IMPLEMENTASI SIEM BERBASIS ELK STACK UNTUK ANALISIS INTELIJEN ANCAMAN SIBER DENGAN OTOMATISASI PERINGATAN DINI

This poster presents the design and implementation of a functional Security Information and Event Management (SIEM) system tailored for cyber threat intelligence analysis. Motivated by the critical rise in automated SSH brute-force attacks within academic infrastructures, the work demonstrates an integrated defense architecture using an open-source ELK Stack (Elasticsearch, Logstash, Kibana) coupled with a medium-interaction Cowrie honeypot. The poster details the system's ability to transition from passive log monitoring to active, real-time threat detection by incorporating a custom Python-based early warning system that delivers instant alerts via Telegram.