IMPLEMENTASI DAN ANALISIS PENGGUNAAN OPEN SOURCE HIDS SECURITY (OSSEC) DAN SISTEM PEMBLOKIRAN IKLAN UNTUK KEAMANAN JARINGAN PADA RUMAH BERBASIS RASPBERRY PI

Salsa Amalia Putri, Didin Wahyudin¹

1. ¹ Universitas Pendidikan Indonesia

Repository at Universitas Pendidikan Indonesia (Universitas Pendidikan Indonesia), 2026

Penetrasi internet di Indonesia mencapai 78,19%, dengan mayoritas akses dilakukan melalui Wi-Fi rumah dan data seluler. Peningkatan ini disertai ancaman siber berupa peretasan, pencurian data, dan phishing yang berdampak pada 7,96% pengguna, serta risiko malvertising pada iklan situs web. Penelitian ini mengimplementasikan sistem keamanan jaringan praktis menggunakan OSSEC dan Pi-hole berbasis Raspberry Pi untuk lingkup rumah tangga. Untuk mengetahui kinerja dan keandalan sistem tersebut, evaluasi dilakukan melalui skenario serangan kata sandi (brute force), denial of service (flood), reconnaissance (port scanning), serta uji akses situs beriklan dan pemeriksaan domain menggunakan nslookup. Hasil evaluasi membuktikan bahwa sistem terpadu OSSEC dan Pi-hole berbasis Raspberry Pi memiliki efektivitas mitigasi yang handal dengan beberapa catatan performa. OSSEC terbukti akurat mendeteksi dan mengeksekusi pemblokiran terhadap serangan brute force, flood, dan port scanning tanpa menghabiskan sumber daya Raspberry Pi. Meskipun demikian, terdapat celah keterlambatan respons pada protokol SMB (baru memblokir pada kegagalan ke-8 dari aturan ke-6), kebocoran status port awal pada pemindaian port akibat jeda pemrosesan log, serta status Request Time Out (RTO) pada host korban selama serangan flood berlangsung akibat habisnya antrean data. Di sisi lain, Pi-hole konsisten bekerja secara efektif memblokir kueri domain terlarang dengan konsumsi CPU dan RAM server yang tetap berada di rentang aman dan stabil meskipun diintegrasikan bersama OSSEC. Internet penetration in Indonesia reached 78.19% in 2023, with the majority of access occurring via home Wi-Fi and mobile data. This increase is accompanied by cyber threats such as hacking, personal data theft, and phishing affecting 7.96% of users, alongside malvertising risks in website advertisements. This study implements a practical network security system using OSSEC and Pi hole based on Raspberry Pi for household environments. To assess the system's performance and reliability, evaluation is conducted through password attack (brute force), denial of service (flood), and reconnaissance (port scanning) scenarios, as well as ad-site access tests and domain verification using nslookup. The evaluation results demonstrate that the integrated OSSEC and Pi-hole system based on Raspberry Pi provides reliable mitigation effectiveness with several performance notes. OSSEC is proven accurate in detecting and executing blocks against brute force, flood, and port scanning attacks without exhausting Raspberry Pi resources. However, there is a response delay gap on the SMB protocol (blocking only on the 8th failure instead of the 6th rule threshold), initial port status leakage during port scanning due to log processing latency, and a Request Time Out (RTO) status on the victim host during flood attacks due to queue saturation. On the other hand, Pi-hole consistently operates effectively in blocking prohibited domain queries, maintaining CPU and RAM consumption within safe and stable limits despite integration with OSSEC.