DIGITAL FORENSIC READINESS INFORMATION SYSTEM FOR EJBCA DIGITAL SIGNATURE WEB SERVER

• Main Author: Faishal Rasyid, Ihsan
• Format: Final Project
• Language: Indonesia
• Online Access: https://digilib.itb.ac.id/gdl/view/70149
• Institution: Institut Teknologi Bandung

Due to the nature of the website, the EJBCA digital signature have vulnerabilities. A list of web-based vulnerabilities can be found in OWASP's Top 10 2021 survey. For this reason, it is necessary to anticipate attacks with effective and efficient forensic applications. The concept of digital forensic readiness can be applied as a pre-incident plan for forensic process. Managing digital evidence in the pre-incident plan includes data collection, data examination, data analysis, and findings report. Based on this concept, we implemented it by designing an information system that runs the entire flow, providing collection of attack evidence, visualization of attack statistics in executive summary, mitigation recommendations, and generation of physical forensic reports when needed. This research offers an information system that can help digital forensics processes and maintain the integrity of the EJBCA digital signature web server.