Bayu Erik Wibisono, . (2026) PERANCANGAN SECURITY ORCHESTRATION, AUTOMATION, AND RESPONSE UNTUK RESPONS INSIDEN SEMI-OTOMATIS (STUDI KASUS: UPA TIK UPN VETERAN JAKARTA). Skripsi thesis, Universitas Pembangunan Nasional Veteran Jakarta.
|
Text
ABSTRAK.pdf Download (101kB) |
|
|
Text
AWAL.pdf Download (765kB) |
|
|
Text
BAB 1.pdf Restricted to Repository UPNVJ Only Download (734kB) |
|
|
Text
BAB 2.pdf Restricted to Repository UPNVJ Only Download (699kB) |
|
|
Text
BAB 3.pdf Restricted to Repository UPNVJ Only Download (324kB) |
|
|
Text
BAB 4.pdf Restricted to Repository UPNVJ Only Download (7MB) |
|
|
Text
BAB 5.pdf Download (117kB) |
|
|
Text
DAFTAR PUSTAKA.pdf Download (147kB) |
|
|
Text
RIWAYAT HIDUP.pdf Restricted to Repository UPNVJ Only Download (112kB) |
|
|
Text
LAMPIRAN.pdf Restricted to Repository UPNVJ Only Download (989kB) |
|
|
Text
HASIL PLAGIARISME.pdf Restricted to Repository staff only Download (27MB) |
|
|
Text
ARTIKEL KI.pdf Restricted to Repository staff only Download (519kB) |
Abstract
The increasing complexity of cyberattacks demands an integrated system capable of rapid detection and response. This study designs a semi-automated Security Orchestration, Automation, and Response (SOAR) system by utilizing Wazuh as Security Information and Event Management (SIEM), MISP as Threat Intelligence, IRIS for incident management, and Shuffle as SOAR. The system is also equipped with Google Chat notifications for early warnings and system control. Testing was conducted against web application attacks such as SQL Injection, File Inclusion, and malware detection. The results show that Wazuh successfully detected the tested attacks. The performance metrics show a Mean Time to Detect (MTTD) of 6.66 seconds, a Mean Time to Acknowledge (MTTA) of 18 seconds, and a Mean Time to Respond (MTTR) of 10 seconds, with each workflow executed in under 35 seconds, demonstrating a fast detection and response process. Overall, the implemented SOAR system enhances security visibility, response automation, and the effectiveness of incident handling.
| Item Type: | Thesis (Skripsi) |
|---|---|
| Additional Information: | [No.Panggil: 2010511056] [Pembimbing 1: Henki Bayu Seta, S.Kom, M.TI.] [Pembimbing 2: Hamonangan Kinantan Prabu, S.T, M.T.] [Penguji 1: Dr. Ridwan Raafi'Udin, S.Kom., M.Kom.] [Penguji 2: Nurhuda Maulana, S.T., M.T.] |
| Uncontrolled Keywords: | SOAR, SIEM, CTI, Semi-Automation, IR |
| Subjects: | Q Science > QA Mathematics > QA75 Electronic computers. Computer science |
| Divisions: | Fakultas Ilmu Komputer > Program Studi Informatika (S1) |
| Depositing User: | BAYU ERIK WIBISONO |
| Date Deposited: | 17 Mar 2026 02:18 |
| Last Modified: | 17 Mar 2026 02:18 |
| URI: | http://repository.upnvj.ac.id/id/eprint/42299 |
Actions (login required)
![]() |
View Item |
