Enhancing Web Server Security against Layered Cyber Threats in Healthcare

Muhammad Fajar Rifai; Syaiful Hendra; Hajra Rasmita Ngemba; Ryfial Azhar; Rahmah Laila

doi:10.26877/asset.v6i2.18307

Enhancing Web Server Security against Layered Cyber Threats in Healthcare

Muhammad Fajar Rifai, Syaiful Hendra, Hajra Rasmita Ngemba, Ryfial Azhar, Rahmah Laila

Abstract

Information technology plays an important role in improving operational efficiency at Torabelo Hospital. The server system in use today faces security and optimization challenges. This research analyzes the impact and recommends solutions to improve server security and optimization. The findings show that the server system is vulnerable to various types of attacks and performance degradation. This can negatively impact hospital operations and put patients at risk. The recommended solution is to implement Squid as reverse proxy, WAF (Web Application Firewall), and Snort as IDS (Intrusion Detection System). System testing showed that this solution successfully detected and prevented various common attacks. This research provides insights to health IT professionals to improve the security and performance of their server systems and improve healthcare services to patients at Torabelo Hospital.

Full Text:

PDF

References

. R. Riswandi, K. Kasim, and M. F. Raharjo, "Evaluasi Kinerja Web Server Apache menggunakan Protokol HTTP2," J. Tek. dan Sist. Inform., vol. 2, no. 1, pp. 19-31, 2020, doi: 10.36079/lamintang.jetas-0201.92.

. Riska and H. Alamsyah, "Penerapan Sistem Keamanan Web Menggunakan Metode Web Application Firewall," J. Amplif. : J. Ilm. Bid. Tek. Elekt. dan Komput., vol. 11, no. 1, pp. 37-42, 2021, doi: 10.33369/jamplifier.v11i1.16683.

. A. Susanto, "Pengaturan Keamanan Squid Proxy Pada Jaringan Lokal Dan Internet Menggunakan Openldap," 2022, vol. 2.

. B. Wiguna, A. P. W., and R. Ananda, "Implementasi Web Application Firewall Dalam Mencegah Serangan SQL Injection Pada Website," Digital Zone, vol. 11, no. 2, pp. 245-256, 2020, doi: 10.31849/digitalzone.v11i2.4867.

. T. A. F. Anugrah, S. Ikhwan, and A. G. J. Gusti, "Implementasi Intrusion Prevention System (IPS) Menggunakan Suricata Untuk Serangan SQL Injection," Techne, vol. 21, no. 2, pp. 199-210, 2022, doi: 10

. Zain AR, Matin IMM. "Analisis Implementasi Modsecurity dan Reverse Proxy Untuk Pencegahan Serangan Keamanan DDoS pada Web Server." 2023;2(1).

. Syani M. "IMPLEMENTASI INTRUSION DETECTION SYSTEM (IDS) MENGGUNAKAN SURICATA PADA LINUX DEBIAN 9 BERBASIS CLOUD VIRTUAL PRIVATE SERVERS (VPS)." JurnalInkofar. 2020;1(1). doi:10.46846/jurnalinkofar.v1i1.155

. Suwanto R, Ruslianto I, Diponegoro M. "IMPLEMENTASI INTRUSION PREVENTION SYSTEM (IPS) MENGGUNAKAN SNORT DAN IPTABLE PADA MONITORING JARINGAN LOKAL BERBASIS WEBSITE." 2019;07(1).

. Sutabri T. "Analisis Cyber Crime handling pada Aplikasi Web dengan WAF ModSecurity." 2023;16(1).

. Ullah MU, Hassan A, Asif M, Farooq MS, Saleem M, Ullah U. "Intelligent Intrusion Detection System for Apache Web Server Empowered with Machine Learning Approaches." 2022;1.

. Nasir A, Lordianto RL. "IMPLEMENTASI PROXY SERVER UNTUK OPTIMALISASI MANAJEMEN BANDWIDTH JARINGAN KOMPUTER PADA UNIVERSITAS XYZ." JTech. 2023;11(1):16-23. doi:10.30869/jtech.v11i1.1164

. Muntaha MF, Trisnawan PH, Primananda R. "Implementasi Intrusion Prevention System (IPS) berbasis Athena untuk Mencegah Serangan DDoS pada Arsitektur Software-Defined Network (SDN).".

. Muqorobin M, Hisyam Z, Mashuri M, Hanafi H, Setiyantara Y. "Implementasi Network Intrusion Detection System (NIDS) Dalam Sistem Keamanan Open Cloud Computing." MIBJ. 2019;17(2):1-9. doi:10.33489/mibj.v17i2.205

. Universitas Methodist Indonesia, Gea A, Purba MJ, Putra AA, Jamaluddin J, Siringoringo R. "IMPLEMENTASI METODE ACCESS CONTROL LIST UNTUK MEMONITORING AKSES JARINGAN MENGGUNAKAN SQUID PROXY." jmika. 2022;6(1):79-84. doi:10.46880/jmika.Vol6No1.pp79-84

R. A. Muzaki, O. C. Briliyant, M. A. Hasditama, and H. Ritchie, "Improving Security of Web-Based Application Using ModSecurity and Reverse Proxy in Web Application Firewall," in 2020 International Workshop on Big Data and Information Security (IWBIS), Depok, Indonesia: IEEE, Oct. 2020, pp. 85–90. doi: 10.1109/IWBIS50925.2020.9255601.

R. A. Muzaki, Y. A. Wilar, K. Yuliawan, and A. A. Natsir, "ANALISIS KEAMANAN SISTEM MANAJEMEN INFORMASI RUMAH SAKIT UMUM DAERAH NABIRE," MAHESA: MALAHAYATI HEALTH STUDENT JOURNAL, vol. 3, no. 10, pp. 3365-3374, 2023, doi: 10.33024/mahesa.v3i10.11246.

I. Stepheng, C. A. Sari, E. H. Rachmawanto, and F. O. Isinkaye, "A Combination of Vigenere Cipher and Advanced Encryption Standard for Image Security," ASSET: International Journal of Advanced Science and Engineering Technology, vol. 5, no. 3, pp. 0230305-01~0230305-08, Oct. 2023, doi: 10.26877/asset.v5i3.17150.

A. S. Joel, F. Abdussalaam, dan Y. Yunengsih, "Tata Kelola Rekam Medis Berbasis Teknologi Informasi dalam Penanganan Kerahasiaan dan Keamanan Data Pasien dengan Metode Kriptografi," Jurnal Ilmiah Manajemen Informatika dan Komunikasi, vol. 4, no. 3, pp. 12-24, Sep. 2023, doi: 10.35870/jimik.v4i3.287.

H. Amri, A. A. Haryada, K. Abdi, dan A. Ikhwan, "Manajemen Resiko Keamanan Aset Informasi Pada Puskesmas Pancur Batu Tuntungan," Jurnal Informatika dan Teknologi, vol. 3, no. 1, pp. 10-19, Mar. 2023.

R. S. A. Gusni, Kraugusteeliana, dan I. W. W. Pradnyana, "Analisis Tata Kelola Keamanan Sistem Informasi Rumah Sakit XYZ Menggunakan Cobit 2019 (Studi Kasus pada Rumah Sakit XYZ)," Jurnal Informatika dan Teknologi, vol. 5, no. 1, pp. 6-11, Jun. 2021.

J. Wijaya, A. Megafitri, K. Khotimah, dan R. Astriratma, "Analisis dan Manajemen Risiko Keamanan Informasi pada Rumah Sakit Menggunakan Metode Octave Allegro (Studi Kasus: Rumah Sakit Umum Daerah Cengkareng)," Jurnal Informatika dan Teknologi, vol. 2, no. 2, pp. 13-25, Sept. 2021.

A. T. Kurniawan, B. S. WA, dan A. Nasiri, "Analisis Architecture Teknologi Menggunakan SABSA untuk Meningkatkan Keamanan di Rumah Sakit Queen Latifa," Jurnal Informatika dan Teknologi, vol. 3, no. 2, pp. 6-11, Des. 2022.

DOI: https://doi.org/10.26877/asset.v6i2.18307

Refbacks

There are currently no refbacks.

This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.

Advance Sustainable Science, Engineering and Technology (ASSET)

E-ISSN: 2715-4211
Published by Science and Technology Research Centre

Universitas PGRI Semarang, Indonesia

Website: http://journal.upgris.ac.id/index.php/asset/index
Email: asset@upgris.ac.id