Studi Tentang Teknik Phishing dan Strategi Pencegahannya dalam Sistem Informasi
DOI:
https://doi.org/10.31004/joecy.v5i2.2141Keywords:
Phising, Keamanan informasi, Sistem informasi, Literatur, PencegahanAbstract
Penelitian ini bertujuan untuk menganalisis teknik serangan phishing dan merumuskan strategi pencegahannya dalam sistem informasi. Kajian ini disusun dengan pendekatan studi literatur terhadap berbagai publikasi ilmiah terkini yang relevan, menggunakan metode deskriptif-kualitatif. Data diperoleh dari jurnal internasional, buku, dan laporan teknis yang membahas topik phishing dan keamanan informasi. Hasil penelitian menunjukkan bahwa teknik phishing telah berevolusi dalam berbagai bentuk seperti email phishing, spear phishing, vishing, hingga pharming. Setiap teknik memiliki karakteristik yang berbeda namun sama-sama bertujuan mengecoh korban untuk memberikan informasi sensitif. Strategi pencegahan yang ditemukan mencakup aspek teknis seperti penggunaan filter spam, autentikasi dua faktor, dan pemantauan sistem, serta aspek non-teknis seperti edukasi keamanan dan pelatihan pengguna secara berkala. Studi ini menyimpulkan bahwa pencegahan phishing yang efektif membutuhkan sinergi antara teknologi keamanan, budaya sadar siber, dan kebijakan internal yang jelas. Diharapkan hasil kajian ini dapat memberikan kontribusi dalam penguatan sistem keamanan informasi, serta menjadi acuan dalam upaya mitigasi ancaman phishing di lingkungan organisasi maupun pengguna individu.
References
B.Gupta, A. Tewari, A. Jain, and D. Nayak, “Fighting Phishing: A Literature Survey,” IEEE Communications Surveys & Tutorials, vol. 15, no. 4, pp. 1–20, 2018, doi: 10.1109/COMST.2017.2652320.
A. Arshad, M. Raza, A. Khan, and T. Shah, “A Systematic Literature Review on Phishing and Anti-Phishing Techniques,” Journal of Computer Security, vol. 29, no. 2, pp. 235–254, 2021. [Online]. Available: https://www.researchgate.net/publication/350512990
M. Chiew, C. S. Yong, and C. H. Tan, “A Recent Review of Phishing Attack and Countermeasures,” Information Security Journal: A Global Perspective, vol. 29, no. 1, pp. 1–14, 2020, doi: 10.1080/19393555.2019.1705240.
J. Hong, “The State of Phishing Attacks,” Communications of the ACM, vol. 62, no. 1, pp. 82–89, 2019, doi: 10.1145/3336143.
APWG, “Phishing Activity Trends Report – Q4 2023,” Anti-Phishing Working Group, 2023. [Online]. Available: https://docs.apwg.org/reports/apwg_trends_report_q4_2023.pdf
S. Y. Yerima, M. K. Alzaylaee, and I. B. Abdurrahman, “Phishing Email Detection Using Deep Learning Techniques,” arXiv preprint, arXiv:2004.03960, 2020. [Online]. Available: https://arxiv.org/abs/2004.03960
S. Sheng, B. Magnien, and L. F. Cranor, “Who Falls for Phish? A Demographic Analysis of Phishing Susceptibility and Effectiveness of Interventions,” IEEE Security & Privacy, vol. 10, no. 1, pp. 72–78, 2021, doi: 10.1109/MSP.2011.34.
N. A. G. Arachchilage and S. Love, “Security Awareness and Education: A User-Centric Approach to Phishing Prevention,” Computers & Security, vol. 70, pp. 663–676, 2020, doi: 10.1016/j.cose.2017.07.005.
J. Sahoo, S. Sahu, and K. K. Roul, “Phishing Detection: A Review of Machine Learning Techniques,” in Proceedings of the International Conference on Cyber Security and Emerging Technologies, Springer, 2021, pp. 55–64, doi: 10.1007/978-981-15-8874-9_6.
S. Chanti and T. Chithralekha, “Classification of Anti-Phishing Solutions,” SN Computer Science, vol. 1, no. 4, pp. 1–12, 2020, doi: 10.1007/s42979-020-00241-7.
R. Kumar, “Cybersecurity: Issues and Challenges,” International Journal of Computer Science and Information Technology, vol. 9, no. 2, pp. 50–57, 2018. [Online]. Available: http://www.ijcsit.com/docs/Volume%209/vol9issue2/ijcsit2018090205.pdf
A. A. Salloum, D. Abdo, and S. Z. Mansour, “Phishing Email Detection Using Natural Language Processing Techniques: A Systematic Review,” Salford Repository, 2022. [Online]. Available: https://salford-repository.worktribe.com/previewfile/1562817
D. Rao and D. R. Sahu, “Machine Learning Models for Phishing Detection: Review and Future Directions,” Journal of Cybersecurity Research, vol. 5, no. 1, pp. 34–45, 2020.M. Butavicius, N. Parsons, and K. Lillie, “Understanding Human Vulnerabilities to Phishing,” Behaviour & Information Technology, vol. 39, no. 8, pp. 863–876, 2020, doi: 10.1080/0144929X.2020.1724057.
P. Steinmetz, M. McBride, and C. Wong, “A Framework for Organizational Phishing Mitigation Strategies,” IEEE Access, vol. 10, pp. 12862–12874, 2022, doi: 10.1109/ACCESS.2022.3147952.
Downloads
Published
How to Cite
Issue
Section
License
Copyright (c) 2025 Yusuf Yusuf, Mahesa Tejha Ananda, Fadri Defrison, Jerri Erianto Silitonga
This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.
