Agile Web Software Development Security Testing with SQL Injection on Indonesia Higher Education Institution

Abstract

Web-based software development is now mushrooming all over the world, every company will display information through internet web via published URL, as well as business on the Internet or eCommerce, then software development also keep increasing along with the existing start-up.

Agile web software development is the latest web-based application development by combining several things such as: collaborative self-organizing cross-functional team and its customer / end user, involving adaptive planning, evolutionary development, early delivery and continuous improvement as well as encourage rapid and flexible response to change.

When a web-based application is published then the application will be loaded by all end users in the world that is not known good or bad intentions, so need to protect the web application from a security interruption. The most nefarious disturbance by using SQL injection to get into the heart of the web server database, if this can be penetrated, then the database can be misused by the hackers.

Equally important is to conduct Agile Web-based application security testing with SQL injection attack against several higher education institutions in Indonesia. The world-renowned and proven OWASP web-based security test form. Several outcomes from this security testing will be modeled for the preparation of security testing in higher education in Indonesia.