Institutional Repository UIN Sunan Kalijaga YogyakartaIMPLEMENTASI WEB APPLICATION FIREWALL BERBASIS CORAZA PADA INFRASTRUKTUR SERVER WEBNIM.: 22106050022Muhammad Alkautsar Fathur RohimauthorInstitusi pendidikan tinggi saat ini menghadapi ancaman siber Layer 7 yang rentan, seperti SQL Injection (SQLi) dan Cross-Site Scripting (XSS). Mahalnya lisensi WAF komersial mendorong kebutuhan akan solusi open-source yang andal. Penelitian ini mengimplementasikan Coraza Web Application Firewall (WAF) dan ELK Stack (Elasticsearch, Logstash, Kibana) pada peladen UIN Sunan Kalijaga menggunakan metode Network Development Life Cycle (NDLC). Infrastruktur sistem ini dibangun di atas lingkungan Docker dengan Caddy Server yang berperan sebagai reverse proxy. Hasil pengujian menggunakan OWASP ZAP menunjukkan bahwa Coraza WAF dalam mode blokir secara efektif memutus trafik serangan SQLi dan XSS sebelum mencapai peladen backend. Di sisi lain, integrasi ELK Stack terbukti mempermudah analisis forensik digital melalui pemantauan dasbor log yang komprehensif secara real-time. Kendala operasional pada akses pengguna sah akibat keamanan yang ketat (False Positive dan masalah Mixed Content) juga berhasil diatasi melalui penyesuaian aturan (Rule Tuning) dan penerapan Content Security Policy. Sistem ini berhasil membuktikan keseimbangan yang optimal antara keamanan infrastruktur dan ketersediaan layanan. Kata Kunci: Web Application Firewall, Coraza, ELK Stack, Keamanan Siber, SQL Injection, Cross-Site Scripting.Tehnik Informatika2026-06-04UIN SUNAN KALIJAGA YOGYAKARTA;FAKULTAS SAINS DAN TEKNOLOGIThesis

For work being deposited by its own author: In self-archiving this collection of files and associated bibliographic metadata, I grant Institutional Repository UIN Sunan Kalijaga Yogyakarta the right to store them and to make them permanently available publicly for free on-line. I declare that this material is my own intellectual property and I understand that Institutional Repository UIN Sunan Kalijaga Yogyakarta does not assume any responsibility if there is any breach of copyright in distributing these files or metadata. (All authors are urged to prominently assert their copyright on the title page of their work.)

For work being deposited by someone other than its author: I hereby declare that the collection of files and associated bibliographic metadata that I am archiving at Institutional Repository UIN Sunan Kalijaga Yogyakarta) is in the public domain. If this is not the case, I accept full responsibility for any breach of copyright that distributing these files or metadata may entail.

Clicking on the deposit button indicates your agreement to these terms.