Pelatihan Penerapan Enkripsi pada Source Code dan Database: Meningkatkan Keamanan dalam Pengelolaan Aplikasi Web Training on the Implementation of Encryption in Source Code and Databases: Enhancing Security in Web Application Management
Main Article Content
Abstract
Web application security is a critical aspect of information system management, particularly in protecting data from cyber threats. One effective approach to enhancing security is the implementation of encryption in both source code and databases. This community service program aims to improve the knowledge and skills of teachers and students from the Software Engineering department at SMK Ibu Pawiyatan Tamansiswa Yogyakarta in applying encryption techniques in web application development. The implementation methods include theoretical training, hands-on practice, and case studies covering the use of encryption algorithms such as AES, RSA, and SHA-256 hashing, as well as PHP CodeIgniter 3 and MySQL. The selection of the CodeIgniter 3 framework is based on its alignment with the partner school's curriculum and its ease of use for beginner-level participants. The results of the program indicate significant improvements, including an increase in understanding of web application security concepts from 45% to 85%, knowledge of encryption functions from 40% to 90%, ability to implement encryption in source code from 30% to 80%, and database encryption skills from 25% to 75%. Additionally, participants’ perceived difficulty in implementing web application security decreased from 70% to 25%. This program produced training modules and technical documentation that can be utilized as sustainable teaching materials within the school environment. Therefore, the training not only enhances participants’ competencies but also supports the integration of web application security practices into a continuous learning process.
Downloads
Article Details
This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.
Authors who publish with this journal agree to the following terms:
- Any article on the copyright is retained by the author(s).
- Author grant the journal, right of first publication with the work simultaneously licensed under a Creative Commons Attribution License that allows others to share work with acknowledgment of the work authors and initial publications in this journal.
- Authors are able to enter into a separate, additional contractual arrangements for non-exclusive distribution of published articles of work (eg, post-institutional repository) or publish it in a book, with acknowledgment of its initial publication in this journal.
- Authors are permitted and encouraged to post their work online (e.g., in institutional repositories or on their websites) prior to and during the submission process, as can lead to productive exchanges, as well as earlier and greater citation of published work.
- The article and any associated published material is distributed under the Creative Commons Attribution-ShareAlike 4.0 International License
References
Aditya, F., & Romli, M. A. (2025). Implementasi metode kriptografi AES-256bit untuk pengamanan dokumen digital. Terapan Informatika Nusantara (TIN), 6(6), 707–714. https://doi.org/10.47065/tin.v6i6.8637
Almubarak, A., Alenezi, M., & Khan, S. (2023). Web application security vulnerabilities: A systematic literature review. Journal of Information Security and Applications, 73, 103446. https://doi.org/10.1016/j.jisa.2023.103446
Anderies, A., et al. (2025). Systematic literature review on secure software development practices (S-SDLC). EMACS Journal, 7(1), 45–58. https://doi.org/10.1109/ACCESS.2022.3140181
Carvalho, M., Sá, F., & Bernardino, J. (2025). Evaluation of the impact of AES encryption on query read performance across relational databases. Cryptography, 9(4), 77. https://doi.org/10.3390/cryptography9040077
Halimi, A. (2024). Optimasi keamanan data penerimaan mahasiswa pada sistem MySQL menggunakan algoritma AES-256. JUSTIFY: Jurnal Sistem dan Teknologi Informasi, 4(2), 102–113. https://doi.org/10.35316/justify.v3i1.5107
Islam, M. S., & Li, X. (2025). Guardians of the web: The evolution and future of website information security. arXiv preprint. https://arxiv.org/abs/2505.04308
Naimnule, F. A. (2025). Implementation of AES encryption for data security on web-based information systems. Jurnal Keamanan dan Data Nasional, 13(1), 15–24. https://doi.org/10.58982/krisnadana.v4i3.836
Nugraha, R. D. (2025). Strengthening web-based login security using dual-layer encryption combining Vigenère and AES. Jurnal Online Teknologi Informasi, 14(2), 89–98. https://doi.org/10.37802/joti.v7i1.954
OWASP Foundation. (2023). OWASP Top 10: The ten most critical web application security risks. https://owasp.org/Top10/
Putra, R. A., & Nugroho, Y. (2023). Peningkatan kompetensi keamanan aplikasi web melalui pelatihan berbasis praktik. Jurnal Teknologi Informasi dan Ilmu Komputer, 10(3), 457–466. https://doi.org/10.25126/jtiik.2023.457
Rahman, F., et al. (2024). Implementation of AES encryption in web-based information systems. Procedia Computer Science, 234, 112–119. https://doi.org/10.1016/j.procs.2024.01.015
Siregar, M. Z. M. (2025). Implementation of security on library system login using a combination of AES and RSA cryptography. Jurnal Teknologi dan Komunikasi, 8(1), 30–42. https://journal.technolabs.co.id/index.php/jotechcom/article/view/74
Watini, S., Davies, G., & Andersen, N. (2024). Cybersecurity in learning systems: Data protection and privacy in digital learning platforms. International Journal on Information Technology & Education Excellence, 3(1), 665–679. https://doi.org/10.33050/itee.v3i1.665