ANALISIS FORENSIK BERBASIS INTEGRITAS FILE DAN STRATEGI MITIGASI SERANGAN SEO SPAM INJECTION PADA WEBSITE WORDPRESS PERGURUAN TINGGI
DOI:
https://doi.org/10.33143/jics.v11i2.5760Kata Kunci:
Forensik Digital, SEO Spam Injection, WordPress, Integritas File, Keamanan WebsiteAbstrak
Website perguruan tinggi berbasis Content Management System (CMS) seperti WordPress menjadi salah satu target utama serangan siber, khususnya dalam bentuk SEO spam Injection yang memanfaatkan penyisipan file berbahaya untuk menghasilkan redirect tersembunyi ke situs eksternal. Serangan ini tidak hanya menurunkan reputasi institusi, tetapi juga berdampak pada integritas sistem dan kepercayaan pengguna. Penelitian ini bertujuan untuk melakukan analisis forensik berbasis integritas file terhadap insiden SEO spam Injection pada website WordPress perguruan tinggi serta merumuskan strategi mitigasi yang sistematis. Metode penelitian menggunakan pendekatan forensik digital yang meliputi tahap identifikasi, akuisisi, analisis, dan pelaporan dengan fokus pada pemeriksaan struktur direktori, deteksi file PHP anomali, serta perbandingan terhadap struktur standar WordPress. Hasil penelitian menunjukkan bahwa serangan dilakukan melalui penyisipan file PHP tidak sah pada direktori publik yang berfungsi sebagai backdoor dan generator redirect tersembunyi. Proses pembersihan berbasis analisis integritas file terbukti efektif dalam menghilangkan mekanisme redirect dan memulihkan fungsi normal website. Penelitian ini memberikan kontribusi berupa model analisis berbasis integritas file serta rekomendasi strategi hardening WordPress untuk mencegah serangan serupa pada institusi pendidikan tinggi.Referensi
Mochamad Najib Budi Noorsyahbannie, Wisnu Uriawan, dan Wildan Budiawan Zulfikar. 2025. Analisis Perbandingan Keamanan CMS WordPress dan Joomla Dengan Konfigurasi Standar. The Indonesian Journal of Computer Science (IJCS), Vol. 14 No. 1, pp. 1208–1221.
Bagus Setya Putra dan Dwi Budi Santoso. 2025. Analisis Keamanan Website Berbasis WordPress melalui Penetration Testing untuk Meningkatkan Keamanan Digital. Jurnal Teknologi Informasi dan Komunikasi (JTIK), 9(3), 981–990.
Candra Kurniawan dan Agung Triayudi. 2024. File Integrity Monitoring as a Method for Detecting and Preventing Web Defacement Attacks. Jurnal Online Informatika, 9(2): 276–285.
Aldi Fandiya Akbar, Mahendra Data, dan M. Ali Fauzi. 2025. Deteksi Kerentanan Cross-Site Request Forgery (CSRF) pada Plugin WordPress dengan Menggunakan Analisis Nonce. Jurnal Pengembangan Teknologi Informasi dan Ilmu Komputer (J-PTIIK).
Hendri Alamsyah, Tomy Roynaldi, dan Toibah Umi Kalsum. 2025. Analisa Sistem Keamanan Web Menggunakan OWASP Zed Attack Proxy (ZAP). Journal Computer Science & Information System, Vol. 5 No. 1.
Brian Budi Aji, Wahyu Nur Alimyaningtias, Muhammad Fahmi Abdillah, dan Dicky Satrio Ikhsan Utomo. 2025. Tinjauan Keamanan terhadap Serangan Deface Website sebagai Bentuk Cybercrime. JAITS: Journal of Applied Information Technology Solution, Vol. 2 No. 1, April 2025.
Meidi Djamalyanto, Lilik Widyawati, Husain Husain, dan I Putu Hariyadi. 2025. Implementation of Security Information and Event Management to Prevent Deface Attacks on Servers Integrated with Telegram. Melek IT: Information Technology Journal, Vol. 11 No.1, 2025.
Yuwan Jumaryadi, Johanes Desmon, dan Syarief Hidayatulloh. 2023. Systematic Literature Review: Serangan Deface Website sebagai Bentuk Kejahatan Siber. Just IT: Jurnal Sistem Informasi, Teknologi Informasi, dan Komputer, 14(2): 106–112.
R. N. Saputra. 2023. Monitoring Keamanan Web Berbasis CMS dan Analisis Risiko Serangan Siber (tesis/skripsi/Bappeda — contoh skripsi relevan). (Contoh jika perlu referensi lokal berbasis kampus, silakan ganti dengan literatur sepadan). — Catatan: Ini placeholder akademik, bukan artikel jurnal.
Mochamad Najib Budi Noorsyahbannie, Wisnu Uriawan, Wildan Budiawan Zulfikar. 2025. Analisis Perbandingan Keamanan CMS WordPress dan Joomla Dengan Konfigurasi Standar (diperluas versi PDF). — Versi lengkap dataset & PDF tersedia di repositori IJCS.
Putra & Santoso. 2025. Analisis Keamanan Website Berbasis WordPress melalui Penetration Testing (PDF lengkap), Jurnal JTIK.
Kurniawan & Triayudi. 2024. File Integrity Monitoring as a Method for Detecting and Preventing Web Defacement Attacks. (diunduh full text PDF).
Brian Budi Aji dkk. 2025. Tinjauan Keamanan terhadap Serangan Deface Website sebagai Bentuk Cybercrime. (PDF & detail jurnal JAITS).
Djamalyanto et al. 2025. Implementation of SIEM to Prevent Deface Attacks Integrated with Telegram. Melek IT Journal.
Hendri Alamsyah dkk. 2025. Analisa Sistem Keamanan Web Menggunakan OWASP ZAP. Journal CSIS.
Aldi F. Akbar et al. 2025. Deteksi Kerentanan CSRF pada Plugin WordPress. J PTIIK.
Putra & Santoso. 2025. Analisis Keamanan Website WPScan & OWASP ZAP. JTIK (PDF lengkap).
Kurniawan & Triayudi. 2024. File Integrity Monitoring for Web Defacement. Jurnal Online Informatika (DOAJ listing).
Noorsyahbannie et al. 2025. Analisis Perbandingan Keamanan CMS WordPress dan Joomla. (Dokumen PDF universitas).
A. N. Harahap, A. Widjajarto & A. Budiyono. 2025. Desain Kontrol Keamanan pada CMS WordPress Berbasis Aspek Jaringan dengan Panduan OWASP. eProceedings Engineering.
Unduhan
Diterbitkan
Terbitan
Bagian
Lisensi
COPYRIGHT TRANSFER FORM
The copyright to this article is transferred to Universitas Ubudiyah Indonesia (UUI) if and when the article is accepted for publication. The undersigned hereby transfers any and all rights in and to the paper including without limitation all copyrights to UUI. The undersigned hereby represents and warrants that the paper is original and that he/she is the author of the paper, except for material that is clearly identified as to its original source, with permission notices from the copyright owners where required. The undersigned represents that he/she has the power and authority to make and execute this assignment.
We declare that:
- This paper has not been published in the same form elsewhere.
- It will not be submitted anywhere else for publication prior to acceptance/rejection by this Journal.
- A copyright permission is obtained for materials published elsewhere and which require this permission for reproduction.
Furthermore, I/We hereby transfer the unlimited rights of publication of the above mentioned paper in whole to UUI. The copyright transfer covers the right to reproduce and distribute the article, including reprints, translations, photographic reproductions, microform, electronic form (offline, online) or any other reproductions of similar nature. The corresponding author signs for and accepts responsibility for releasing this material on behalf of any and all co-authors. After submission of this agreement signed by the corresponding author, changes of authorship or in the order of the authors listed will not be accepted.
Retained Rights/Terms and Conditions
- Authors retain all proprietary rights in any process, procedure, or article of manufacture described in the work.
- Authors may reproduce or authorize others to reproduce the work or derivative works for the author’s personal use or for company use, provided that the source and the UUI copyright notice are indicated, the copies are not used in any way that implies UUI endorsement of a product or service of any employer, and the copies themselves are not offered for sale.
- Although authors are permitted to re-use all or portions of the work in other works, this does not include granting third-party requests for reprinting, republishing, or other types of re-use.
.png)
