Aryawan, Gusti Ngurah Satria (2019) Rancang Bangun Aplikasi Vulnerability Assessment and Management Dengan Metode Passive Scanning dan CVSS. Other thesis, Institut Teknologi Sepuluh Nopember.
Preview |
Text
05111540000066-Gusti-Ngurah-Satria-Aryawan-Buku_TA.pdf Download (2MB) | Preview |
Abstract
Vulnerability Assessment adalah proses untuk mengidentifikasi, menilai dan memprioritaskan kerentanan dalam sistem komputer, aplikasi, dan infrastruktur jaringan. Dalam melakukan vulnerability assessment dapat menggunakan berbagai macam automated testing tools, seperti Nessus, Acunetix, Netsparker. Proses ini memberikan informasi tentang kerentanan yang ditemukan beserta cara menanggulanginya. Terdapat beberapa tipe dalam melakukan vulnerability assessment, salah satunya adalah application scans yang dapat digunakan untuk melakukan test pada sebuah website guna menemukan kerentanan yang umum. Proses untuk menemukan kerentanan dapat menggunakan metode passive scanning. Passive scanning adalah metode dalam vulnerability detection dengan memanfaatkan informasi yang didapatkan dari data yang terkirim tanpa melakukan interaksi langsung. Passive scanning dapat memberikan informasi seperti sistem operasi yang digunakan, ports yang sedang berjalan dan aplikasi yang terinstall. CVSS adalah sistem penilaian kerentanan berdasarkan karakteristik dan menghasilkan nilai numerik yang mencerminkan tingkat kesulitan. Nilai numerik ini nantinya akan diubah menjadi nilai kualitatif seperti low, medium, high, dan critical untuk membantu dalam melakukan prioritas perbaikan. Sistem ini memiliki berbagai kelompok metrik untuk menghasilkan nilai seperti base score, temporal score, dan environmental score. Pada tugas akhir ini, pemanfaatan vulnerability assessment diharapkan dapat membantu pihak pengembang dalan proses perbaikan kerentanan yang ditemukan pada website yang sedang dikembangkan ataupun yang telah dibuat. Berdasarkan hasil uji coba, sistem yang dibangun pada tugas akhir ini mampu menjalankan vulnerability assessment secara langsung ataupun terjadwal, serta mampu memberikan laporan kerentanan yang ditemukan saat proses ini selesai. Kelemahan yang terdapat pada sistem ini adalah konsumsi resource yang tinggi untuk setiap proses dari masing-masing tools yang terdapat pada vulnerability assessment ini.
===============================================================================================================================
Vulnerability assessment is the process of defining, identifying and prioritizing vulnerabilities in computer systems, applications and network infrastructures. In the process of vulnerability assessment the use of automated testing tools, such as Nessus, Acunetix, Netsparker. This process provides information about vulnerabilities discovered and how to overcome them. There are several types of vulnerability assessment, one of which is an application scans can be used to test websites in order to detect common vulnerability. The process of finding vulnerability can use the passive scanning method. Passive scanning is a method of vulnerability detection that utilizes information obtained from data sent without direct interaction. Passive scanning can provide information such as the operation system used, ports that are running and installed applications. CVSS is a system that considers characteristics and produces numerical score that determine the level of difficulty. This numerical score will be changed to qualitative score such as low, medium, high and critical to assist in making priority improvements. This system has various metric groups to produce scores such as base scores, temporal scores, and environmental scores. In this undergraduate thesis, the use of vulnerability assessment is expected to help the developer in the process of repairing the vulnerabilities found on website that are being developed or that have been created. Based on trial results, the system built in this undergraduate thesis is able to run the vulnerability assessment directly or on a scheduled basis and is able to provide report of the vulnerabilies found when this process is completed. The weekness of this system is high resource consumption for each process of each tool contained in this vulnerability assessment.
| Item Type: | Thesis (Other) |
|---|---|
| Additional Information: | RSIf 005.74 Ary r-1 2019 |
| Uncontrolled Keywords: | Passive scanning, Vulnerability assessment, CVSS |
| Subjects: | H Social Sciences > HD Industries. Land use. Labor > HD30.213 Management information systems. Dashboards. Enterprise resource planning. T Technology > T Technology (General) > T58.5 Information technology. IT--Auditing |
| Divisions: | Faculty of Information Technology > Informatics Engineering > 55201-(S1) Undergraduate Thesis |
| Depositing User: | Gusti Ngurah Satria Aryawan |
| Date Deposited: | 28 Mar 2023 02:43 |
| Last Modified: | 28 Mar 2023 02:43 |
| URI: | http://repository.its.ac.id/id/eprint/73766 |
Actions (login required)
 |
View Item |