DIGITAL FORENSIC READINESS INFORMATION SYSTEM FOR EJBCA DIGITAL SIGNATURE WEB SERVER

Due to the nature of the website, the EJBCA digital signature have vulnerabilities. A list of web-based vulnerabilities can be found in OWASP's Top 10 2021 survey. For this reason, it is necessary to anticipate attacks with effective and efficient forensic applications. The concept of digita...

Full description

Saved in:
Bibliographic Details
Main Author: Faishal Rasyid, Ihsan
Format: Final Project
Language:Indonesia
Online Access:https://digilib.itb.ac.id/gdl/view/70149
Tags: Add Tag
No Tags, Be the first to tag this record!
Institution: Institut Teknologi Bandung
Language: Indonesia
Description
Summary:Due to the nature of the website, the EJBCA digital signature have vulnerabilities. A list of web-based vulnerabilities can be found in OWASP's Top 10 2021 survey. For this reason, it is necessary to anticipate attacks with effective and efficient forensic applications. The concept of digital forensic readiness can be applied as a pre-incident plan for forensic process. Managing digital evidence in the pre-incident plan includes data collection, data examination, data analysis, and findings report. Based on this concept, we implemented it by designing an information system that runs the entire flow, providing collection of attack evidence, visualization of attack statistics in executive summary, mitigation recommendations, and generation of physical forensic reports when needed. This research offers an information system that can help digital forensics processes and maintain the integrity of the EJBCA digital signature web server.