Implementasi Keamanan Jaringan Pada Cloudfri Dengan Metode Hardening
DOI:
https://doi.org/10.34818/eoe.v9i2.17632Abstrak
Abstrak Hardening adalah proses mengamankan sistem pada jaringan komputer untuk mengurangi kerentanan terhadap serangan hacking. Jenis hardening terdapat backup, firewall, kriptografi, security policy, Intrusion policy system, digital forensik. Metode hardening yang digunakan yaitu penetration dan vulnerability dengan menggunakan skenario yang telah dibuat. Penelitian ini menggunakan objek berupa website igame.cloudfri.id yang yang dikelola fakultas rekayasa industri. Penelitian bertujuan untuk menganalisa kerentanan terhadap website igame.cloudfri.id dan memberikan saran . Implementasi pengujian dalam penelitian ini menggunakan tools NMAP dan nikto yang tersedia pada sistem operasi kali linux. hasil dari penelitian dengan metode yang telah dianalisa kerentanannya bahwa website rentan terhadap serangan hacking dikarenakan tidak memiliki anticlickjacking, XSS-protection, x-content-type-option. Abstract Hardening is the process of securing systems on a computer network to reduce vulnerability to hacking attacks. Hardening types there are backups, firewalls, cryptography, security policy, intrusion policy system, digital forensics. Hardening methods used are penetration and vulnerability by using scenarios that have been created. This research uses objects in the form of igame.cloudfri.id websites managed by the faculty of industrial engineering. Research aims to analyze vulnerabilities to websites igame.cloudfri.id and provide advice. The implementation of the tests in this study uses NMAP and nikto tools available on the kali linux operating system. The results of research with methods that have analyzed the vulnerability that the website is vulnerable to hacking attacks because it does not have anti-clickjacking, XSS-protection, x-content-type-option. Keywords: Hardening, Penetration, Vulnerability, Website, Hacking Kata Kunci : Hardening, Penetration, Vulnerability, Website, HackingReferensi
[1] Hevner, A. R., March, S. T., Park, J., & Ram, S.
(2004). Design Science In IS Research. Management
Information Sistems, 28(1), 75–105.
[2] Yulianingsih, Y. (2017). Melindungi Aplikasi dari
Serangan Cross Site Scripting dengan Metode
Metacharacter. Jurnal Nasional Teknologi dan Sistem
Informasi, 3(1), 83-88.
[3] Zulkifli, S., & Samsir, S. (2020). Implementasi
Sistem Keamanan SQL Injection Dalam berbasis
web. Ejurnal. Univalabuhanbatu. Ac. Id, 4(01), 13-
17.
[4] Listartha, I. M. E., Saskara, G. A. J., & Santyadiputra,
G. S. (2021). PENGUJIAN KERENTANAN DAN
PENETRASI KEAMANAN PADA APLIKASI
WEB MANAJEMEN SKRIPSI PRODI
XYZ. ScientiCO: Komputer Science and Informatics
Journal, 4(2), 1-14.
[5] Fachri, F., Fadlil, A., & Riadi, I. (2021). Analisis
Keamanan Webserver Menggunakan Penetration
Test. Jurnal Informatika, 8(2), 183-190.
[6] Kholiq, A., & Khoirunnisa, D. (2019). ANALISIS
KEAMANAN WIRELESS LOCAL AREA
NETWORK (WLAN) DENGAN METODE
PENETRATION TESTING EXECUTION
STANDARD (PTES)(STUDI KASUS: PT. WIN
PRIMA LOGISTIK). Jurnal Ilmiah Fakultas Teknik
LIMIT’S Vol, 15(1).
[7] Pangalila, R., Noertjahyana, A., & Andjarwirawan, J.
(2015). Penetration Testing Server Sistem Informasi
Manajemen dan Website Universitas Kristen
Petra. Jurnal Infra, 3(2), 271-276.
[8] Bastian, A., Sujadi, H., & Abror, L. (2020). Analisis
Keamanan Aplikasi Data Pokok Pendidikan
(DAPODIK) Menggunakan Penetration Testing Dan
SQL Injection. INFOTECH journal, 6(2), 65-70.
[9] Sanjaya, I. G. A. S., Sasmita, G. M. A., & Arsa, D. M.
S. (2020). Evaluasi Keamanan Website Lembaga X
Melalui Penetration Testing Menggunakan
Framework ISSAF. J. Ilm. Merpati, 8(2), 113-124.
[10] Sakti, B., Aziz, A., & Doewes, A. (2013). Uji
Kelayakan Implementasi SSH sebagai Pengaman
FTP Server dengan Penetration Testing. ITSMART:
Jurnal Teknologi dan Informasi, 2(1), 44-51.
[11] Sahtyawan, R. (2019). Penerapan zero entry hacking
didalam security misconfiguration pada VAPT
(vulnerability assessment and penetration
testing). Journal of Information Sistem Management
(JOISM), 1(1), 18-22.
[12] Sahtyawan, R. (2019). Penerapan zero entry hacking
didalam security misconfiguration pada VAPT
(vulnerability assessment and penetration
testing). Journal of Information Sistem Management
(JOISM), 1(1), 18-22.
[13] Fachri, F., Fadlil, A., & Riadi, I. (2021). Analisis
Keamanan Webserver Menggunakan Penetration
Test. Jurnal Informatika, 8(2), 183-190.
[14] Hidayatulloh, S., & Saptadiaji, D. (2021). Penetration
Testing pada Website Universitas ARS Menggunakan
Open Web Application Security Project
(OWASP). Jurnal Algoritma, 18(1), 77-86.
[15] Sutrisna, E., Hidayat, T., & Ramdhani, I. (2020).
Workshop Web Development Menggunakan PHP
Data Object di SMK Cyber Media
Jakarta. JAMAIKA: Jurnal Abdi Masyarakat, 1(2),
53-59.
[16] Hevner, A. R., March, S. T., Park, J., & Ram, S.
(2004). Design Science In IS Research. Management
Information Systems, 28(1), 75–105.
[17] Mathison, S. (2013). Evaluation Theory.
Encyclopedia of Evaluation, 89–112.
https://doi.org/10.4135/9781412950558.n191
[18] Ghozali, B., Kusrini, K., & Sudarmawan, S. (2019).
Mendeteksi Kerentanan Keamanan Aplikasi Website
Menggunakan Metode Owasp (Open Web
Application Security Project) Untuk Penilaian Risk
Rating. Creative Information Technology Journal,
4(4), 264.
https://doi.org/10.24076/citec.2017v4i4.119
[19] Mazhar, N., Salleh, R., Zeeshan, M., Hameed, M.
M., & Khan, N. (2021, October). R-IDPS: Real time
SDN based IDPS system for IoT security. In 2021
IEEE 18th International Conference on Smart
Communities: Improving Quality of Life Using ICT,
IoT and AI (HONET) (pp. 71-76). IEEE.
[20] Mandal, N., & Jadhav, S. (2016, March). A survey
on network security tools for open source. In 2016
IEEE International Conference on Current Trends in
Advanced Computing (ICCTAC) (pp. 1-6). IEEE.
[21] Markowsky, L., & Markowsky, G. (2015,
September). Scanning for vulnerable devices in the
Internet of Things. In 2015 IEEE 8th International
Conference on Intelligent Data Acquisition and
Advanced Computing Systems: Technology and
Applications (IDAACS) (Vol. 1, pp. 463-467).
IEEE.
