ANALISIS LOG SISTEM PADA SECURITY INFORMATION AND EVENT MANAGEMENT (SIEM) UNTUK MENDETEKSI SERANGAN BRUTE FORCE

• Main Author: Caleb Sebastian, (Author)
• Format: Book
• Published: 2024-01-22.
• Subjects: Thesis; NonPeerReviewed
• Online Access: Link Metadata

Summary

Brute-force attacks are a common type of cyber attack that target SSH and RDP protocols. These attacks can cause significant damage to organizations. One solution for detecting brute-force attacks is to use Security Information and Event Management (SIEM). SIEM can monitor login activity and identify suspicious patterns. This study uses Wazuh, a popular open-source SIEM platform, to detect brute-force attacks targeting SSH and RDP protocols. The results of the study show that Wazuh can detect brute-force attacks effectively. Wazuh can block IP addresses that attempt to log in with the wrong password repeatedly. This study provides valuable information for organizations in their efforts to improve their security against brute-force attacks. Organizations can use SIEM, such as Wazuh, to detect brute-force attacks and provide a timely response.

Item Description

http://repository.upnvj.ac.id/29208/1/ABSTRAK.pdf
http://repository.upnvj.ac.id/29208/2/AWAL.pdf
http://repository.upnvj.ac.id/29208/3/BAB%201.pdf
http://repository.upnvj.ac.id/29208/4/BAB%202.pdf
http://repository.upnvj.ac.id/29208/5/BAB%203.pdf
http://repository.upnvj.ac.id/29208/6/BAB%204.pdf
http://repository.upnvj.ac.id/29208/7/BAB%205.pdf
http://repository.upnvj.ac.id/29208/8/DAFTAR%20PUSTAKA.pdf
http://repository.upnvj.ac.id/29208/9/RIWAYAT%20HIDUP.pdf
http://repository.upnvj.ac.id/29208/10/LAMPIRAN.pdf
http://repository.upnvj.ac.id/29208/11/HASIL%20PLAGIARISME.pdf
http://repository.upnvj.ac.id/29208/12/ARTIKEL%20KI.pdf