Implementasi dan Manajemen Akses Layanan Infrastructure as a Service (IaaS) pada Private Cloud untuk Lingkungan Kampus

Joeana, Tine (2026) Implementasi dan Manajemen Akses Layanan Infrastructure as a Service (IaaS) pada Private Cloud untuk Lingkungan Kampus. Other thesis, Institut Teknologi Sepuluh Nopember.

Text 5048221017-Undergraduate_Thesis .pdf - Accepted Version Restricted to Repository staff only Download (21MB) | Request a copy

Abstract

Infrastruktur virtualisasi Proxmox Virtual Environment di lingkungan kampus Institut Teknologi Sepuluh Nopember memerlukan mekanisme kontrol akses yang terstruktur, karena berbagai kategori pengguna memiliki kebutuhan dan kewenangan berbeda terhadap sumber daya komputasi yang sama. Tanpa sistem manajemen akses terpusat, pengelolaan hak akses menjadi tidak konsisten dan rentan terhadap penyalahgunaan wewenang. Penelitian ini mengimplementasikan sistem manajemen akses layanan Infrastructure as a Service (IaaS) pada private cloud kampus, berupa portal web berbasis PHP Native dan MySQL yang berperan sebagai lapisan kontrol akses tunggal terhadap infrastruktur Proxmox. Portal mengimplementasikan autentikasi berbasis bcrypt dan OTP, otorisasi menggunakan Role-Based Access Control (RBAC) dengan empat peran pengguna (Superadmin, Admin, Dosen, Mahasiswa), serta provisioning VM otomatis melalui mekanisme permohonan dan persetujuan dua lapis yang terintegrasi dengan Proxmox REST API. Pengujian dilakukan terhadap empat aspek: fungsionalitas, penegakan kontrol akses, keamanan, dan performa. Hasil pengujian menunjukkan seluruh skenario fungsional berjalan sesuai yang diharapkan; penegakan RBAC mencapai 100%; pengujian keamanan terhadap SQL Injection, XSS, dan kerentanan autentikasi seluruhnya valid; response time login rata-rata 0,203 detik (target <2 detik); waktu provisioning VM rata-rata 20,55 detik (standar deviasi 0,19 detik); serta 0% failed request pada pengujian beban konkuren hingga 100 pengguna dengan throughput 1.015–1.189 request per detik dan latensi maksimum 171 ms.
==================================================================================================================================
The Proxmox Virtual Environment virtualization infrastructure managed within the campus environment of Institut Teknologi Sepuluh Nopember requires a structured access control mechanism, as various categories of users have different needs and levels of authority over the same computing resources. Without a centralized access management system, access rights management becomes inconsistent and vulnerable to abuse of privilege. This research implements an access management system for Infrastructure as a Service (IaaS) on the campus private cloud, in the form of a web portal built with PHP Native and MySQL that serves as a single point of access control layer over the Proxmox infrastructure. The portal implements bcrypt and OTP-based authentication, authorization using Role-Based Access Control (RBAC) with four user roles (Superadmin, Admin, Lecturer, Student), and automated VM provisioning through a two-layer request and approval mechanism integrated with the Proxmox REST API. Testing was conducted on four aspects: functionality, access control enforcement, security, and performance. Results show all functional scenarios performed as expected; RBAC enforcement reached 100%; security testing against SQL Injection, XSS, and authentication vulnerabilities were all valid; average login response time was 0.203 seconds (target <2 seconds); average VM provisioning time was 20.55 seconds (standard deviation 0.19 seconds); and 0% failed requests were recorded under concurrent load testing of up to 100 simultaneous users with a throughput of 1,015–1,189 requests per second and a maximum latency of 171 ms.

Item Type:	Thesis (Other)
Uncontrolled Keywords:	Private Cloud, Infrastructure as a Service, Role-Based Access Control, Manajemen Akses, Proxmox Virtual Environment, Private Cloud, Infrastructure as a Service, Role-Based Access Control, Access Management, Proxmox Virtual Environment
Subjects:	T Technology > TK Electrical engineering. Electronics Nuclear engineering > TK5101 Telecommunication
Divisions:	Faculty of Intelligent Electrical and Informatics Technology (ELECTICS) > Telecommunication Engineering > 20202-(S1) Undergraduate Thesis
Depositing User:	Tine Joeana
Date Deposited:	24 Jul 2026 06:32
Last Modified:	24 Jul 2026 06:32
URI:	http://repository.its.ac.id/id/eprint/137116

Actions (login required)

View Item