Security Analysis of Midtrans Payment Gateway API against DDoS Attack and Rate Limiting Technique Using Node.js
Abstract
The development of digital transaction services has led to the widespread use of APIs in payment systems, including payment gateway services such as Midtrans. However, the open access to APIs also increases the risk of cyber attacks, one of which is Distributed Denial of Service (DDoS) which can destabilize the system and reduce user confidence. This research aims to analyze the potential DDoS threats to the Midtrans API and explore the application of rate limiting techniques using Node.js as one of the mitigation measures. The methodology used is a waterfall approach, which includes requirements analysis, system design, implementation, testing, and evaluation. The test design is done through simulating DDoS attacks on API endpoints, both before and after the application of rate limiting, by measuring parameters such as the number of requests, response time, and request success rate. It is hoped that this research can provide a clear picture of the importance of API protection in digital payment systems, and produce a technical approach that can be used as a reference in developing a secure and reliable system. This research is also expected to make practical and theoretical contributions in the field of API security and digital service traffic management.
Article Discovery & Scholarly Lookup
DOIAuthor Biographies
St Ilmu Komputer Cipta Karya Informatika, East Jakarta City, Special Capital Region of Jakarta, Indonesia.
St Ilmu Komputer Cipta Karya Informatika, East Jakarta City, Special Capital Region of Jakarta, Indonesia.
How to Cite
License & Copyright
This work is licensed under a Creative Commons Attribution 4.0 International License.
This is an open-access journal. All articles are distributed under the terms of the Creative Commons Attribution 4.0 International License (CC BY 4.0), which permits unrestricted use, distribution, and reproduction in any medium, provided the original work is properly cited.
Creative Commons Attribution 4.0 International (CC BY 4.0)Under this license, you are free to:
- Share: copy, distribute, and transmit the work in any medium or format.
- Adapt: remix, transform, and build upon the work for any purpose, even commercially.
You must give appropriate credit, provide a link to the license, and indicate if changes were made. You may do so in any reasonable manner, but not in any way that suggests the licensor endorses you or your use.
Copyright and Retention Copyright & Retention Authors retain copyright without restrictions and grant this journal the right of first publication under an open-access model. The journal retains non-exclusive publishing rights for archiving, indexing, and scholarly dissemination.References
Total: 13 References- Aditya Putra Kejor, W. N. (2025). Efektivitas penggunaan Node JS dalam pembuatan REST API untuk aplikasi katastrofa. Prosiding Seminar Nasional Sains dan Teknologi Seri III, 2(1), 995-1008.
- Ahmad Rizky Ananda Purba, T. M. (2024). Aplikasi pemesanan layanan laundry pada Noda Laundry dengan integrasi Midtrans Payment Gateway, dikembangkan untuk platform Android. Jurnal Teknik Informatika Kaputama (JTIK), 8(1), 8-14.
- Alfian, P. S. (2020). Penerapan payment gateway pada aplikasi marketplace Waroeng Mahasiswa menggunakan Midtrans. Jurnal Informatika Universitas Pamulang, 5(3), 387-393.
- Budi Setiawan, B. S. (2023). Mengoptimalkan fungsi payment gateway Midtrans pada website coffee shop melalui penggunaan metode prototype pada proses pengembangan. Jurnal Riset Sains dan Teknologi, 7(2), 219-228.
- Diash Firdaus, I. S. (2024). Peningkatan keamanan server GraphQL terhadap serangan DDoS dengan tipe batch attack menggunakan metode rate limiting. CyberSecurity dan Forensik Digital, 7(2), 62-68.
Similar Articles
Explore related articles published in this journal.