Dataset GOOGLE DORKING DAN RISIKO KEBOCORAN DATA: STUDI KEAMANAN WEBSITE PEMERINTAHAN DI INDONESIA

Overview

This dataset is part of a cybersecurity case study focused on Indonesian government websites (domain .go.id) and their potential exposure to data leakage through Google Dorking.The study evaluates passive reconnaissance results, risk severity, and common misconfigurations that may lead to unintended public indexing of sensitive information.

Files Included

1. Daftar Objek Analisis Website Pemerintahan.xlsxContains a list of Indonesian government institutions selected as analysis objects, including ministry, provincial, and regency-level websites.

2. Daftar Query Google Dork.xlsxA curated collection of Google Dork queries used to simulate passive reconnaissance and identify potential data exposure.

3. Dataset Analisis Kerentanan Lokal.xlsxAssessment results showing which queries triggered exposure ("hits") on each government website, including risk scores and severity levels.

4. Parameter Penilaian Risiko.xlsxDefines the scoring method and criteria used to categorize severity levels (Low, Medium, High, Critical), based on impact and likelihood.

5. Bar Chart Hasil Analisis Kerentanan.pngA bar chart visualizing the distribution of detected vulnerabilities across all analyzed government websites.

Key Features

Ethical OSINT approachAll information was collected using passive, publicly accessible search engine indexing—no probing, scanning, or active exploitation was performed.

Government-focused security insightHighlights recurring exposure patterns in Indonesian public sector websites, such as open directories, publicly accessible documents, and misconfigured indexing rules.

Structured risk mappingEach Google Dork query is mapped to a specific Risk Code (R1–R15), enabling cross-site comparison and aggregated severity scoring.

Quantitative scoring modelRisk levels are assigned using a custom matrix combining:

Impact score

Likelihood score

Exposure count

Examples: R3 = 12, R11 = 20, R14 = 24.

Practical visualizationIncludes a visual summary (bar chart) to simplify understanding of exposure patterns and severity distribution.

Ethical Considerations

No real exploitation was conducted; only publicly indexed data was accessed via search engines.

No sensitive or personal data is revealed; any sensitive findings were recorded only as risk codes.

The dataset is intended to promote awareness and improve security hygiene within government institutions.

The study follows a responsible disclosure mindset, aiming to encourage systemic improvements in public-facing digital infrastructure.

Suggested Use Cases

Academic research in public-sector cybersecurity

Teaching materials for OSINT, digital security, and ethical hacking

Risk modeling exercises or comparative vulnerability studies

Policy analysis related to government IT governance and data exposure

Benchmarking for improving website security and indexing management