Abstract
This study examines security vulnerabilities in a publicly accessible IoT-based smart waste system using Nmap, Wireshark, and OWASP ZAP to assess network services, packet traffic, and the web application layer. Results were mapped to the OWASP IoT Top 10 (2018). Because the assessment was external black-box testing without exploitation, the mapping is indicative rather than comprehensive. Nmap identified several active TCP ports, although only six open ports were explicitly documented. Wireshark captured 62,591 packets, indicating port-scanning activity and ongoing TCP communication. OWASP ZAP identified 14 web application weaknesses: six medium, five low, and three informational, with no high-risk findings. Four OWASP IoT Top 10 categories (I2, I3, I7, and I9) were supported by direct evidence, while I1 and I5 require further verification and I4, I6, I8, and I10 were outside the testing scope. Key risks involved insecure network services, default settings, and inadequate data protection during transmission and storage.
How to Cite
| Issue | Vol. 4 No. 2 (2026) |
| Section | Articles |
| DOI | 10.58477/cj.v4i2.471 |
| Publication Date | 2026-08-30 |
| Pages | 195-204 |
- Aljabbar, J. P., Rajaguguk, M. R. F., & Wijaya, N. (2025). Studi literatur keamanan data dalam sistem smart home berbasis IoT. Device: Journal of Information System, Computer Science and Information Technology, 6(1), 245–255.
- Alrawi, O., Lever, C., Antonakakis, M., & Monrose, F. (2019). SoK: Security evaluation of home-based IoT deployments. Proceedings of the IEEE Symposium on Security and Privacy (SP), 1362–1380.
- Antonakakis, M., April, T., Bailey, M., Bernhard, M., Bursztein, E., Cochran, J., Durumeric, Z., Halderman, J. A., Invernizzi, L., Kallitsis, M., Kumar, D., Lever, C., Ma, Z., Mason, J., Menscher, D., Seaman, C., Sullivan, N., Thomas, K., & Zhou, Y. (2017). Understanding the Mirai botnet. Proceedings of the 26th USENIX Security Symposium, 1093–1110.
- Atzori, L., Iera, A., & Morabito, G. (2010). The Internet of Things: A survey. Computer Networks, 54(15), 2787–2805.
- Burhani, L. F., & Priyawati, D. (2024). Analisis pengujian keamanan website pengelolaan internet Desa Kragan menggunakan metode Penetration Testing Execution Standard (PTES). JIPI (Jurnal Ilmiah Penelitian dan Pembelajaran Informatika), 9(1), 307–319. https://doi.org/10.29100/jipi.v9i1.4455
- Fahlevi, M. R., Sharipuddin, Kurniabudi, & Medika, D. C. (2026). Analisis keamanan aplikasi web menggunakan penetration testing berdasarkan standar OWASP pada DVWA. Jurnal PROCESSOR, 21(1).
- Fiay, H. D., & Pakereng, M. A. I. (2026). Analisis keamanan jaringan WiFi dan CCTV menggunakan Zenmap sebagai network vulnerability scanner. INTECOMS: Journal of Information Technology and Computer Science, 9(2), 52–64. https://doi.org/10.31539/dr1nrv25
- Firdaus, R. A. R. B., & Widyawan, T. I. (2025). Pengujian kerentanan website menggunakan metode penetration testing dengan OWASP (Studi kasus: Pemerintah Kabupaten Semarang). CyberSecurity dan Forensik Digital, 8(2), 106–115.
- Kondru, K., Kancharla, P., Darlanka, M., & Sathuluri, B. C. (2025). Smart home, it’s vulnerability assessment through penetration testing. Journal of Informatics Electrical and Electronics Engineering (JIEEE), 6(1), 1–7.
- Murat, K., Topyła, D., Zdulski, K., Marzęcki, M., Bieniasz, J., Paczesny, D., & Szczypiorski, K. (2024). Security analysis of low-budget IoT smart home appliances embedded software and connectivity. Electronics, 13(12), 2371. https://doi.org/10.3390/electronics13122371
- Nurelasari, E., & Al Farabi, D. G. (2024). Analisis keamanan sistem website menggunakan metode Open Web Application Security Project (OWASP) pada SIMANTEP.ID. JATI (Jurnal Mahasiswa Teknik Informatika), 8(3), 3049–3054.
- OWASP Foundation. (2018). OWASP IoT Top 10 2018. https://owasp.org/www-project-internet-of-things/
- Puthal, D., Malik, N., Mohanty, S. P., Kougianos, E., & Das, G. (2018). Everything you wanted to know about the blockchain: Its promise, components, processes, and problems. IEEE Consumer Electronics Magazine, 7(4), 6–14.
- Roman, R., Najera, P., & Lopez, J. (2011). Securing the Internet of Things. Computer, 44(9), 51–58.
- Schiller, T., Caulkins, B., Wu, A. S., & Mondesire, S. (2023). Security awareness in smart homes and Internet of Things networks through swarm-based cybersecurity penetration testing. Information, 14(10), 536. https://doi.org/10.3390/info14100536
- Siagian, E. M. P., Siregar, J., & Siahaan, R. H. (2023). Analisis keamanan pada sistem Internet of Things untuk pengendalian perangkat elektronik rumah tangga. Jurnal Teknologi Informasi dan Industri, 4(1), 45–53.
- Silmina, E. P., Firdonsyah, A., & Amanda, R. A. A. (2022). Analisis keamanan jaringan sistem informasi sekolah menggunakan penetration test dan ISSAF. Transmisi: Jurnal Ilmiah Teknik Elektro, 24(3), 83–91. https://doi.org/10.14710/transmisi.24.3.83-91
- Sivaraman, V., Gharakheili, H. H., Vishwanath, A., Boreli, R., & Mehani, O. (2015). Network-level security and privacy control for smart-home IoT devices. Proceedings of the IEEE 11th International Conference on Wireless and Mobile Computing, Networking and Communications (WiMob), 163–167.
- Statista Research Department. (2023). Number of Internet of Things (IoT) connected devices worldwide from 2019 to 2023, with forecasts from 2022 to 2030. Statista.
- Supangat, S., Amna, A. R., & Rochman, M. Y. F. (2025). Penetration testing and vulnerability analysis of SINTA platform to strengthen privacy and data protection. Journal of Information Technology and Cyber Security, 3(2), 79–83. https://doi.org/10.30996/jitcs.12216
- Utomo, I. C. (2024). Evaluasi kerentanan keamanan pada perangkat IoT: Studi kasus pada smart home. The Indonesian Journal of Computer Science, 13(3). https://doi.org/10.33022/ijcs.v13i3.3994
This work is licensed under a Creative Commons Attribution 4.0 International License.
This work is licensed under a Creative Commons Attribution 4.0 International License (CC BY 4.0), which permits unrestricted use, distribution, and reproduction in any medium, provided the original work is properly cited.