Information System Security Analysis to Determine Server Security Vulnerability with Penetration Testing Execution Standard (PTES) Method at VWX University

Abstract

Server security is indispensable as part of the protection and prevention of information theft measures. This aspect ignored by some agencies that already feel safe with the security conditions of the server network owned by installing antivirus or firewall on the server. There are still considerable agencies such as universities that constantly have not tightened the security of information on the server. Therefore, penetration testing required to determine vulnerabilities in the server by using Penetration Testing Execution Standard (PTES) method to find security gaps in an agency in this case, namely employee data servers at VWX University were in this research found vulnerabilities involves Cross-Site Tracing (CST) attacks, Sensitive Data Exposure, Password Guessing, DDoS Attack, and Sniffing activities that inflict access to the server system.