Analisa Keamanan Website Terhadap Serangan Cross-Site Request Forgery (CSRF)

Abstract

Cross-Site Request Forgery (CSRF)  is an attack that asks end users to take unwanted actions on a web application during the authentication process. The security of a web becomes very important from CSRF attacks, opposing with various encryption methods that can be used as alternatives to overcome CSRF attacks. The purpose of this research is to find the gaps in the East Aceh Regency Government website, to analyze the East Aceh Regency Government website for the CSRF attack, to minimize the CSRF attack on the East Aceh Government institution from the CSRF attack technique. using the Acunetix tool. Based on the analysis of the East Aceh Government website, a conclusion can be made, namely the assessment of the website jdih.acehtimurkab.go.id and acehtimurkab.go.id cross scripting based DOM site., analysis of attacks on the East Aceh Government website with HTML attack type without CSRF protection found attack protection on Alert Media, and based on security analysis and attack analysis on the website, an anti CSRF library was created that can be used to find all forms of attack from the CSRF attack technique.