Mitigasi Ancaman Siber pada Aplikasi Web Melalui SIEM: Tinjauan Literatur Sistematis
DOI:
https://doi.org/10.58776/jriti.v4i1.238Kata Kunci:
Keamanan Siber, Aplikasi Web, Deteksi Anomali, Tinjauan LiteraturAbstrak
Web applications have become the backbone of the modern digital ecosystem, yet their openness makes them primary targets for cyberattacks that conventional defense mechanisms often fail to detect. This article presents a systematic literature review of 13 selected publications from the Scopus database from the 2020-2025 period to analyze the effectiveness of Security Information and Event Management (SIEM) in mitigating threats to web applications. The review identifies dominant attack categories including SQL Injection (SQLi), Cross-Site Scripting (XSS), and application-layer Denial of Service (DoS) attacks. Research demonstrates that a hybrid approach integrating SIEM with Web Application Firewalls (WAF) and the application of Machine Learning algorithms is proven to detect zero-day attack anomalies with accuracy rates reaching 97% to 100%. Furthermore, the use of open-source platforms such as Wazuh and ELK Stack enables centralized security visibility monitoring and significant reduction in incident response times. This article recommends the adoption of an integrated security architecture combining rule-based and behavioral log analysis to minimize false positive rates and build robust, adaptive web defenses.
Referensi
S. A. Chamkar, Y. Maleh, and N. Gherabi, “Security Operations Centers: Use Case Best Practices, Coverage, and Gap Analysis Based on MITRE Adversarial Tactics, Techniques, and Common Knowledge,” Journal of Cybersecurity and Privacy, vol. 4, no. 4, pp. 777–793, 2024, doi: 10.3390/jcp4040036.
I. Nugraha, “A Review on the Role of Modern SOC in Cybersecurity Operations,” International Journal of Current Science Research and Review, vol. 4, 2021, doi: 10.47191/ijcsrr/V4-i5-.
A. Reeves and D. Ashenden, “Understanding decision making in security operations centres: building the case for cyber deception technology,” Frontiers in Psychology, vol. 14, 2023, doi: 10.3389/fpsyg.2023.1165705.
“Human–AI Collaboration in Security Operations: Measuring Alert Trust, Automation Bias, and Analyst Upskilling in AI-Augmented SOC Environments,” IJCTEC, vol. 8, no. 5, pp. 11375–11380, Oct. 2025, doi: 10.15680/IJCTECE.2025.0805011.
M. Vielberth, F. Böhm, I. Fichtinger, and G. Pernul, “Security Operations Center: A Systematic Study and Open Challenges,” IEEE Access, vol. 8, pp. 227756–227779, 2020, doi: 10.1109/ACCESS.2020.3045514.
M. A. Sapura, D. Stiawan, and R. Budiarto, “Machine learning model approach in cyber attack threat detection in security operation center,” Computer Science and Information Technology, vol. 6, no. 1, pp. 80–90, Mar. 2025.
R. Bhavsar and V. Thakar, “Design and Implementation of an Open-Source Security Operations Center for Effective Cyber Threat Detection and Response,” 2025, doi: 10.21203/rs.3.rs-5795888/v1.
M. N. Zaidan, P. Sukarno, and A. A. Wardana, “Collaborative Detection of SQL Injection Attacks using SIEM, Multi-Wazuh Agents, and Diverse Web Application Firewalls,”in Proc. CIEES 2024 – IEEE International Conference on Communications, Information, Electronic and Energy Systems, IEEE, 2024, doi: 10.1109/CIEES62939.2024.10811420.
T. Suryantoro, B. D. P. Purnomosidi, and W. Andriyani, “The Analysis of Attacks Against Port 80 Webserver with SIEM Wazuh Using Detection and OSCAR Methods,” in Proc. 2022 International Seminar on Research of Information Technology and Intelligent Systems (ISRITI), 2022, pp. 1–6.
A. Yushko et al., “Shielding Web Application against Cyber-Attacks using SIEM,” Proc. International Conference on Advanced Computer Information Technologies (ACIT), pp. 393–396, 2023.
N. Tendikov et al., “Security Information Event Management data acquisition and analysis methods with machine learning principles,” Results in Engineering, vol. 22, 2024.
W. Ahmad and M. F. Amjad, “Anomaly Detection in HTTP Logs: Leveraging Machine Learning for Uncovering Anomalous Traffic Patterns with SIEM Integration,”in Proc. 2024 21st International Bhurban Conference on Applied Sciences and Technology (IBCAST 2024), IEEE, 2024, pp. 622–629, doi: 10.1109/IBCAST61650.2024.10877256.
R. U. Rahman, P. Kumar, G. P. Kachare, M. M. Gawde, T. Tsundue, and D. S. Tomar, “A novel machine learning-based artificial intelligence approach for log analysis using blockchain technology,” Sigma Journal of Engineering and Natural Sciences, vol. 42, no. 5, pp. 1391–1409, 2024.
T. Rahmawati, R. W. Shiddiq, M. R. Sumpena, S. Setiawan, N. Karna, and S. N. Hertiana, “Web Application Firewall Using Proxy and Security Information and Event Management (SIEM) for OWASP Cyber Attack Detection,”in Proc. 2023 IEEE International Conference on Internet of Things and Intelligence Systems (IoTaIS 2023), IEEE, 2023, pp. 280–285, doi: 10.1109/IoTaIS60147.2023.10346051.
Y. Muliono, M. Y. Darus, C. R. Pardomuan, M. A. M. Ariffin, and A. Kurniawan, “Predicting Confidentiality, Integrity, and Availability from SQL Injection Payload,”in Proc. 2022 International Conference on Information Management and Technology (ICIMTech 2022), IEEE, 2022, pp. 600–605, doi: 10.1109/ICIMTech55957.2022.9915227.
E. Tuyishime, T. C. Balan, P. A. Cotfas, D. T. Cotfas, and A. Rekeraho, “Enhancing Cloud Security—Proactive Threat Monitoring and Detection Using a SIEM-Based Approach,” Applied Sciences (Switzerland), vol. 13, no. 22, 2023.
R. Kaneko and T. Saito, “Detection of Cookie Bomb Attacks in Cloud Computing Environment Monitored by SIEM,” Journal of Advances in Information Technology, vol. 14, no. 2, pp. 193–203, 2023.
P. Muse, S. M. Shalinie, and H. Stanly, “Online Log Analysis (OLA) for Malicious User Activities,”in Proc. 2023 2nd International Conference on Paradigm Shifts in Communications Embedded Systems, Machine Learning and Signal Processing (PCEMS 2023), IEEE, 2023, doi: 10.1109/PCEMS58491.2023.10136101.
A. Esseghir, F. Kamoun, and O. Hraiech, “AKER: An open-source security platform integrating IDS and SIEM functions with encrypted traffic analytic capability,” Journal of Cyber Security Technology, vol. 6, no. 1–2, pp. 27–64, 2022.
H.-P. Nguyen, T.-N. Luong, T.-H. Dao, and N.-T. Truong, “An Approach to Prevent DDoS Attack Using Real-Time Access Logs Analysis,” Communications in Computer and Information Science, vol. 1863, pp. 92–105, 2023.
Unduhan
Diterbitkan
Versi
- 11-11-2026 (3)
- 11-11-2026 (2)
- 10-11-2026 (1)
Cara Mengutip
Terbitan
Bagian
Lisensi
Hak Cipta (c) 2026 Muhammad Nabel, Felix, Amta, Nesta, Arief
Artikel ini berlisensiCreative Commons Attribution-NonCommercial-ShareAlike 4.0 International License.
