Penerapan Hardening Server Linux untuk Meningkatkan Keamanan Sistem 433 532
DOI:
https://doi.org/10.26623/transformatika.v23i2.13776Kata Kunci:
Pengerasan Server, Keamanan Sistem, IoT, Firewall, SSHAbstrak
Server berbasis Linux banyak digunakan sebagai infrastruktur utama layanan jaringan, namun konfigurasi default sistem operasi masih menyisakan berbagai celah keamanan yang berpotensi dieksploitasi. Penelitian ini bertujuan untuk menerapkan dan menganalisis efektivitas hardening server Linux dalam meningkatkan keamanan sistem terhadap serangan jaringan. Penelitian dilakukan menggunakan Ubuntu Server 22.04 pada lingkungan virtual dengan pendekatan penetration testing terbatas. Metode hardening meliputi pembaruan sistem, konfigurasi Secure Shell (SSH), manajemen pengguna dan hak akses, penerapan firewall UFW, implementasi Fail2ban, serta monitoring log keamanan. Evaluasi keamanan dilakukan melalui pengujian port scanning menggunakan Nmap, simulasi serangan brute force SSH menggunakan THC-Hydra, dan analisis log sistem sebelum dan sesudah hardening. Hasil penelitian menunjukkan bahwa hardening mampu mengurangi jumlah port terbuka secara signifikan sehingga menurunkan eksposur kerentanan hingga 66,7%, menghentikan serangan brute force secara otomatis,serta meningkatkan efektivitas deteksi dan respons keamanan.
Unduhan
Referensi
[1] Ansar SH, Sadiq A, Ihsan U, Ashraf H, Somantri. Fortifying Linux Server and Implementing a Zero Trust Network Access (ZTNA) for Enhanced Security. Engineering Proceedings. 2025; 107(1): 99.
[2] Niu S, Mo J, Zhang Z, Lv Z. Overview of Linux vulnerabilities. International Conference on Soft Computing in Information Communication Technology (SCICT). 2014.
[3] Ayyoub B. Enhance Linux server security: common misconfigurations and vulnerabilities. International Journal of Secure Systems and Networks. 2022; 10(3): 45–59.
[4] Sri Hari Aravindan S. A Review of Linux System Hardening Techniques for Enterprise Security and Compliance. International Journal of Scientific Engineering and Research (IJSER). 2025; 13(10).
[5] Irawan B, Sheha KN, Rahaman M, Erzed N, Herwanto A. Evaluating the Effectiveness of Center for Internet Security (CIS) Benchmark for Hardening Ubuntu Server 22.04 Against Cyber Threats. International Journal of Scientific Research (IJSR). 2025; 14(6): doi: 10.55324/josr.v4i6.2544.
[6] Chen H, Han X, Zhang Y. Endogenous Security Formal Definition, Innovation Mechanisms, and Experiment Research in Industrial Internet. Tsinghua Science and Technology. 2023; 29(2): 492–505. doi: 10.26599/TST.2023.9010034.
[7] Almaiah MA, et al. Classification of Cybersecurity Threats, Vulnerabilities and Countermeasures in Database Systems. Computers, Materials & Continua. 2024; 77(3): 6845–6869. doi: 10.32604/cmc.2024.057673.
[8] Bhurtel S. Unveiling the Landscape of Operating System Vulnerabilities. Future Internet. 2023; 15(7): 248.
[9] Alhamed M, Albahrani I, et al. A Systematic Literature Review on Penetration Testing in Networks. Applied Sciences. 2023; 13(12): 6986. doi: 10.3390/app13126986.
[10] Alhamed M, Albahrani I, et al. A Systematic Literature Review on Penetration Testing in Networks. Applied Sciences. 2023; 13(12): 6986. doi: 10.3390/app13126986.
[11] Abu Bakar R, Kijsirikul B. Enhancing Network Visibility and Security with Advanced Port Scanning Techniques. Sensors. 2023; 23(17): art. 7541. doi: 10.3390/s23177541.
[12] Park J, Yim K, Choi S, Kim G, Lee Y. Network Log-Based SSH Brute-Force Attack Detection Model. Journal of Network and Computer Applications. 2021; 186: 103063.
[13] Ruambo FA, Ruambo MM, Dandalo DT, Makwembere K. Brute-force attack mitigation on remote access services via a zero-trust-aligned software-defined perimeter. Scientific Reports. 2025; 15: art. no. 10805. doi: 10.1038/s41598-025-01080-5.
[14] Landauer M, Onder S, Skopik F, Wurzenberger M. Deep learning for anomaly detection in log data: A survey. Machine Learning with Applications. 2023; 13: 100470. doi: 10.1016/j.mlwa.2023.100470.
[15] Park J, Kim JS, Gupta BB, Park N. Network Log-Based SSH Brute-Force Attack Detection Model. Computers, Materials & Continua. 2021; 68(1): 888–901. doi: 10.32604/cmc.2021.015172.6
[16] Bangare PS, Patil KP. Enhancing MQTT security for Internet of Things: Lightweight two-way authorization and authentication with advanced security measures. Measurement: Sensors. 2024; 78: 100250. doi: 10.1016/j.measurements.2023.100250.
Unduhan
Diterbitkan
Terbitan
Bagian
Lisensi
Hak Cipta (c) 2026 Agus Hartanto, Lenny Margaretta Huizen, April Firmandaru, surono surono
Artikel ini berlisensi Creative Commons Attribution 4.0 International License.
Authors who publish with this journal agree to the following terms:
- Authors retain copyright and grant the journal right of first publication with the work simultaneously licensed under a Creative Commons Attribution License that allows others to share the work with an acknowledgement of the work's authorship and initial publication in this journal.
- Authors are able to enter into separate, additional contractual arrangements for the non-exclusive distribution of the journal's published version of the work (e.g., post it to an institutional repository or publish it in a book), with an acknowledgement of its initial publication in this journal.
- Authors are permitted and encouraged to post their work online (e.g., in institutional repositories or on their website) prior to and during the submission process, as it can lead to productive exchanges, as well as earlier and greater citation of published work.
Transformatika is licensed under a Creative Commons Attribution 4.0 International License.
