Security Analysis of Simpel Desa using Mobile Security Framework and ISO 27002:2013

The Personal Identification Number or KTP is prone to be stolen and used by unwanted parties, this also a possibility for the Simpel Desa, village administration application that contain use Number. This study aims detect information security vulnerabilities. analyze vulnerabilities in applications using MobSF ISO 27002:2013. penetration testing malware applications. In Desa analyzed two ways, namely static dynamic. 27002:2013 map findings of potential misuse so they get accurate analysis results. control domain 9 (access control) 10 (cryptography). results obtained found existence aspects cryptography permission access. dynamic Root Detection Debugger Check Bypass had not been implemented. Overall, based on has maximally recommendations given focus permissions access rights, user authentication, implementation security.