Publication Search

Computers in one of the network companies at PT. Estrada uses the Fortinet operating system. The final result expected through this implementation is to comprehensively see the capabilities of the firewall on Fortinet in overcoming the problem of blocking social media applications and streaming platforms during working hours. Blocking the application in question is the ability to filter web processes such as Facebook, Instagram, YouTube, etc. In the tests carried out, web filtering was able to block applications on social media and streaming platforms, which proves that the performance of web filtering is quite good. In analyzing web filtering performance, use the office hour rule tool by carrying out the rule schedule in the Fortinet network and displaying all the information in detail. The final result obtained in the network application filtering simulation process using Fortinet is that every network sent cannot be entered (blocked) on both social media applications and streaming platforms.

The increasing use of web applications in various sectors has made security a major concern due to the high risk of attacks targeting the application layer. This study aims to analyze the effectiveness of the F5 Web Application Firewall (F5 WAF) in mitigating vulnerabilities in the OWASP Juice Shop application. Testing was conducted using 10 attack scenarios including SQL Injection, Cross-Site Scripting (XSS), Insecure Direct Object Reference (IDOR), and Information Disclosure before and after F5 WAF implementation. The test results showed that all tested attack scenarios were successfully mitigated after F5 WAF implementation. These findings indicate that the F5 WAF is able to provide effective protection against various vulnerabilities at the application layer and improve the security of web applications in the test environment used.

The increasing integration of internet technology in educational institutions requires structured network governance to ensure that digital resources support academic activities effectively. Unrestricted access to online platforms often leads to non-academic usage such as online gaming and social media engagement during instructional hours, which may reduce learning concentration and degrade network performance. This research develops and evaluates a network access control simulation using a MikroTik RouterBoard RB951Ui-2HnD device. The system applies firewall filtering mechanisms, hotspot-based authentication, and bandwidth allocation strategies through Simple Queue configuration. Network segmentation is implemented to differentiate teacher and student access privileges. The study adopts a Research and Development (R&D) approach to design, configure, test, and evaluate the proposed system. Testing results indicate that the firewall configuration successfully restricts access to selected online games (Mobile Legends, Clash of Clans, Roblox) and social media platforms (YouTube, TikTok, Shopee, Instagram, Telegram). Furthermore, bandwidth management demonstrates effective traffic prioritization, ensuring more stable allocation for teacher accounts in accordance with configured maximum limits. The findings confirm that structured firewall and bandwidth policies can improve network discipline, enhance performance stability, and support a controlled digital learning environment in schools.

APIs (Application Programming Interfaces) have become a key component in the development of modern digital products and the transformation of cloud-based services. Its ability to provide structured access to data and enable cross-platform integration makes APIs at the core of the enterprise's digital architecture. However, the high level of API openness poses increasingly complex security challenges, including potential data exploitation, injection attacks, credential misuse, and exploitation of business logic loopholes. This article examines the strategic role of APIs in the digital ecosystem, analyzes the operational risks that arise from API exposure, and evaluates the effectiveness of basic defense mechanisms such as API Gateways and Web Application Firewalls (WAFs). The findings of the study show that while both solutions play an important role in controlling access, filtering, and mitigating attacks at the surface layer, they have not been able to provide comprehensive protection against modern API threats that are dynamic, distributed, and often exploit weaknesses at the application and business logic levels. Therefore, a more holistic, layered, and sustainable API security approach is needed, including anomalous behavior detection, API abuse protection, and real-time monitoring to maintain the integrity and reliability of digital services.  

The rapid growth of web technologies and online services has increased the exposure of web applications to cyber threats such as Cross-Site Scripting (XSS) and SQL Injection (SQLi). Conventional rule-based mechanisms, such as Web Application Firewalls (WAFs), often fail to detect emerging attack patterns. To address this, Machine Learning (ML) and Deep Learning (DL) have emerged as adaptive approaches for enhancing web attack detection. This study performs a Systematic Literature Review (SLR) following the Preferred Reporting Items for Systematic Reviews and Meta-Analyses (PRISMA) 2020 guidelines to analyze recent ML/DL-based detection methods. Of the 263 retrieved studies, 15 met the inclusion criteria for detailed review. The findings reveal that Random Forest (RF), Support Vector Machine (SVM), Convolutional Neural Network (CNN), and Long Short-Term Memory (LSTM) are the most applied algorithms. At the same time, recent works emphasize Transformer-based and hybrid ML–DL models. These approaches achieved robust performance (accuracy 85–97%, F1-score >90%) but still face challenges in dataset representativeness, class imbalance, and computational cost. This review highlights future research directions in Explainable Artificial Intelligence (XAI), Federated Learning (FL), and adversarial robustness to develop more efficient and trustworthy web attack detection systems.

The rapid development of digital technology has significantly influenced educational approaches, particularly in Islamic education for digital native generations. This study analyzes the concept of Islamic education in the digital era based on the book Tarbiyah fi Zaman al-Fitan by Sheikh Dr. Ali bin Yahya al-Haddadi and explores its influence on digital native generations. Using a qualitative approach with library research methodology, this study conducts an in-depth analysis of the primary source supplemented by relevant secondary literature including books, scientific journals, and previous research findings. The research integrates Digital Native theory, Social Cognitive theory, and Connectivism to understand the educational challenges faced by digital natives. The findings reveal four main pillars of Islamic education according to al-Haddadi: parental education, gradual education from early age (tarbiyah tadrijiyyah), creed education (aqidah), and social etiquette education (adab). These pillars effectively serve as protective measures against two main fitnah (trials) in the digital era: syahwat (lust) and syubhat (doctrinal confusion). The study demonstrates that classical Islamic educational concepts remain highly relevant for addressing contemporary digital challenges, providing internal firewall mechanisms, strengthening parental role modeling, and promoting adaptive collaborative learning. This research contributes to the development of Islamic educational frameworks that integrate classical spiritual values with modern digital literacy requirements.

Medical records are important documents that capture the entire medical history of patients, including identification, diagnosis, treatment, and recovery. With advancements in information technology, electronic medical records (EMR) have emerged as a solution to enhance the efficiency and accuracy of patient data management. However, despite the many benefits of EMR, its implementation at AL dr. Mintohardjo Hospital remains hybrid, combining manual and electronic methods. This indicates challenges in transitioning to a fully digital system. This study aims to identify and analyze issues related to the security of EMR at AL dr. Mintohardjo Hospital. Several issues identified include a lack of training for medical record staff regarding cybersecurity practices and data input errors. The research employs a qualitative approach, with data obtained from observations and interviews with hospital stakeholders. The informants in this study include IT staff, medical staff, and administrative staff. The findings regarding the security of electronic medical records (EMR) at AL dr. Mintohardjo Hospital indicate that, although there are established Standard Operating Procedures (SOP) for EMR security, their implementation is still not fully compliant. In terms of confidentiality, integrity, and availability of data, the study found that AL dr. Mintohardjo Hospital has implemented several security measures, such as user authentication and access management. However, weaknesses remain, such as a lack of user awareness regarding regular password changes and excessive access by administrative staff. Additionally, frequent data input errors can lead to serious consequences for patients, and threats to data confidentiality, integrity, and availability. Although the hospital has implemented measures such as firewalls and audit trail systems to protect data, challenges such as unstable internet connections and reliance on a single resource remain concerns. Overall, while the existing security measures are fairly adequate, this study emphasizes the need for improved staff training and strengthened procedures to minimize risks to the security of electronic medical record data.

Website security is a crucial aspect, especially for educational institutions that manage sensitive data. Udayana University has over 500 subdomains, but not all have undergone security evaluation, potentially posing significant risks. This study aims to identify security vulnerabilities, assess risk levels, and provide mitigation recommendations. The subdomain ee.unud.ac.id was selected as a sample because it uses a template similar to many other university websites. The method employed is Vulnerability Assessment using white box testing, with tools such as OWASP ZAP, Nessus, RapidScan, and the Snort Intrusion Detection System (IDS). The analysis is based on the OWASP Top 10 (2021) and the CIA Triad principles. The results revealed 25 types of threats across three risk levels and 24 alerts from Snort, indicating potential internal and external threats. Recommended mitigations include strengthening security configurations, implementing firewalls, and regularly updating systems. This study emphasizes the importance of routine security testing and the use of IDS to safeguard systems against cyberattacks.    

Effective network management is the main need in the world of information technology, especially for companies engaged in network infrastructure. One of the devices that is often used to support network connectivity is MikroTik. This journal aims to design MikroTik configuration learning based on the OSI Layer Model at PT Proxi Jaringan Nusantara, focusing on setting MikroTik so that it can be connected to the internet. The learning method is designed using theoretical and simulation approaches, including the introduction of the OSI Layer Model as the basis of network communication and the technical steps of MikroTik configuration, such as IP Address settings, NAT (Network Address Translation), DHCP Server, and basic Firewall. The simulation results show that the configuration carried out in accordance with the OSI Layer Model can improve network stability and efficiency. This learning is designed to provide practical and in-depth solutions for authors in understanding MicroTik-based network management.

Banking is one of the financial services companies that has provided services to the community and businesses, Behind this development there are various legal problems related to information crime and electronic transactions in the banking sector, Skimming is the act of stealing debit or credit card information by accessing an independent cash machine and copying the information contained on the magnetic stripe of the debit card or credit belonging to the customer (victim) illegally to have control over the customer's (victim) account. The application of the law to the crime of ATM skimming is regulated in Article 362 of the Criminal Code (KUHP) regarding the crime of theft. This research is a type of normative judicial research supported by a normative approach by using primary legal materials, secondary legal materials and tertiary legal materials as data sources. This study uses a prescriptive method, which is an analysis method that provides an assessment (justification) about the object being researched whether it is true or false, or what should be according to the law. The results of the study show that (1) Skimming is a magnetic stripe crime that exists on ATM cards illegally to have control over the card or the account by duplicating the ATM card or by installing a hidden camera to find out the ATM PIN of the customer or victim. (2) Strategies to prevent unauthorized access and early detection of suspicious activities can be applied to reduce the incidence of criminal acts and effective cyber security is to strengthen the network and security system. This can include investing in cutting-edge security technologies, such as robust firewalls, active network monitoring, and security programs that can detect suspicious attacks. In addition, organizations also need to involve their employees in cybersecurity efforts.    

As a popular platform, Windows faces increasingly complex and diverse malware threats. This research evaluates Windows security weaknesses and finds effective methods of mitigating malware attacks. To ensure the validity of the results, the analysis was conducted through literature review, protection method evaluation, and data triangulation. The results show that layered protection methods, which include implementing firewalls, antivirus, and regular system updates, are highly effective in combating different types of malware, such as ransomware, trojans, and spyware. In addition, the use of machine learning and artificial intelligence helps detect threats in real-time. This research provides practical advice for developers and users on how to improve Windows security through a combination of proactive and reactive measures. It also suggests that users be more aware of cybersecurity. The results of this research are expected to serve as a reference for the development of more secure operating systems in the future.

In the era of information technology advancement, web applications have become a means of seeking information. However, with technological progress, they have become increasingly vulnerable to cyber attacks such as SQL Injection and Cross-Site Scripting (XSS). This research aims to implement the Teler-waf Web Application Firewall (WAF) to protect web applications from such attacks. The research methodology includes the implementation of the Teler-waf WAF, analysis of web application security, and testing the speed of attack detection. The results show that Teler-waf is effective in preventing attacks, and its integration with Telegram bots provides real-time notifications to system administrators, enhancing security responsiveness. This research contributes to strengthening web application security and understanding the role of the Teler-waf WAF in addressing cyber threats.

Salah satu bentuk dari pemanfaatan kemajuan teknologi berupa penerapan aplikasi web menggunakan web server untuk berbagi informasi, memberikan layanan, dan menyimpan data. Dibalik kemudahan dalam penggunaan aplikasi web yang dapat diakses darimana pun, terdapat risiko ancaman keamanan siber yang cukup besar dimana aplikasi web dapat menjadi target serangan oleh penjahat siber yang ingin mencuri informasi sensitif atau mengambil alih sistem. Masalah keamanan tersebut dapat diatasi dengan pendekatan reaktif yaitu penerapan sistem keamanan yang mampu mendeteksi dan menganalisa insiden keamanan pada aplikasi web secara cepat dan efektif. Salah satu solusi yang dapat digunakan adalah dengan mengimplementasikan Security Information and Event Management (SIEM). SIEM adalah sistem yang dapat digunakan untuk mengelola log yang dihasilkan dari berbagai sumber data seperti endpoint, perangkat jaringan, maupun firewall, Salah satu aplikasi SIEM yang bersifat open source dan dapat digunakan untuk deteksi serta analisa insiden serangan siber adalah Wazuh. Wazuh adalah perangkat lunak open source yang berfungsi sebagai sistem deteksi berbasis host (endpoint) yang menyatukan kemampuan XDR (External Data Representation). Metode yang digunakan dalam penyelesaian masalah tersebut menggunakan metode Eksperimental, ada 5 tahapan dalam metode eksperimental ini yaitu analisis kebutuhan, desain, implementasi, pengujian, evaluasi. Hasil dari pengujian tersebut dapat di deteksi oleh Wazuh sebagai SIEM untuk memonitoring keamanan server dan deteksi penyerangan.

The Windows operating system has become one of the main targets for cyber attackers because of its popularity among computer users. Therefore, developing an effective integrated security system is essential to protect the Windows operating system from various cyber threats. This journal discusses integrated security system development strategies that include the use of encryption technology, firewalls, malware scanning, system updates, and user awareness. Apart from that, this journal also discusses the implementation of an integrated security strategy to protect the Windows operating system from increasingly complex cyber attacks. The goal of this journal is to provide strategic guidance for IT security professionals and researchers in developing an effective integrated security system to protect the Windows operating system from ever-evolving cyber threats.

Behind the widespread proliferation of malware, IT experts have developed robust security systems to minimize the risk of malware infection. In the Windows security system, numerous software solutions have been created to prevent malware threats, including Windows Defender, which serves as the core of Windows security, virus & threat protection, real-time protection, firewall & network protection, account protection, and many more. This study uses a qualitative approach based on literature review. The results indicate that by integrating machine learning technology, enhancing security features, and adopting a layered approach, the strategy for developing the Windows operating system has successfully strengthened protection against malware threats. These measures not only improve the ability to detect and respond to threats but also ensure that users can enjoy a safe and protected computing experience.  

Building a computer network needs significant care in selecting a configuration to ensure its efficacy and efficiency. It involves decisions about network topology, types, and device use. Security measures are essential for protecting networks with internet access from external attacks. A study conducted at an Islamic university in Indonesia indicated the use of a star network architecture and a client-server network model. The servers utilize Debian Linux. The university's security infrastructure includes a server authentication system and the setting up of a Virtual Private Network (VPN). If the server authentication difficulty is caused by a power outage, it is recommended that you use an UPS (uninterruptible power supply) to preserve power stability. Overall, security methods show up to be more effective when firewalls are installed.

The slow speed of internet access is often a problem that most users of computer network services complain about because there are no restrictions or efficient bandwidth management. Bandwidth management is a concept in which several computers in an office or office environment can be connected to each other and share data and information in accessing the internet. In the application of bandwidth management with the simple queues method for optimizing computer network security systems on proxy routers, it is proven to be able to solve problems that are often complained of by most users of computer network services that are located in terms of availability, reliability, stability, performance stability and can provide protection to prevent unauthorized access or minimize attacks coming through the network against owned resources. It is often found that the process of accessing data communications and information for each user connected to the network feels slow, this is due to the existing bandwidth capacity being insufficient. Mikrotik is an operating system that is capable of turning a computer into a network router or often called a PC router. The operating system includes a full range of features for wireline and wireless, one of which is bandwidth management. With an upload bandwidth of 50 Mbps and a download of 50 Mbps, a bandwidth management of 2 Mbps, 5 Mbps, 10 Mbps and 15 Mbps.

Internet connections that are not always stable and data security is not maintained from various threats from outside attacks in the form of hackers, crackers, viruses, and so on are the main problems for every client. Using the pfSense analysis method, this study aims to address the above bandwidth management and network security issues. The pfSense analysis that the researchers carried out included an analysis of total bandwidth usage, data security, and information for each client on the P3DW Internet network (Center for Regional Revenue Management) Bandung III Soekarno-Hatta City. The results of the analysis concluded that pfSense can work as a firewall that functions as a bandwidth limiter and network security. The level of client satisfaction increases with the infrastructure designs being tested. With a web GUI that makes it easy for users to configure, the basic system used is FreeBSD which is open-source, making pfSense able to be an alternative choice for building a firewall that is reliable, flexible, and economical.

Information security analysis of PT. Indofood is a case study that discusses the role of vital objects, file security, and cyber security in the company. PT. Indofood is a large company in the food and beverage industry, which faces significant information security challenges. In terms of vital objects, PT. Indofood identifies critical systems and infrastructure that must be strictly protected. A risk evaluation may have been carried out to identify potential threats and take appropriate steps to protect these vital objects. Access controls, physical safeguards, and security training may have been put in place to keep vital objects safe. File security is an important focus for PT. Indofood. Security measures implemented include access control, data encryption, regular backup and restore, and monitoring of file activity. Strict access control policies and security awareness training provide additional protection for critical company files. In cyber security, PT. Indofood uses various measures to protect their systems and networks from cyberthreats. Implementation of firewalls, network protection systems, and regular software updates helps prevent unauthorized access and keeps systems secure. Email security solutions, identity and access management, and data encryption provide an additional layer of protection against cyberattacks. High security awareness and security awareness training provided to employees helps reduce attack risk and improve response to security incidents. PT. Indofood also conducts periodic security tests to identify vulnerabilities in their systems and take necessary remedial actions. Overall, PT. Indofood has implemented strong measures in securing vital objects, file security, and cyber security. However, it is important to remember that information security is an ongoing endeavor that must be continuously updated according to the latest developments in security and technological threats.

Dalam era digital saat ini, keamanan informasi menjadi hal yang sangat penting, terutama bagi perusahaan-perusahaan besar yang memiliki objek vital yang harus dijaga dengan baik. PT. Pos Indonesia sebagai perusahaan layanan pos terkemuka di Indonesia juga perlu memastikan bahwa objek vital, file-file penting, dan sistem mereka terlindungi dengan baik dari ancaman keamanan. Jurnal ini bertujuan untuk menganalisis pengamanan objek vital, keamanan file, dan keamanan cyber pada PT. Pos Indonesia. Metode yang digunakan dalam penelitian ini meliputi studi literatur dan pengumpulan data primer melalui wawancara dengan pihak terkait di PT. Pos Indonesia.Hasil penelitian menunjukkan bahwa PT. Pos Indonesia telah mengimplementasikan berbagai langkah pengamanan untuk melindungi objek vital mereka. Langkah-langkah ini meliputi penggunaan sistem keamanan fisik seperti pengawasan CCTV, pengamanan pintu masuk, dan pengaturan akses terbatas ke area sensitif. Selain itu, PT. Pos Indonesia juga menerapkan kebijakan keamanan yang ketat untuk mengatur penggunaan dan pengelolaan file-file penting mereka. Sistem keamanan file yang digunakan meliputi enkripsi data, backup reguler, dan pengaturan hak akses pengguna. Namun, dalam hal keamanan cyber, penelitian ini mengidentifikasi beberapa potensi kerentanan. PT. Pos Indonesia perlu meningkatkan langkah-langkah keamanan cyber mereka untuk melindungi sistem mereka dari serangan yang mungkin terjadi. Rekomendasi termasuk penerapan firewall yang kuat, pemantauan sistem secara teratur, pembaruan perangkat lunak yang tepat waktu, dan pelatihan keamanan bagi karyawan.