Deteksi Dan Pencegahan Serangan Shellshock

• Main Authors: Putra, Adhitya Restu Kusuma (Author), , Helman Muhammad, S.T., M.T (Author)
• Format: Book
• Published: 2016.
• Subjects: Thesis; NonPeerReviewed
• Online Access: Connect to this object online
• Notes: https://eprints.ums.ac.id/45962/3/Surat%20Pernyataan%20Publikasi%20Ilmiah.pdf; https://eprints.ums.ac.id/45962/4/Naskah%20Publikasi.pdf
• Keywords: QA75 Electronic computers. Computer science; QA76 Computer software

Web Server is a service that is available on a server that provides information services in the form of websites. In building the website usually use various programming languages for combined, it requires a system called the Common Gateway Interface (CGI). In 2014 a security hole with the highest level of vulnerability is found in the Bash (Bourne-again shell), called SHELLSHOCK and listed in the Common Vulnerability and Exposure with code CVE 2014-6271. Bash is the language most widely used as a command line interpreter (CLI) in the Linux operating system, a variation of Unix and Apple OS X. Bash is often also used as a CGI parser in building website, so that the vulnerability also affects the web server. To prevent Shellshock attacks necessarily created a system capable of performing detection and prevention of SHELLSHOCK attacks early. Detection and prevention systems created using open source-based applications such as Snort, Snorby and ConfigServer & Security Firewall. Snort and Snorby used to create a system to detection attacks, while ConfigServer & Security Firewalls are used to create a system to prevent attacks. After applying the detection and prevention systems, SHELLSHOCK attack that led to the web server was able to be blocked by the system so that hackers are not able to perform manipulation or theft of data on the web server. By doing application is detection and prevention systems, SHELLSHOCK attacks can be minimized at an early stage by the system so that the theft of important data was able to be avoided.