Evaluating Security Criteria for Web-Based Applications Higher Institute of Science and Technology, Ragdalin Portal as a case study

The security of a system is a critical issue that cannot be overlooked, no matter how well-designed the system may initially appear. This is because security involves protecting an organization's assets, which can range from tangible items like web pages and customer databases to intangible aspects such as the company's reputation. Given that security is a fundamental requirement, it is essential for organizations to incorporate security elements into their systems. A common system within organizations is the web-based application, which not only offers reliable services to users—both potential and existing customers—but also helps safeguard the organization's reputation and ensures the continuity of future business engagements. Currently, evaluations of web-based applications primarily focus on aspects such as usability, user satisfaction, and user acceptance, often neglecting the security evaluation aspect. This paper will discuss the criteria needed to evaluate web-based applications from a security perspective. The proposed criteria will be applied in evaluating the Higher Institute of Science and Technology, Ragdalin Portal, as a case study in which a website designer was interviewed and asked questions related to the proposed criteria to identify the security vulnerabilities of web-based applications. This research paper will include an analysis based on this evaluation, with the hope that these evaluations can be used to develop better security practices for both the Higher Institute of Science and Technology Ragdalin portal and web applications in general in the future. Keywords: Web-based application, Higher Institute of Science and Technology, Ragdalin Portal, Security evaluation.