Mitigasi Ancaman Siber pada Aplikasi Web Melalui SIEM: Tinjauan Literatur Sistematis

Web applications have become the backbone of the modern digital ecosystem, yet their openness makes them primary targets for cyberattacks that conventional defense mechanisms often fail to detect. This article presents a systematic literature review of 13 selected publications from the Scopus database from the 2020-2025 period to analyze the effectiveness of Security Information and Event Management (SIEM) in mitigating threats to web applications. The review identifies dominant attack categories including SQL Injection (SQLi), Cross-Site Scripting (XSS), and application-layer Denial of Service (DoS) attacks. Research demonstrates that a hybrid approach integrating SIEM with Web Application Firewalls (WAF) and the application of Machine Learning algorithms is proven to detect zero-day attack anomalies with accuracy rates reaching 97% to 100%. Furthermore, the use of open-source platforms such as Wazuh and ELK Stack enables centralized security visibility monitoring and significant reduction in incident response times. This article recommends the adoption of an integrated security architecture combining rule-based and behavioral log analysis to minimize false positive rates and build robust, adaptive web defenses.