Perancangan Sistem Informasi Website Desa Untuk Pelayanan Surat-Menyurat Dengan Pendekatan Secure Software Development Life Cycle (Ssdlc) (Studi Kasus : Desa Teluk Lancar)

Administrative correspondence services are one of the primary public services provided by village governments to the community. In Teluk Lancar Village, the correspondence service process is still carried out manually, resulting in several problems, including service delays, data recording errors, difficulties for citizens in tracking the status of submitted requests, and potential risks to data security. This study aims to design and implement a web-based correspondence service information system by applying the Secure Software Development Life Cycle (SSDLC) approach. The implementation of SSDLC focuses on the Secure Design, Secure Coding, and Security Testing phases. Secure Design applies Role-Based Access Control (RBAC) to manage user access rights, while Secure Coding is implemented through input validation, access restriction, and page protection. Security Testing is conducted using OWASP ZAP to identify potential security vulnerabilities. The results show that the system was successfully implemented with an RBAC mechanism that effectively restricts user access according to their roles. Security testing identified vulnerabilities categorized as High, Medium, Low, and Informational risk levels, providing a basis for improving the system's security in future development.