Institutional Repository UIN Sunan Kalijaga YogyakartaRANCANG BANGUN DAN EVALUASI EFEKTIVITAS SURICATA DENGAN GRAFANA PADA DATA CENTER INTERNAL PTIPDNIM.: 22106050006Mochammad Cah Anugrah GustiauthorPTIPD UIN Sunan Kalijaga network faces application-layer (Layer 7) security blindspots due to limited Deep Packet Inspection (DPI) on commercial edge firewalls and a lack of visibility into Inter-VLAN lateral movement (East-West traffic). This study designs and implements a Suricata-based Intrusion Detection System (IDS) integrated with a resourceefficient Promtail, Loki, and Grafana (PLG) observability stack using a staged two-Virtual Machine architecture. The methodology integrates the Network Development Life Cycle (NDLC), the Penetration Testing Execution Standard (PTES), and the MITRE ATT&CK framework. Simulations were executed in an isolated Docker Bridge Network, while realworld traffic was monitored via the ENS interface reading Core Switch syslog. System effectiveness was evaluated using a Confusion Matrix against 17 data points over four testing days. Controlled testing demonstrated 100% Precision, Recall, and Accuracy across 16 True Positive sessions, with zero False Positives or False Negatives. The developed Custom Rules contributed to 62.5% of total detections, enabling exclusive detection of lateral movement patterns uncovered by public rulesets.005.12 Software System Analysis and Design/Sistem Analisa dan Desain Perangkat Lunak2026-08-13UIN SUNAN KALIJAGA YOGYAKARTA;FAKULTAS SAINS DAN TEKNOLOGIThesis

For work being deposited by its own author: In self-archiving this collection of files and associated bibliographic metadata, I grant Institutional Repository UIN Sunan Kalijaga Yogyakarta the right to store them and to make them permanently available publicly for free on-line. I declare that this material is my own intellectual property and I understand that Institutional Repository UIN Sunan Kalijaga Yogyakarta does not assume any responsibility if there is any breach of copyright in distributing these files or metadata. (All authors are urged to prominently assert their copyright on the title page of their work.)

For work being deposited by someone other than its author: I hereby declare that the collection of files and associated bibliographic metadata that I am archiving at Institutional Repository UIN Sunan Kalijaga Yogyakarta) is in the public domain. If this is not the case, I accept full responsibility for any breach of copyright that distributing these files or metadata may entail.

Clicking on the deposit button indicates your agreement to these terms.