Assignment Week 5 – (BD308) Cyber Security – Syafira Aulia

1. Why is keeping software (like WordPress, Magento, etc.) and its plugins updated a critical security task?
2. Explain the concept of input validation and how it can prevent attacks like SQL injection.
3. What are the security risks of using weak or default passwords for application admin panels?

Jawaban:

1. Keeping core software (like WordPress or Magento) and its plugins updated is a critical security task because developers constantly release patches to fix “Zero-Day” vulnerabilities and known security holes. Hackers often use automated “bots” to scan the internet for websites running outdated versions of software with documented weaknesses. If a business fails to update, these vulnerabilities act as an open door for attackers to inject malicious code, steal customer databases, or take complete control of the web server. Regular updates ensure that the latest security “shields” are active against evolving cyber threats.
2. Input Validation is the process of verifying that the data provided by a user (via forms, search bars, or URL parameters) matches the expected format, type, and length before it is processed by the application. It prevents SQL Injection (SQLi) attacks, where an attacker enters malicious SQL commands into an input field to trick the database into revealing sensitive information or deleting data. By strictly validating and “sanitizing” inputs, essentially stripping out dangerous characters like single quotes or semicolons, a business ensures that the database only executes legitimate queries, effectively neutralizing the attacker’s attempt to manipulate the backend system.
3. Using weak or default passwords (like “admin” or “123456”) for application admin panels creates a massive security risk because these are the first combinations targeted in “Brute Force” or “Dictionary” attacks. Default passwords provided by manufacturers are publicly available in online databases, making it trivial for hackers to gain administrative access. Once inside the admin panel, an attacker can modify website content, create unauthorized user accounts, access private financial records, and lock out the legitimate owners. Strong, unique passwords combined with Multi-Factor Authentication (MFA) are essential to prevent unauthorized access to these high-privilege areas of a business’s digital infrastructure.

Status: 100%

Keterangan: Sudah mengerjakan tugas dengan baik dan benar.