Analisa Serangan Vulnerabilities Terhadap Server Selama Periode WFH di Masa Pandemi Covid-19 sebagai Prosedur Mitigasi

Abstract

Since the COVID-19 Pandemic occurred, companies engaged in the retail sector have experienced a decline in the impact of government regulations such as PSBB (Large-Scale Social Restrictions) so that all activities were carried out from home or Work from Home (WFH). to assist companies or agencies with various types of information systems in carrying out their business activities and operations This server is one of the most important in the retail company. The opening of several accesses from the public network (internet) to the local area network (LAN) The security of a LAN network that is accessed from a public network is usually an administrator's problem. Often, the security problems of both the network and the entire application system, as well as the web server, are neglected just to ensure that operational activities run smoothly, and security is only realised after a disaster occurs. Without a good network security and application system, the application of any sophisticated technology will be very dangerous for the company, institution, or organisation itself. So, it takes a security analysis of all activities on the LAN, servers, and other devices to prevent mitigation and to be more aware of server security vulnerabilities. Based on the context of the existing issues, a penetration testing analysis is required. As supporting material, this research also uses guidelines from the CEH (Certified Ethical Hacker) module and the official Acunetix website. The test of this research is aimed at finding the weaknesses of the existing company/institution servers. Among others, quite a lot of weaknesses were found, where each of these weaknesses has a different handling, ports that should be blocked but are opened freely, and access to public IPs that are less important should be closed. The solutions proposed to overcome these problems include: the use of this Acunetix standard can be maintained and continued; testing is much better if carried out more than two times; periodically upgrading SNMP (Simple Network Management Protocol) vulnerable; increasing the level of server security; migration of quality antivirus; and upgrade of expired operating systems.

Analysis of Cross Site Request Forgery (CSRF) Attacks on West Lampung Regency Websites Using OWASP ZAP Tools

“…Vulnerability is a security gap in the system that makes the system vulnerable to attack [14]. Some terms related to computer system security are threats, assets, mitigation, security gaps, mitigation, and risk.…”

“…Government websites should have a good level of security compared to other websites.2. Look for vulnerabilities or weaknesses (Vulnerability Scanning)Vulnerability is a security gap in the system that makes the system vulnerable to attack[14]. Some terms related to computer system security are threats, assets, mitigation, security gaps, mitigation, and risk.…”

Perbandingan Tools Vulnerability Scanning Pada Pengujian Sebuah Website

“…Untuk mendeteksi adanya kerentanan dan melakukan penanganan terhadap kerentanan yang sudah teridentifikasi dapat dilakukan menggunakan Vulnerability scanner [1]. Vulnerability adalah suatu kelemahan yang menjadi ancaman nilai integrity, confidentiality, dan availability dari suatu asset [2]. Dalam cyber crime terdapat metode yang digunakan dalam melakukan serangan dengan menggunakan teknologi komputer dan internet.…”

Analisis Kerentanan Pada Website Servio Menggunakan Acunetix Web Vulnerability

“…Sebagai Prosedur Mitigasi" [11]yang menyebutkan bahwa pendeteksian kelemahan pada server dengan menggunakan acunetix dapat memberikan informasi secara lengkap.…”