Security Assessment for Digital Wallet Payment Partner Applications using the OWASP Method: A Case Study in Indonesia

This study presents a security assessment of a digital wallet payment partner mobile application using the Open Web Application Security Project (OWASP) framework.A qualitative method approach for data retrieval involves conducting interviews and observing test results following the OWASP Mobile Application Security Testing Guide (MASTG) and the OWASP Mobile Application Security Verification Standard (MASVS) verification standard.Based on observations from penetration testing using both Static (SAST) and dynamic (DAST) analysis methods, six vulnerabilities were identified out of 84 MASVS test cases, with 10 being deemed not applicable.Vulnerabilities were evaluated using the OWASP Risk Rating Methodology, resulting in a moderate likelihood rating of 5.01 and a moderate impact rating of 4.26.The overall risk matrix rating is assessed as moderate.The proposed solution aims to mitigate the identified vulnerabilities and enhance application security against potential attacks.This study showcases the effectiveness of the OWASP methodology for conducting a comprehensive assessment of mobile application security risks.