Article Per Year (5 Year)
p-Index From 2021 - 2026
0.408
P-Index
This Author published in this journals
All Journal Sinkron : Jurnal dan Penelitian Teknik Informatika Jurnal Ilmiah Matrik
Delfin Christofa
Universitas Bina Darma
Computer Science & IT

Published : 2 Documents Claim Missing Document
Claim Missing Document
Check
Articles

Found 2 Documents
Search

 1 
Integrasi Wazuh File Integrity Monitoring Dan Suricata Dengan Notifikasi Telegram Untuk Keamanan Jaringan Suryayusra; Delfin Christofa
Jurnal Ilmiah Matrik Vol. 28 No. 1 (2026): Jurnal Ilmiah Matrik
Publisher : Direktorat Riset dan Pengabdian Pada Masyarakat (DRPM) Universitas Bina Darma

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.33557/99m23a40

Abstract

This study implemented an integrated security monitoring system using Wazuh File Integrity Monitoring (FIM), Suricata as a Network Intrusion Detection System (NIDS), and Telegram-based notifications to enhance network security. The research was conducted in a virtual laboratory environment using multiple Windows and Linux endpoints. Wazuh was utilized to monitor file integrity and system logs, while Suricata analyzed network traffic to detect intrusion attempts. All alerts generated by both systems were centralized in Wazuh and forwarded automatically to administrators through Telegram Bot API. Several attack simulations were performed, including brute-force login attempts across different operating systems and file modification scenarios. The results showed that Wazuh successfully detected unauthorized file changes in real time, while Suricata effectively identified suspicious network traffic based on predefined rule sets. The integration of Telegram notifications enabled rapid alert delivery, allowing administrators to respond promptly to security incidents. The findings demonstrate that combining host-based monitoring and network-based intrusion detection provides comprehensive visibility into security threats. This integrated approach is suitable for academic environments and can be extended to real-world implementations to improve incident detection and response efficiency.
Analysis of SIEM and NIDS Integration for Network Monitoring Suryayusra; Delfin Christofa; Ilman Zuhri Yadi; Rahmat Novrianda Dasmen
Sinkron : jurnal dan penelitian teknik informatika Vol. 10 No. 4 (2026): Research Articles October 2026
Publisher : Politeknik Ganesha Medan

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.33395/sinkron.v10i4.16680

Abstract

Network security monitoring is generally still carried out manually (dashboard-gazing), creating a time gap between the moment an incident is detected and the moment it is recognised and responded to by the administrator. This condition is aggravated by a Network Intrusion Detection System (NIDS) that works on its own, because its detection logs remain raw and unstructured, making them difficult to manage and analyse. This study proposes the integration of a Suricata-based NIDS with a Wazuh-based Security Information and Event Management (SIEM), on the grounds that Wazuh is able to manage and organise the raw Suricata logs into structured data while correlating them centrally. The integration was carried out by connecting the Suricata sensor to the Wazuh Server, so that the detection logs (eve.json), which were originally in raw JSON format, could be parsed into alerts with rule IDs and levels that are easy to analyse. Testing was conducted through the simulation of five attack scenarios (brute force, LFI, directory brute force, SQL injection, XSS) over 12 days, producing a correlation of 25,414 security logs covering all scenarios. The security readiness measurement using the KAMI Index v5.0 in the Technology Area shows that 5 of 35 criteria (14.3%) are directly fulfilled and 7 criteria (20%) are partially fulfilled. As an added value, all alerts resulting from the integration were forwarded through webhook-based Discord notifications without any delivery failure, shortening the time between a threat being detected and that threat becoming known to the administrator.
Co-Authors Ilman Zuhri Yadi Rahmat Novrianda D Suryayusra Suryayusra