Analisis Keamanan Aplikasi Mobile Sistem Informasi Panen Sawit Menggunakan Mobile Security Framework

The security of mobile applications has become a critical aspect due to the increasing use of Android-based applications that manage operational data. The Palm Harvest Information System is a mobile application developed to support the recording and management of palm oil harvest data; however, a comprehensive security evaluation had not been conducted prior to its deployment in an operational environment. This study aims to analyze the security of the application using the Mobile Security Framework (MobSF) through static and dynamic analysis approaches. Static analysis was used to identify structural vulnerabilities without executing the application, while dynamic analysis was conducted to observe runtime behavior and interactions with the backend API. The initial static analysis indicated that the application was categorized as Medium Risk with an App Security Score of 43/100. After five stages of security improvements validated through six scanning iterations, the security score increased to 67/100, placing the application in the Low Risk category. Dynamic analysis showed that the client-side application was relatively secure, as evidenced by encrypted HTTPS communication and normal runtime behavior. However, weaknesses were identified on the backend side, where several API endpoints were accessible without authentication and access validation, potentially leading to Broken Access Control and Insecure Direct Object Reference (IDOR) vulnerabilities. These findings indicate that although static improvements enhance structural security, strengthening backend security remains essential to ensure comprehensive application security.