implementation, and testing using simulated port scanning, brute force, and Denial of Service (DoS) attack scenarios. Snort IDS was configured to detect suspicious network traffic, while Dionaea operated as a decoy service to record attacker interactions. Generated alerts and interaction logs were centralized and visualized through the ELK Stack.Findings – The implementation results show that the proposed system generated alerts and interaction logs for all simulated attack scenarios within the controlled experimental environment. Snort IDS generated 2,928 port scanning alerts, 426 brute force alerts, and 3,428 DoS alerts, while Dionaea recorded 493 FTP interaction logs. The ELK Stack centralized and visualized 7,275 generated log records in near real-time. Baseline monitoring under normal traffic conditions did not produce false positive alerts. The reported values represent generated monitoring events rather than formal detection-performance metrics.Research implications/limitations – This study was conducted in a controlled school-scale wireless network environment using limited attack scenarios and short-term monitoring observations. Therefore, the findings may not directly represent large-scale production network conditions.Originality/value – This study demonstrates the feasibility of integrating traffic-based intrusion detection, deception-based interaction logging, and centralized monitoring within a unified wireless school network security architecture using open-source technologies.
Pengembangan Sistem Intrusion Detection and Prevention System (IDPS) Berbasis Random Forest dan Windows Defender Firewall pada Jaringan Lokal Testing M. Salman Nuzul Ramdhani; Muhlis Tahir; Mohammad Muhyidin Alhaq
Jurnal Komputer Teknologi Informasi Sistem Komputer (JUKTISI) Vol. 5 No. 1 (2026): Juni 2026
Publisher : LKP KARYA PRIMA KURSUS

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.62712/juktisi.v5i1.1054

Abstract

Perkembangan teknologi jaringan komputer yang pesat telah meningkatkan penggunaan jaringan lokal (Local Area Network/LAN) dalam berbagai aktivitas digital. Namun, hal tersebut juga diiringi dengan meningkatnya ancaman keamanan seperti akses tidak sah, malware, dan intrusi jaringan. Oleh karena itu, diperlukan sistem keamanan yang mampu mendeteksi dan mencegah serangan secara efektif. Penelitian ini bertujuan untuk mengembangkan sistem Intrusion Detection and Prevention System (IDPS) berbasis algoritma Random Forest yang diintegrasikan dengan Windows Defender Firewall pada jaringan lokal. Sistem ini memanfaatkan machine learning untuk mengklasifikasikan trafik jaringan menjadi normal dan berbahaya, serta firewall sebagai mekanisme pencegahan untuk memblokir aktivitas mencurigakan. Metode penelitian meliputi pengembangan sistem, implementasi pada jaringan lokal, serta pengujian melalui simulasi serangan. Algoritma Random Forest digunakan untuk meningkatkan akurasi deteksi, sedangkan konfigurasi firewall digunakan untuk mengontrol lalu lintas jaringan. Hasil penelitian menunjukkan bahwa sistem mampu mendeteksi aktivitas mencurigakan secara efektif serta mencegah akses tidak sah melalui mekanisme firewall. Integrasi antara machine learning dan firewall menghasilkan sistem keamanan berlapis yang meningkatkan perlindungan jaringan. Kesimpulannya, sistem IDPS yang dikembangkan efektif dalam meningkatkan keamanan jaringan lokal dengan menggabungkan mekanisme deteksi dan pencegahan.
Implementasi Cryptography Based Multilayer Authentication pada Sistem Login Berbasis Web Menggunakan Bcrypt Hashing dan One Time Password (OTP) Nurul Jannah; Lailatul Istianah; Muhlis Tahir
Jurnal Sistem Cerdas dan Rekayasa (JSCR) Vol 8 No 1 (2026): Jurnal Sistem Cerdas dan Rekayasa (JSCR) 2026
Publisher : Lembaga Penelitian dan Pengabdian kepada Masyarakat Universitas Widya Kartika (LPPM UWIKA)

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.61293/jscr.v8i1.946

Abstract

Meningkatnya penggunaan layanan berbasis internet menuntut sistem login web memiliki tingkat keamanan yang lebih baik. Autentikasi yang hanya menggunakan email dan password masih menyimpan risiko, terutama terhadap percobaan brute force dan kebocoran data pengguna. Untuk mengatasi hal tersebut, penelitian ini mengembangkan sistem login berbasis web dengan menerapkan dua lapisan keamanan, yaitu bcrypt hashing dan OTP. Metode pengembangan yang digunakan adalah SDLC dengan model Waterfall, mencakup tahap kebutuhan, perancangan, pembuatan, dan pengujian sistem. Aplikasi dibuat menggunakan Flask berbasis Python, database SQLite, bcrypt untuk enkripsi password, serta SMTP sebagai media pengiriman OTP. Hasil pengujian membuktikan bahwa sistem lebih aman karena password tidak disimpan dalam bentuk asli dan login harus melewati verifikasi OTP.
Evaluation of PCC Load Balancing for Dual ISP Networks: Enhancing Throughput and Traffic Stability Bustomi Bustomi; Muhlis Tahir
Jurnal Pendidikan Informatika (EDUMATIC) Vol 10 No 1 (2026): Edumatic: Jurnal Pendidikan Informatika
Publisher : Universitas Hamzanwadi

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.29408/edumatic.v10i1.34243

Abstract

Multi-ISP network management often experiences imbalanced traffic distribution and decreased connection stability despite having adequate bandwidth capacity. Previous studies indicate that load balancing methods such as PCC are effective in traffic distribution; however, they remain limited to implementation aspects, with constraints in analyzing network processing efficiency and inconsistencies in results across various testing conditions. This study aims to empirically evaluate the effectiveness of PCC integrated with failover in improving dual ISP network performance. It employs a controlled experimental design with a comparative approach before and after implementation in a real network environment. The measured parameters include throughput, traffic distribution, connection stability, and packet rate, which are analyzed using a quantitative measurement-based comparative approach. The results show an increase in download throughput from 15–18 Mbps to 36–41 Mbps (±130–150%) and upload throughput from 14–17 Mbps to 36–40 Mbps (±120–140%), more balanced traffic distribution, and a significant reduction in packet rate, indicating improved network processing efficiency. The integration of failover also ensures service continuity without significant disruption. This study provides empirical evidence that a connection-based load balancing approach not only improves traffic distribution but also enhances network processing efficiency, extends previous research, and is relevant for multi-ISP networks with dynamic traffic.
Performance Evaluation of a Cowrie-Based Honeypot Integrated with a Suricata Intrusion Prevention System in a School Wireless Network Aurellia Maharani Putri; Muhlis Tahir
Journal of Embedded Systems, Security and Intelligent Systems Vol 7 No 1 (2026): March 2026
Publisher : Program Studi Teknik Komputer

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.59562/jessi.v7i1.2605

Abstract

Purpose – This study aims to implement and evaluate the integration of the Cowrie honeypot model with a Suricata-based Intrusion Prevention System (IPS) as a proactive security solution for school wireless networks. Design/methods/approach – The research method includes a literature review, needs analysis, security topology design, system implementation, and testing using port scanning and SSH brute force attack scenarios. The Cowrie honeypot is utilized to detect and log attack activities, while Suricata functions as an IPS to perform automatic real-time blocking. Findings – The results show that without a security system, both detection and blocking rates were 0%. After implementing Cowrie, the detection rate increased to 100%, although no blocking capability was present. The integration of Cowrie and Suricata IPS achieved 100% detection and 100% blocking rates for port scanning attacks (10 test packets) with an average response time of 0.8 seconds. In the SSH brute force test, the system successfully blocked attacks after 5 out of 10 login attempts, with an average response time of 0.9 seconds. Research implications/limitations – The evaluation was conducted under controlled experimental conditions using a limited number of attack simulations (10 scanning packets and 10 brute force attempts). Therefore, the results may not fully represent performance in large-scale or real-world network environments. Future studies should involve more extensive testing with diverse attack patterns and higher traffic volumes. Originality/value – This study contributes a practical integration of honeypot and IPS technologies to enhance wireless network security in school environments, providing a proactive and automated approach to both detect and mitigate cyberattacks in real time.
Co-Authors Alvin Kamil Aurellia Maharani Putri Bustomi Bustomi Fadli Maghfirli Lailatul Istianah M. Salman Nuzul Ramdhani Mohammad Muhyidin Alhaq Najwa Wahyu Azzuhra Nurul Jannah