IT Support Website Security Evaluation Using Vulnerability Assessment Tools

R. Armando, I. G. A. K. A. Melyantara, Rizma Elfariani, Desy Fitri Aulia Latuconsina, Muhammad Nasrullah
{"title":"IT Support Website Security Evaluation Using Vulnerability Assessment Tools","authors":"R. Armando, I. G. A. K. A. Melyantara, Rizma Elfariani, Desy Fitri Aulia Latuconsina, Muhammad Nasrullah","doi":"10.51519/journalisi.v4i4.330","DOIUrl":null,"url":null,"abstract":"Vulnerability Assessment is one of the crucial stages that must be carried out to define and identify vulnerabilities in web systems so that they can be repaired and reduced. The XYZ institution is new, so the Vulnerability Assessment is to minimize attacks from irresponsible parties. In this study, a Vulnerability Assessment of the IT Support website was carried out on XYZ institution using the Nessus tool. This study used the Vulnerability Assessment Penetration Testing (VAPT) Life Cycle method, which has six stages: scope, planning, scanning & vulnerability Analysis, exploitation, Privilege Escalation, and Generating Report. The results of this study obtained various vulnerabilities ranging from Low to Critical on the IT Support website at XYZ institution so that the IT Support party at XYZ institution to update PHP versions, JQuery and several other preventive steps reviewed in the discussion section.","PeriodicalId":33075,"journal":{"name":"Journal of Information Systems and Informatics","volume":" ","pages":""},"PeriodicalIF":0.0000,"publicationDate":"2022-11-14","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"0","resultStr":null,"platform":"Semanticscholar","paperid":null,"PeriodicalName":"Journal of Information Systems and Informatics","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.51519/journalisi.v4i4.330","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}
引用次数: 0

Abstract

Vulnerability Assessment is one of the crucial stages that must be carried out to define and identify vulnerabilities in web systems so that they can be repaired and reduced. The XYZ institution is new, so the Vulnerability Assessment is to minimize attacks from irresponsible parties. In this study, a Vulnerability Assessment of the IT Support website was carried out on XYZ institution using the Nessus tool. This study used the Vulnerability Assessment Penetration Testing (VAPT) Life Cycle method, which has six stages: scope, planning, scanning & vulnerability Analysis, exploitation, Privilege Escalation, and Generating Report. The results of this study obtained various vulnerabilities ranging from Low to Critical on the IT Support website at XYZ institution so that the IT Support party at XYZ institution to update PHP versions, JQuery and several other preventive steps reviewed in the discussion section.
IT支持网站安全评估使用漏洞评估工具
漏洞评估是定义和识别网络系统中的漏洞,以便修复和减少漏洞的关键阶段之一。XYZ机构是新的,所以脆弱性评估是为了最小化来自不负责任的团体的攻击。在本研究中,使用Nessus工具对XYZ机构的IT支持网站进行了漏洞评估。本研究使用了漏洞评估渗透测试(VAPT)生命周期方法,该方法有六个阶段:范围、计划、扫描和漏洞分析、利用、特权升级和生成报告。这项研究的结果在XYZ机构的IT支持网站上获得了从低到关键的各种漏洞,以便XYZ机构的IT支持方更新PHP版本、JQuery和讨论部分审查的其他几个预防步骤。
本文章由计算机程序翻译,如有差异,请以英文原文为准。
求助全文
约1分钟内获得全文 求助全文
来源期刊
自引率
0.00%
发文量
54
审稿时长
10 weeks
×
引用
GB/T 7714-2015
复制
MLA
复制
APA
复制
导出至
BibTeX EndNote RefMan NoteFirst NoteExpress
×
提示
您的信息不完整,为了账户安全,请先补充。
现在去补充
×
提示
您因"违规操作"
具体请查看互助需知
我知道了
×
提示
确定
请完成安全验证×
copy
已复制链接
快去分享给好友吧!
我知道了
右上角分享
点击右上角分享
0
联系我们:info@booksci.cn Book学术提供免费学术资源搜索服务,方便国内外学者检索中英文文献。致力于提供最便捷和优质的服务体验。 Copyright © 2023 布克学术 All rights reserved.
京ICP备2023020795号-1
ghs 京公网安备 11010802042870号
Book学术文献互助
Book学术文献互助群
群 号:604180095
Book学术官方微信
小红书