Research & Systems Security
Explorations in application security, backend access control models, least privilege enforcement, and temporary just-in-time session mechanics.
Least Privilege Architecture
Constraining operational scopes beyond coarse role definitions. Ensuring operators only access specific data records tied to an active, assigned operational ticket.
Just-in-Time (JIT) Sessions
Eliminating permanent standing administrative privileges by granting temporary, time-bounded elevation sessions for high-risk backend modifications.
Deterministic Audit Logging
Immutable logging of access grants, elevations, and denied requests across all internal security boundaries to verify compliance under audit conditions.
Implementasi Mekanisme Least Privilege dan Just-in-Time Access pada Layer Kontrol Akses Pengguna Internal dalam Prototipe Sistem Dompet Digital
Backend architecture implementing contextual access restriction on digital wallet systems. Evaluates how traditional Role-Based Access Control (RBAC) can be extended using ticket-bound scoping and ephemeral Just-in-Time sessions to prevent insider data leakage and unauthorized modifications.
Empirical Findings: Evaluated against 19 concrete test scenarios encompassing Customer Support ticket validation, temporary Operational elevation, and unauthorized cross-account inspection.
Stack: Go · Gin Framework · MySQL · Docker