Journal of Soft Computing Exploration
Vol. 7 No. 3 (2026): September 2026

Security assessment and security hardening of a laravel-based e-government web application using OWASP top 10

Muh Firdaus Garra Daeng Sikki (Department of Information Systems, Telkom University Surabaya Campus, Indonesia)
Adzanil Rachmadhi Putra (Department of Information Systems, Telkom University Surabaya Campus, Indonesia)
Rizqi Ramadhan (Department of Information Systems, Telkom University Surabaya Campus, Indonesia)



Article Info

Publish Date
29 Aug 2026

Abstract

The rapid adoption of e-government web applications has increased the need for effective cybersecurity measures to protect public services and sensitive information from evolving cyber threats. This study aims to identify security vulnerabilities, evaluate their severity, and implement security hardening measures for a Laravel-based e-government web application using the OWASP Top 10 (2021) framework. A Vulnerability Assessment and Penetration Testing (VAPT) approach was applied by combining automated vulnerability scanning with White Box and Grey Box penetration testing. Identified vulnerabilities were classified using the OWASP Top 10 (2021), prioritized with the Common Vulnerability Scoring System (CVSS) v3.1, and addressed through targeted security hardening followed by security verification. The assessment identified six High-severity vulnerabilities (CVSS v3.1 scores 7.1–8.8) across six OWASP categories. The implemented security controls, including HTTPS enforcement, input sanitization, security headers, rate limiting, dependency updates, and stronger authentication, successfully mitigated all identified vulnerabilities and improved the application's overall security posture. Overall, integrating OWASP-based security assessment with systematic security hardening provides an effective and practical strategy for improving the security resilience of Laravel-based e-government web applications.

Copyrights © 2026






Journal Info

Abbrev

journal

Publisher

Subject

Computer Science & IT Control & Systems Engineering Decision Sciences, Operations Research & Management Electrical & Electronics Engineering

Description

The journal focuses on publishing high-quality, original research and review articles in the field of Soft Computing, Informatics and Computer Science, emphasizing the development, application, and rigorous evaluation of Advanced Computational Methods, Artificial Intelligence (AI), Machine Learning ...