Walisongo Journal of Information Technology
Vol. 6 No. 1 (2024): Walisongo Journal of Information Technology

Implementasi OWASP ZAP untuk Menguji Kerentanan Sistem Informasi Akademik (SIA Universitas Teknologi Yogyakarta Domain: sia.uty.ac.id)

IIN ROHMATIKA AULIA (Universitas Teknologi Yogyakarta)
Rianto (Universitas Teknologi Yogyakarta)
EIH UJIANTO (Universitas Teknologi Yogyakarta)



Article Info

Publish Date
22 Apr 2024

Abstract

The security of academic information systems is essential to maintaining the confidentiality, integrity, and availability of academic data. This study aims to identify web application vulnerabilities in an academic information system using the OWASP framework. Vulnerability testing identified three main findings: NGINX server misconfigurations, potential exposure of sensitive files, and the need to strengthen authentication and access controls. The identified misconfigurations and potential file exposure indicate security risks that require further verification to determine their actual exploitability and impact. Recommended mitigation measures include correcting server configurations, strengthening authentication mechanisms, and restricting unauthorized access. These findings highlight the importance of systematic vulnerability assessment and appropriate security controls to improve the protection and reliability of academic information systems.

Copyrights © 2024






Journal Info

Abbrev

jit

Publisher

Subject

Computer Science & IT Engineering

Description

Walisongo Journal of Information Technology publish article in the field of information technology, including : Computer Architecture, Parallel and Distributed Computer, Pervasive Computing, Computer Network, Embedded System, Human—Computer Interaction, Virtual/Augmented Reality, Computer ...