Teler Real-time HTTP Intrusion Detection at Website with Nginx Web Server

Tedyyana, Agus; Ghazali, Osman

doi:10.30630/joiv.5.3.510

Cited by 4 publications

(2 citation statements)

References 14 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Serangan cyber adalah eksploitasi yang disengaja terhadap sistem komputer, jaringan dan perusahaan yang bergantung pada teknologi, penyerang menggunakan kode berbahaya untuk mengubah kode komputer, logika atau data yang dihasilkan dalam konsekuensi destruktif, yang dapat membahayakan keamanan informasi [2]. Saat ini, serangan cyber mengincar pengguna rumahan, bisnis, organisasi pemerintah, dan lain-lain, dalam banyak kasus, bahkan penundaan kecil dalam mendeteksi dan mencegah aktivitas jahat dapat menimbulkan kerusakan besar pada sistem yang dilindungi atau memungkinkan penjahat siber untuk mengakses data rahasia tanpa izin, serangan-serangan ini ditujukan untuk merusak integritas sistem-sistem ini, mencuri informasi, dan dalam beberapa kasus menyebabkan kerusakan pada sistem sehingga membuat sistem tidak dapat digunakan[3] [4].…”

Section: Pendahuluanunclassified

Penerapan Sistem Keamanan Jaringan Menggunakan Intrusion Prevention System Berbasis Suricata

Rivaldi,

Marpaung

2023

ISI

View full text Add to dashboard Cite

Abstrack -In an increasingly interconnected digital era, network security has become critically important. Network security involves efforts to protect data and computer systems from potential detrimental threats, such as cyber attacks, malware, and data theft. The presence of increasingly complex and evolving threats has raised awareness of the need for robust network security. Network security is of utmost importance in the rapidly evolving digital environment. With the growing threats to data and computer systems, strong network security is a necessity. One way to enhance it is by utilizing an Intrusion Prevention System (IPS). An IPS is a type of software and hardware network security device that monitors unwanted activities that can disrupt network connectivity. IPS can take immediate action to prevent such activities. Suricata is a highly effective intrusion detection and prevention software used to monitor network traffic in an effort to detect and prevent potentially harmful attacks. Suricata can be configured according to specific organizational needs, including the use of customized rules and additional features such as anomaly monitoring and integration with other security tools. Suricata IPS successfully detects and blocks incoming network attacks.

show abstract

Section: Pendahuluanunclassified

Penerapan Sistem Keamanan Jaringan Menggunakan Intrusion Prevention System Berbasis Suricata

Rivaldi,

Marpaung

2023

ISI

View full text Add to dashboard Cite

show abstract

“…Compared to many cyber-attacks, the number of public complaints regarding incidents that occur is relatively minimal; cyber-attacks spiked sharply in September, October and decreased sharply in November. In November and December, this figure is still much higher than the first six months of 2019 [4]. The fact that is happening today, fraud is a type of digital crime that often occurs compared to physical fraud.…”

Section: Introductionmentioning

confidence: 95%

Threat modeling in application security planning citizen service complaints

Tedyyana¹,

Ratnawati²,

Syam³

2022

IJEECS

Self Cite

View full text Add to dashboard Cite

The mobile-based service complaint application is one way to implement good governance today. Public facilitated to make complaints without going through a complicated process. Security aspects must be considered to protect user privacy. The security design must be considered so that no one is harmed by the application's users damaged in the application's use. This study used threat modeling during the planning stage of developing a citizen service complaint application to obtain information about vulnerabilities. The researcher uses the threat modeling process that the open web application security project (OWASP) organization has formulated as a framework. The researchers took steps to describe application information, determine and rank threats, countermeasures, and mitigation. In the final stage, the spoofing, tampering, repudiation, information disclosure, denial of service and elevation of privilege (STRIDE) threat modeling methodology is used to analyze and assess mitigation actions against threats in the application. The researcher gets a defense strategy to reduce the danger based on the threat analysis results. Threat modeling in the early phase software development life cycle process is constructive in ensuring that software is developed with adequate security based on threat mitigation from the beginning.

show abstract