Melola Discovery

← Melola Discovery

Jurnal SINTA 2

Analisis Keamanan Website Open Journal System Menggunakan Metode Vulnerability Assessment

Jurnal Teknologi Informasi dan Ilmu Komputer (JTIIK) · Vol. 7 No. 4 (2020) · pp. 853–860

DOI
10.25126/jtiik.2020701928
ISSN
2528-6579, 2355-7699
Published
2020-08-07
Publisher
Fakultas Ilmu Komputer, Universitas Brawijaya
Language
id

Abstract

Open Journal System (OJS) merupakan perangkat lunak yang berfungsi sebagai sarana publikasi ilmiah dan digunakan diseluruh dunia. OJS yang tidak dipantau beresiko diserang oleh hacker. Kerentanan yang di timbulkan oleh hacker akan berakibat buruk terhadap performa dari sebuah OJS. Permasalahan yang dihadapi pada sistem OJS meliputi network, port discover, proses audit exploit sistem OJS. Proses audit sistem pada OJS mencakup SQL Injection, melewati firewall pembobolan password. Parameter input yang digunakan adalah IP address dan port open access. Metode yang digunakan adalah vulnerability assessment. Yang terdiri dari beberapa tahapan seperti information gathering atau footprinting, scanning vulnerability, reporting. Kegiatan ini bertujuan untuk mengidentifikasi celah keamanan pada website open journal system (OJS). Penelitian ini menggunakan open web application security project (OWASP). Pengujian yang telah dilakukan berhasil mengidentifikasi 70 kerentanan high, 1929 medium, 4050 low pada OJS, Total nilai vulnerability pada OJS yang di uji coba sebesar 6049. Hasil pengujian yang dilakukan menunjukkan bahwa pada OJS versi 2.4.7 memiliki banyak celah kerentanan atau vulnerability, tidak di rekomendasi untuk digunakan. Gunakanlah versi terbaru yang dikeluarkan oleh pihak OJS Public knowledge project (PKP). AbstractThe Open Journal System (OJS) is A software that functions as a means of scientific publication and is used throughout the world. OJS that is not monitored is at risk of being attacked by hackers. Vulnerabilities caused by hackers will adversely affect the performance of an OJS. The problems faced by the OJS system include the network, port discover, OJS system audit exploit process. The system audit process on the OJS includes SQL Injection, bypassing the firewall breaking passwords. The input parameters used are the IP address and open access port. The method used is a vulnerability assessment. Which consists of several stages such as information gathering or footprinting, scanning vulnerability, reporting. This activity aims to identify security holes on the open journal system (OJS) website. This study uses an open web application security project (OWASP). Tests that have been carried out successfully identified 70 vulnerabilities high, 1929 medium, 4050 low in OJS, the total value of vulnerability in OJS which was tested was 6049. The results of tests conducted showed that in OJS version 2.4.7 had many vulnerabilities or vulnerabilities, not on recommendations for use. Use the latest version issued by the OJS Public Knowledge Project (PKP).

Collaboration network of the authors

37 authors · 72 co-authorship links · 6 across different organisations

Hover or tap a name to highlight its co-authors. Double-click to open the author's page.

  • Universitas Ahmad Dahlan
  • Islamic University of Indonesia
  • Siliwangi University
  • AGH University of Krakow
  • Affiliation unknown
  • Different organisations
  • Same organisation
  • Affiliation unknown
  • Thicker line = more joint articles · bigger circle = more articles
Show as table
Co-authorOrganisationJoint articles
Rusydi UmarUniversitas Ahmad Dahlan7
Abdul FadlilUniversitas Ahmad Dahlan5
Yudi PrayudiIslamic University of Indonesia3
Sunardi SunardiUniversitas Ahmad Dahlan3
Rio AnggaraUniversitas Ahmad Dahlan2
Nur WidiyasonoSiliwangi University2
Ahmad LuthfieAffiliation unknown2
HermanUniversitas Ahmad Dahlan2
Asno Azzawagama FirdausUniversitas Ahmad Dahlan2
Siti HelmiyahUniversitas Ahmad Dahlan2
Abdullah HanifUniversitas Ahmad Dahlan2
Ainunna’imahUniversitas Ahmad Dahlan1
Herman YuliansyahUniversitas Ahmad Dahlan1
FitriahUniversitas Ahmad Dahlan1
Rio SubandiAffiliation unknown1
Imam Mahfudl NasrullohUniversitas Ahmad Dahlan1
Fauzan NatsirAffiliation unknown1
Eri HaryantoIslamic University of Indonesia1
Deni MurdianiUniversitas Ahmad Dahlan1
Sahiruddin SahiruddinUniversitas Ahmad Dahlan1
Frandika SeptaUniversitas Ahmad Dahlan1
Andi PrayudiUniversitas Ahmad Dahlan1
Nurmi HidayasariIslamic University of Indonesia1
Kharis Hudaiby HanifUniversitas Ahmad Dahlan1
Herman HermanUniversitas Ahmad Dahlan1
Satriya Dwi PutraUniversitas Ahmad Dahlan1
Fitri AnggrainiUniversitas Ahmad Dahlan1
Herman HermanUniversitas Ahmad Dahlan1
Shoffan SaifullahAGH University of Krakow1
Sunardi SunardiUniversitas Ahmad Dahlan1
Ruuhwan RuuhwanAffiliation unknown1
Muhammad Nur FaizUniversitas Ahmad Dahlan1
Eko PriantoUniversitas Ahmad Dahlan1
Arizona FirdonsyahUniversitas Ahmad Dahlan1

Affiliations come from OpenAlex; journal OAI-PMH metadata carries none. Authors without an OpenAlex ID are matched by name, which can merge or split people.

Metadata source: OAI-PMH (metadata jurnal) https://jtiik.ub.ac.id/index.php/jtiik/en/oai, first harvested 27 Okt 2026, last seen 27 Okt 2026.
Original metadata (oai_dc) 
<oai_dc:dc xmlns="http://www.openarchives.org/OAI/2.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:oai_dc="http://www.openarchives.org/OAI/2.0/oai_dc/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.openarchives.org/OAI/2.0/oai_dc/  http://www.openarchives.org/OAI/2.0/oai_dc.xsd">
	<dc:title xml:lang="id">Analisis Keamanan Website Open Journal System Menggunakan Metode  Vulnerability Assessment</dc:title>
	<dc:creator xml:lang="id">Riadi, Imam</dc:creator>
	<dc:creator xml:lang="id">Yudhana, Anton</dc:creator>
	<dc:creator xml:lang="id">W, Yunanri</dc:creator>
	<dc:description xml:lang="id">Open Journal System (OJS) merupakan perangkat lunak yang berfungsi sebagai sarana publikasi ilmiah dan digunakan diseluruh dunia. OJS yang tidak dipantau beresiko diserang oleh hacker.  Kerentanan yang di timbulkan oleh hacker akan berakibat buruk terhadap performa dari sebuah OJS.  Permasalahan yang dihadapi pada sistem OJS meliputi network, port discover, proses audit exploit sistem OJS. Proses audit sistem pada OJS mencakup SQL Injection, melewati firewall pembobolan password. Parameter input yang digunakan adalah IP address dan port open access. Metode yang digunakan adalah vulnerability assessment. Yang terdiri dari beberapa tahapan seperti information gathering atau footprinting, scanning vulnerability, reporting. Kegiatan ini bertujuan untuk mengidentifikasi celah keamanan pada website open journal system (OJS). Penelitian ini menggunakan open web application security project (OWASP). Pengujian yang telah dilakukan berhasil mengidentifikasi 70 kerentanan high, 1929 medium, 4050 low pada OJS, Total nilai vulnerability pada OJS yang di uji coba sebesar 6049. Hasil pengujian yang dilakukan menunjukkan bahwa pada OJS versi 2.4.7 memiliki banyak celah kerentanan atau vulnerability, tidak di rekomendasi untuk digunakan. Gunakanlah versi terbaru yang dikeluarkan oleh pihak OJS Public knowledge  project (PKP). AbstractThe Open Journal System (OJS) is A software that functions as a means of scientific publication and is used throughout the world. OJS that is not monitored is at risk of being attacked by hackers. Vulnerabilities caused by hackers will adversely affect the performance of an OJS. The problems faced by the OJS system include the network, port discover, OJS system audit exploit process. The system audit process on the OJS includes SQL Injection, bypassing the firewall breaking passwords. The input parameters used are the IP address and open access port. The method used is a vulnerability assessment. Which consists of several stages such as information gathering or footprinting, scanning vulnerability, reporting. This activity aims to identify security holes on the open journal system (OJS) website. This study uses an open web application security project (OWASP). Tests that have been carried out successfully identified 70 vulnerabilities high, 1929 medium, 4050 low in OJS, the total value of vulnerability in OJS which was tested was 6049. The results of tests conducted showed that in OJS version 2.4.7 had many vulnerabilities or vulnerabilities, not on recommendations for use. Use the latest version issued by the OJS Public Knowledge Project (PKP).</dc:description>
	<dc:publisher xml:lang="en">Fakultas Ilmu Komputer, Universitas Brawijaya</dc:publisher>
	<dc:date>2020-08-07</dc:date>
	<dc:type>info:eu-repo/semantics/article</dc:type>
	<dc:type>info:eu-repo/semantics/publishedVersion</dc:type>
	<dc:format>application/pdf</dc:format>
	<dc:identifier>https://jtiik.ub.ac.id/index.php/jtiik/article/view/1928</dc:identifier>
	<dc:identifier>10.25126/jtiik.2020701928</dc:identifier>
	<dc:source xml:lang="id">Jurnal Teknologi Informasi dan Ilmu Komputer; Vol 7 No 4: Agustus 2020; 853-860</dc:source>
	<dc:source xml:lang="en">Jurnal Teknologi Informasi dan Ilmu Komputer; Vol. 7 No. 4: Agustus 2020; 853-860</dc:source>
	<dc:source>2528-6579</dc:source>
	<dc:source>2355-7699</dc:source>
	<dc:source>10.25126/jtiik.202074</dc:source>
	<dc:language>id</dc:language>
	<dc:relation>https://jtiik.ub.ac.id/index.php/jtiik/article/view/1928/pdf</dc:relation>
	<dc:rights xml:lang="en">Copyright (c) 2020 Jurnal Teknologi Informasi dan Ilmu Komputer</dc:rights>
</oai_dc:dc>