SECURITY DESIGN RIDE HAILING APPLICATION ON ANDROID PLATFORM USING MASVS OWASP STANDARD 1.0 APPROACH

• Main Author: Trisnaning Kartika P, Rike
• Format: Theses
• Language: Indonesia
• Online Access: https://digilib.itb.ac.id/gdl/view/46261
• Institution: Institut Teknologi Bandung

Ride Hailing Service as known as an online transportation booking service. Some examples of Ride Hailing Service applications that are known to the people of Indonesia include Gojek, Grab, and Uber. This service provides a solution to the ease of ordering transportation through mobile devices. In providing its services, Ride Hailing Service utilizes the geographical location of its users, so it is also called Location Based Service. Geographic location is one of the sensitive information that can be used by certain parties to commit criminal acts. So the main issue on location-based services is the location privacy issue. In addition to location, some data such as personal identity, financial data that is processed on this service is sensitive data that must be protected. So that not only privacy protection, other security aspects such as data integrity protection, data authenticity and non-repudiation are also important. Some research has been done separately to find solutions to security issues, but most of these solutions are only a proof of concept. This study aims to design security designs on ride hailing service. The application security design stages utilize the problem frames method to identify the minimum assets, threats, and security techniques employed. The security technique will be described in the form of application design. The design is then implemented on the Android platform so that the Ride Hailing Service Application is obtained that can guarantee these security aspects. The results of the implementation of the secure ride hailing service application are carried out functional testing and verification of the results using the OWASP MASV standard which is a Mobile Security Testing Guide (MSTG) so that the conformity of the implementation of security techniques designed to the risk mitigation approach has been identified.