article · 2020

Secure Code Recommendation Based on Code Review Result Using OWASP Code Review Guide

Venia Noella Nanisura Damanik, Septia Ulfa Sunaringtyas

Cited by 12Abstract and details only

Abstract

Sistem Informasi Akademik dan Pengasuhan (SIAP) is an application web that facilitates the academic community in accessing information about academics and student care. However, in its development, if the code system is poorly written, a web application might have vulnerabilities. This study aims to determine the vulnerabilities found in SIAP using OWASP guide and how to fix these vulnerabilities. OWASP is the best choice because it can be obtained free of charge and freely on the internet and periodically up to date. Before vulnerability testing, analysis about security level of SIAP is done using OWASP ASVS. Then, OWASP Testing Guide is used for vulnerability testing. In the tests conducted, it was found that SIAP is vulnerable to injection, broken authentication, and broken access control. Injection is one of the vulnerabilities that has the highest risk value. After testing, a code review using OWASP Code Review Guide is performed to find the location of the vulnerability in the source code. For the last, a secure code recommendation will be given that can overcome the vulnerabilities found from the used guidelines.

Cite this paper

APA 7

Damanik, V. N. N., & Sunaringtyas, S. U. (2020). Secure Code Recommendation Based on Code Review Result Using OWASP Code Review Guide. https://doi.org/10.1109/iwbis50925.2020.9255559

MLA 9

Damanik, Venia Noella Nanisura, and Septia Ulfa Sunaringtyas. “Secure Code Recommendation Based on Code Review Result Using OWASP Code Review Guide.” 2020, pp. 153–58, https://doi.org/10.1109/iwbis50925.2020.9255559.

Chicago

Damanik, Venia Noella Nanisura, and Septia Ulfa Sunaringtyas. 2020. “Secure Code Recommendation Based on Code Review Result Using OWASP Code Review Guide.” https://doi.org/10.1109/iwbis50925.2020.9255559.

Harvard

Damanik, V.N.N. and Sunaringtyas, S.U. (2020) ‘Secure Code Recommendation Based on Code Review Result Using OWASP Code Review Guide’. Available at: https://doi.org/10.1109/iwbis50925.2020.9255559.

BibTeX

@article{damanik2020secure,
  title = {{Secure Code Recommendation Based on Code Review Result Using OWASP Code Review Guide}},
  author = {Damanik, Venia Noella Nanisura and Sunaringtyas, Septia Ulfa},
  pages = {153--158},
  year = {2020},
  doi = {10.1109/iwbis50925.2020.9255559}
}

Made from the index record. Check names, capitalisation and page numbers against the paper. Need another style? AI for Research has over 10,000.