PENGUJIAN CELAH KEAMANAN WEBSITE MENGGUNAKAN TEKNIK PENETRATION TESTING DAN METODE OWASP(OPEN WEB APPLICATION SECURITY PROJECT) TOP 10 PADA WEBSITE SIM XXX

• Main Author: Yum Thurfah Afifa Rosaliah, (Author)
• Format: Book
• Published: 2021-07-08.
• Subjects: Thesis; NonPeerReviewed
• Online Access: Link Metadata
• Notes: http://repository.upnvj.ac.id/11253/1/Abstrak.pdf; http://repository.upnvj.ac.id/11253/2/Awal.pdf; http://repository.upnvj.ac.id/11253/3/BAB%20I.pdf; http://repository.upnvj.ac.id/11253/4/BAB%20II.pdf; http://repository.upnvj.ac.id/11253/5/BAB%20III.pdf; http://repository.upnvj.ac.id/11253/6/BAB%20IV.pdf; http://repository.upnvj.ac.id/11253/7/BAB%20IV.pdf; http://repository.upnvj.ac.id/11253/8/BAB%20V.pdf; http://repository.upnvj.ac.id/11253/9/DAFTAR%20PUSTAKA.pdf; http://repository.upnvj.ac.id/11253/10/RIWAYAT%20HIDUP.pdf; http://repository.upnvj.ac.id/11253/11/LAMPIRAN.pdf; http://repository.upnvj.ac.id/11253/12/ARTIKEL%20KI.pdf
• Keywords: LG Individual institutions (Asia. Africa); T Technology (General)

A website is a collection of pages on a domain on the internet that are created with a specific purpose and are interconnected and can be accessed widely through the home page using a browser using a website URL. SIM (Security Information Management) is a system that is used as a monitoring system for other systems, where the monitoring function is to see a security activity. The more widespread use of the internet among the wider community, the more opportunities for cybercrime to increase. such as data leakage containing information from a website by irresponsible persons which can harm many parties. Penetration testing is one way to simulate methods that an attacker might use to circumvent or break through security mechanisms and gain illegal access to a system. OWASP stands for Open Web Application Security Project, an online community that produces articles, methodologies, documentation, tools, and technologies in the field of web application security. OWASP TOP 10 or commonly called OWASP 10 is a list released by the OWASP community which contains the top 10 list of security vulnerabilities/vulnerabilities that can threaten the security of a website/web application. This study aims to determine whether the XXX Management Information System (SIM) has implemented security standards and whether there are security holes. After conducting a penetration test using the OWASP TOP 10 method on the xxx website, there are 4 security holes that need to be fixed for the security of the xxx website in the future. The security holes found were Broken Authentication, Sensitive Data Exposure, and Security Misconfiguration. Another vulnerability found but not included in the TOP 10 OWASP security is Clickjacking. The OWASP TOP 10 method is effective as a security standard for conducting penetration tests on a website. This is because OWASP's security standards are complete and detailed in terms of web page configuration gaps and server configurations. many findings refer to the 10 OWASP security standards