Enhancing Laravel Filament Security Through Owasp-Based Secure Code Practices

The Academic Information System (SIAKAD) is a digital platform utilized by Bengkulu University to oversee a range of academic activities, including student enrolment and attendance. Given the considerable number of parties that utilize SIAKAD within the university context, it is of great importance to enhance the security of this system, in order to mitigate the risk of future cyber-attacks. The objective of this research is to provide recommendations regarding the implementation of more secure code by the development team. The methodology employed in this research comprises three stages: data collection, security analysis and the formulation of recommendations for the implementation of secure code. In terms of standardizing the security analysis, this research adheres to the OWASP Application Security Verification Standard (ASVS), while the system testing is based on the OWASP Testing Guide. The outcome of this research is a more secure code recommendation, to be implemented in order to enhance the security of SIAKAD. The application was subjected to security testing using both black-box and white-box methods, which revealed a number of vulnerabilities, including code injection and errors in the configuration of security settings. Based on these findings, recommendations were formulated to enhance the authentication architecture, input and output validation, and file upload mechanism. It is anticipated that the implementation of these recommendations will lead to a notable enhancement in the security of SIAKAD, thereby protecting academic data and processes from potential threats.