Deteksi Dini Serangan Siber Pada Sistem Informasi Akademik Berbasis Web Menggunakan Wazuh

Advances in information technology have led to the increasing use of web-based information systems in education, including academic information systems. However, web-based systems are vulnerable to various types of cyber attacks, such as denial of service (DoS), brute force, and SQL injection. Therefore, a detection system is needed that can monitor system activity on a regular basis and provide warnings of potential security threats. This study aims to implement an early detection system for cyber attacks on the website of the Department of Informatics Engineering, Bengkalis State Polytechnic, using the Wazuh Security platform integrated with a custom SIEM dashboard and Telegram notifications. The research method used was to simulate several types of attacks on the website server that had been installed with Wazuh Agent. The results of the study show that the Wazuh system is capable of detecting various types of attacks, including DoS, brute force, and SQL injection attacks. Each attack activity successfully generated an alert that was recorded on Wazuh Manager, displayed on the Custom SIEM dashboard, and automatically sent via Telegram notification. This shows that research results indicate that the early detection system using Wazuh has proven capable of identifying attacks and is integrated, thereby assisting administrators in taking early preventive measures against potential system security threats.