RANCANG BANGUN DAN EVALUASI EFEKTIVITAS SURICATA DENGAN GRAFANA PADA DATA CENTER INTERNAL PTIPD

Mochammad Cah Anugrah Gusti, NIM.: 22106050006 (2026) RANCANG BANGUN DAN EVALUASI EFEKTIVITAS SURICATA DENGAN GRAFANA PADA DATA CENTER INTERNAL PTIPD. Skripsi thesis, UIN SUNAN KALIJAGA YOGYAKARTA.

Preview	Text (RANCANG BANGUN DAN EVALUASI EFEKTIVITAS SURICATA DENGAN GRAFANA PADA DATA CENTER INTERNAL PTIPD) 22106050006_BAB-I_IV-atau-V_DAFTAR-PUSTAKA.pdf - Published Version Download (6MB) | Preview
	Text (RANCANG BANGUN DAN EVALUASI EFEKTIVITAS SURICATA DENGAN GRAFANA PADA DATA CENTER INTERNAL PTIPD) 22106050006_BAB-II_sampai_SEBELUM-BAB-TERAKHIR.pdf - Published Version Restricted to Registered users only Download (18MB) | Request a copy

Abstract

PTIPD UIN Sunan Kalijaga network faces application-layer (Layer 7) security blindspots due to limited Deep Packet Inspection (DPI) on commercial edge firewalls and a lack of visibility into Inter-VLAN lateral movement (East-West traffic). This study designs and implements a Suricata-based Intrusion Detection System (IDS) integrated with a resourceefficient Promtail, Loki, and Grafana (PLG) observability stack using a staged two-Virtual Machine architecture. The methodology integrates the Network Development Life Cycle (NDLC), the Penetration Testing Execution Standard (PTES), and the MITRE ATT&CK framework. Simulations were executed in an isolated Docker Bridge Network, while realworld traffic was monitored via the ENS interface reading Core Switch syslog. System effectiveness was evaluated using a Confusion Matrix against 17 data points over four testing days. Controlled testing demonstrated 100% Precision, Recall, and Accuracy across 16 True Positive sessions, with zero False Positives or False Negatives. The developed Custom Rules contributed to 62.5% of total detections, enabling exclusive detection of lateral movement patterns uncovered by public rulesets.

Share this knowledge with your friends :

Actions (login required)

View Item