Reihan Manzis Syahputra, - (2024) ANALISIS PENGARUH NEXT.JS UNTUK MENINGKATKAN KEAMANAN WEBSITE MENGGUNAKAN METODE PENGUJIAN TOP 10 OWASP. STUDI KASUS: IDEABOX MULTI-TENANT. S1 thesis, Universitas Pendidikan Indonesia.
Abstract
Latarbelakang penelitian ini berasal dari pentingnya sebuah ide dan inovasi bagi suatu organisasi dalam mempertahankan keunggulannya dalam berkompetisi, sehingga menjadikan ide dan inovasi penting untuk dilindungi karena dampak yang dapat ditimbulkan dari pencurian ide dan inovasi tersebut. Penelitian ini bertujuan untuk mengevaluasi tingkat keamanan aplikasi website IdeaBox Multi-tenant dan menganalisis pengaruh dari implementasi fitur Next.js untuk meningkatkan keamanan website IdeaBox Multi-tenant. Pengujian pada penelitian ini menggunakan pengujian metode top 10 owasp yang mencakup serangkaian pengujian untuk mengidentifikasi kerentanan keamanan yang ada dalam aplikasi website IdeaBox Multi-tenant menggunakan aplikasi Zed Attack Proxy dengan metode penyerangan ajax spider dan active scan. Hasil penelitian menunjukan bahwa sebelum mengimplementasi fitur Next.js, website IdeaBox Multi-tenant memiliki total 12 kategori celah keamanan, 6 kategori kerentanan pada aspek Broken Access Control, 3 kategori kerentanan pada aspek Cryptographic Failures, 6 kategori kerentanan pada aspek Security Misconfiguration dan 1 kategori kerentanan pada aspek Identification and Authentication Failures. Sedangkan setelah menerapkan fitur Next.js, website IdeaBox Multi-tenant memiliki total 7 kategori celah keamanan, 2 kategori kerentanan pada aspek Broken Access Control, 2 kategori kerentanan pada aspek Cryptographic Failures dan 3 kategori kerentanan pada aspek Security Misconfiguration. Berdasarkan hasil pengujian, pengaruh dari implementasi Next.js menunjukan hasil yang positif dengan dapat meningkatkan keamanan website, serta menurunkan resiko yang dapat ditimbulkan terhadap kerentanan yang ditemukan; ---------- The background of this research stems from the importance of ideas and innovation for an organization to maintain its competitive edge, making ideas and innovation crucial to protect due to the potential impacts of their theft. This study aims to evaluate the security level of the IdeaBox Multi-tenant website application and analyze the influence of implementing Next.js features to enhance the security of the IdeaBox Multi-tenant website. The research testing employs the top 10 OWASP testing method, which includes a series of tests to identify security vulnerabilities existing in the IdeaBox Multi-tenant website application using the Zed Attack Proxy application with AJAX spider and active scan methods. The research findings indicate that before implementing Next.js features, the IdeaBox Multi-tenant website had a total of 12 categories of security vulnerabilities, including 6 categories of vulnerabilities in Broken Access Control aspects, 3 categories of vulnerabilities in Cryptographic Failures aspects, 6 categories of vulnerabilities in Security Misconfiguration aspects, and 1 category of vulnerability in Identification and Authentication Failures aspect. Whereas after implementing Next.js features, the IdeaBox Multi-tenant website had a total of 7 categories of security vulnerabilities, including 2 categories of vulnerabilities in Broken Access Control aspects, 2 categories of vulnerabilities in Cryptographic Failures aspects, and 3 categories of vulnerabilities in Security Misconfiguration aspects. The influence of implementing Next.js features shows positive results by enhancing website security and reducing the impact risks associated with identified vulnerabilities.
![[img]](http://repository.upi.edu/style/images/fileicons/text.png) |
Text
S_RPL_2008580_Title.pdf Download (3MB) |
|
Text
S_RPL_2008580_Chapter1.pdf Download (2MB) |
|
Text
S_RPL_2008580_Chapter2.pdf Restricted to Staf Perpustakaan Download (5MB) | Request a copy |
|
Text
S_RPL_2008580_Chapter3.pdf Download (3MB) |
|
Text
S_RPL_2008580_Chapter4.pdf Restricted to Staf Perpustakaan Download (9MB) | Request a copy |
|
Text
S_RPL_2008580_Chapter5.pdf Download (1MB) |
|
Text
S_RPL_2008580_Appendix.pdf Restricted to Staf Perpustakaan Download (1MB) | Request a copy |
| Item Type: | Thesis (S1) |
|---|---|
| Additional Information: | https://scholar.google.com/citations?hl=en&user=8ImNmskAAAAJ ID SINTA Dosen Pembimbing: RADITYA MUHAMMAD: 6682222 MOCHAMAD IQBAL ARDIMANSYAH: 6658552 |
| Uncontrolled Keywords: | Keamanan Website, Next.js, Pengujian OWASP, Zed Attack Proxy, Top 10 OWASP. Website Security, Next.js, OWASP Testing, Zed Attack Proxy, Top 10 OWASP. |
| Subjects: | L Education > L Education (General) Q Science > QA Mathematics > QA75 Electronic computers. Computer science Q Science > QA Mathematics > QA76 Computer software |
| Divisions: | UPI Kampus cibiru > S1 Rekayasa Perangkaat Lunak |
| Depositing User: | Reihan Manzis Syahputra |
| Date Deposited: | 07 May 2024 01:38 |
| Last Modified: | 07 May 2024 01:38 |
| URI: | http://repository.upi.edu/id/eprint/117158 |
Actions (login required)
 |
View Item |