Kerangka Kerja Keamanan Berlapis untuk Jaringan Internet of Things: Mengintegrasikan Pemfilteran Firewall, Autentikasi, Enkripsi, dan Deteksi Intrusi
Kata Kunci:
Internet Segalanya, Keamanan Berlapis, Keamanan Jaringan, Autentikasi, Enkripsi, Sistem Deteksi IntrusiAbstrak
Perkembangan Internet of Things (IoT) meningkatkan konektivitas sekaligus memperluas attack surface melalui perangkat heterogen, jalur komunikasi, aplikasi, dan layanan jaringan yang saling terhubung. Mekanisme keamanan tunggal memiliki fungsi yang terbatas sehingga tidak dapat menangani seluruh risiko keamanan IoT secara mandiri. Penelitian ini bertujuan mengidentifikasi hubungan fungsional antarmekanisme keamanan utama, menemukan kesenjangan konseptual, dan menyusun multi-layer security framework yang mengintegrasikan kontrol trafik, verifikasi identitas, perlindungan komunikasi, serta deteksi intrusi. Metode yang digunakan adalah literature review dengan pendekatan sintesis naratif yang mencakup analisis ancaman IoT, keamanan perangkat, kontrol akses, komunikasi aman, monitoring, keamanan aplikasi, Smart City, jaringan 5G, serta hubungan antara keamanan dan performa. Hasil analisis menunjukkan empat fungsi keamanan yang saling melengkapi, yaitu firewall filtering sebagai kontrol trafik dan pengurang attack surface, authentication sebagai verifikasi identitas dan pencegah unauthorized access, encryption sebagai pelindung confidentiality dan integrity komunikasi, serta intrusion detection sebagai mekanisme monitoring dan deteksi aktivitas abnormal. Framework yang dihasilkan juga merekomendasikan empat security metrics, yaitu Attack Blocking Rate, Detection Rate, False Positive Rate, dan Response Time, serta lima performance metrics, yaitu throughput, latency, packet loss, CPU utilization, dan memory utilization, untuk validasi empiris di masa depan. Hasil penelitian menunjukkan bahwa keamanan IoT lebih tepat dibangun melalui lapisan perlindungan yang saling melengkapi daripada bergantung pada satu mekanisme. Framework yang diusulkan dapat menjadi dasar konseptual untuk evaluasi keamanan dan performa, sedangkan penelitian selanjutnya perlu melakukan validasi melalui testbed IoT dan skenario serangan terkontrol.
Unduhan
Referensi
[1] Agi Nanjar, Titi Safitri Maharani, Priyo Agung Prastyo, Muhammad Taufik Nur Hidayat, and Imam Kharits Najibulloh, “Internet Of Things (IoT) Integration In Telecommunication Networks: Challenges and Opportunities,” J. Technol. Inform. Eng., vol. 3, no. 1, pp. 11–24, Mar. 2024, doi: 10.51903/jtie.v3i1.156.
[2] T. Magara and Y. Zhou, “Internet of Things (IoT) of Smart Homes: Privacy and Security,” J. Electr. Comput. Eng., vol. 2024, pp. 1–17, Apr. 2024, doi: 10.1155/2024/7716956.
[3] I. Hidayatullah, M. H. Khairi, I. Maulana, and F. P. Eka Putra, “Analisis Protokol Keamanan Jaringan dalam Era Internet of Things (IoT),” Infotek J. Inform. Dan Teknol., vol. 8, no. 2, pp. 356–366, Jul. 2025, doi: 10.29408/jit.v8i2.30257.
[4] F. P. Eka Putra, A. Baidawi, A. A. Mubarok, and Frediyanto, “Merancang Jaringan Sensor Nirkabel dan IoT untuk Kota Pintar Pamekasan,” J. Inf. Dan Teknol., pp. 138–145, Jul. 2023, doi: 10.37034/jidt.v5i2.331.
[5] F. P. E. Putra, S. A. A. Sugi, K. Mufidah, and Y. R. Febriani, “Analysis of Cyber Attacks on Network Security,” vol. 6, no. 2, 2024.
[6] M. L. Ali, K. Thakur, S. Schmeelk, J. Debello, and D. Dragos, “Deep Learning vs. Machine Learning for Intrusion Detection in Computer Networks: A Comparative Study,” Appl. Sci., vol. 15, no. 4, p. 1903, Feb. 2025, doi: 10.3390/app15041903.
[7] M. Sajid et al., “Enhancing intrusion detection: a hybrid machine and deep learning approach,” J. Cloud Comput., vol. 13, no. 1, p. 123, Jul. 2024, doi: 10.1186/s13677-024-00685-x.
[8] F. P. E. Putra, S. M. Dewi, A. Hamzah, and U. Madura, “Privasi dan Keamanan Penerapan IoT Dalam Kehidupan Sehari-Hari : Tantangan dan Implikasi,” vol. 5, no. 2, 2023.
[9] D. Javeed, M. S. Saeed, M. Adil, P. Kumar, and A. Jolfaei, “A federated learning-based zero trust intrusion detection system for Internet of Things,” Ad Hoc Netw., vol. 162, p. 103540, Sep. 2024, doi: 10.1016/j.adhoc.2024.103540.
[10] S. S. Bamber, A. V. R. Katkuri, S. Sharma, and M. Angurala, “A hybrid CNN-LSTM approach for intelligent cyber intrusion detection system,” Comput. Secur., vol. 148, p. 104146, Jan. 2025, doi: 10.1016/j.cose.2024.104146.
[11] M Sahyudi and Erliyan Redy Susanto, “Analisis Implementasi Sistem Keamanan Basis Data Berbasis Role-Based Access Control (RBAC) pada Aplikasi Enterprise Resource Planning,” SATESI J. Sains Teknol. Dan Sist. Inf., vol. 5, no. 1, pp. 105–116, Apr. 2025, doi: 10.54259/satesi.v5i1.3997.
[12] H. Sharma, P. Kumar, and K. Sharma, “Advanced Security for IoT and Smart Devices: Addressing Modern Threats and Solutions,” in Emerging Threats and Countermeasures in Cybersecurity, 1st ed., G. Shrivastava, R. P. Ojha, S. Awasthi, H. Bansal, and K. Sharma, Eds., Wiley, 2025, pp. 191–216. doi: 10.1002/9781394230600.ch10.
[13] M. Q. Li and B. C. M. Fung, “Security concerns for Large Language Models: A survey,” J. Inf. Secur. Appl., vol. 95, p. 104284, Dec. 2025, doi: 10.1016/j.jisa.2025.104284.
[14] M. Zia, M. Siddiqua, M. Ouameur, M. Bagaa, and F. Turjman, “Securing the Future: A Survey on Smart Home Security in IoT-Integrated Smart Cities,” Adv. Netw., vol. 12, no. 1, pp. 1–18, Mar. 2025, doi: 10.11648/j.net.20251201.11.
[15] D. Alsalman, “A Comparative Study of Anomaly Detection Techniques for IoT Security Using Adaptive Machine Learning for IoT Threats,” IEEE Access, vol. 12, pp. 14719–14730, 2024, doi: 10.1109/ACCESS.2024.3359033.
[16] S. Muneer, U. Farooq, A. Athar, M. Ahsan Raza, T. M. Ghazal, and S. Sakib, “A Critical Review of Artificial Intelligence Based Approaches in Intrusion Detection: A Comprehensive Analysis,” J. Eng., vol. 2024, no. 1, p. 3909173, Jan. 2024, doi: 10.1155/2024/3909173.
[17] J. G. A. Ginting, B. Arifwidodo, and E. Wahyudi, “Virtual Privat Network: Koneksi Keamanan Pada Aplikasi Berbasis Android,” J. Telecommun. Electron. Control Eng. JTECE, vol. 7, no. 1, pp. 32–42, Jan. 2025, doi: 10.20895/jtece.v7i1.1632.
[18] S. Wahyu Widiyanti, N. Maya Hastuti, and E. Adita Kusumawati, “TINJAUAN KEAMANAN DATA REKAM MEDIS ELEKTRONIK PADA APLIKASI SIMPUS BERDASARKAN ASPEK CONFIDENTIALITY, INTEGRITY, DAN AVAILABILITY DI PUSKESMAS TASIKMADU KARANGANYAR: REVIEW OF ELECTRONIC MEDICAL RECORD DATA SECURITY IN THE SIMPUS APPLICATION BASED ON THE ASPECTS OF CONFIDENTIALITY, INTEGRITY AND AVAILABILITY AT TASIKMADU KARANGANYAR HEALTH CENTER,” Indones. J. Health Inf. Manag., vol. 4, no. 2, Jun. 2024, doi: 10.54877/ijhim.v4i2.212.
[19] Zahrah Hayat Arka Putri, Yessy Arye Yustraini, Ramdhan Ariansyah, Najma Choirun Nisa, Eka Dyar Wahyuni, and Agung Brastama Putra, “Pengamanan Data Akademik Berbasis Web dengan Enkripsi AES-256 (Studi Kasus pada Pendataan Digital SMA XYZ),” J. Nas. Teknol. Inf. Dan Apl., vol. 3, no. 3, pp. 707–716, May 2025, doi: 10.24843/JNATIA.2025.v03.i03.p26.
[20] F. P. E. Putra, M. Dafid, and I. Syafi’i, “Firewall Implementation as a Computer Network Security Strategy for Data Protection,” Brill. Res. Artif. Intell., vol. 5, no. 1, pp. 291–297, Jul. 2025, doi: 10.47709/brilliance.v5i1.6162.
[21] F. D. Insani, M. D. Anggraeni, and M. D. Anggraeni, “ANALISIS KINERJA ALGORITMA ADVANCED ENCRYPTION STANDARD (AES) ENCRYPTION DAN ALGORITMA BLOWFISH PADA PROSES ENKRIPSI DAN DEKRIPSI,” TRANSFORMASI, vol. 21, no. 2, Dec. 2025, doi: 10.56357/jt.v21i2.478.
[22] /A. F. Pranata, A. F. Saragih, R. Fikri, K. Rahmadani, and N. P. Aulia, “Analisis Perbandingan Enkripsi dan Dekripsi Menggunakan Algoritma Simetris AES dan Hybrid (AES + RSA) Pada File Video,” JIKUM J. Ilmu Komput., vol. 2, no. 1, pp. 102–107, Jan. 2026, doi: 10.62671/jikum.v2i1.143.
[23] R. A. Nasution and Tommy, “Analisis Performa Kecepatan Enkripsi File Video Menggunakan Algoritma DSA dan Twofish Berbasis Web,” J. Komput. Teknol. Inf. Sist. Inf. JUKTISI, vol. 4, no. 3, pp. 2068–2075, Jan. 2026, doi: 10.62712/juktisi.v4i3.520.
[24] O. Arreche, T. Guntur, and M. Abdallah, “XAI-IDS: Toward Proposing an Explainable Artificial Intelligence Framework for Enhancing Network Intrusion Detection Systems,” Appl. Sci., vol. 14, no. 10, p. 4170, May 2024, doi: 10.3390/app14104170.
[25] S. Racherla, P. Sripathi, N. Faruqui, M. Alamgir Kabir, M. Whaiduzzaman, and S. Aziz Shah, “Deep-IDS: A Real-Time Intrusion Detector for IoT Nodes Using Deep Learning,” IEEE Access, vol. 12, pp. 63584–63597, 2024, doi: 10.1109/ACCESS.2024.3396461.
[26] S. Latif, W. Boulila, A. Koubaa, Z. Zou, and J. Ahmad, “DTL-IDS: An optimized Intrusion Detection Framework using Deep Transfer Learning and Genetic Algorithm,” J. Netw. Comput. Appl., vol. 221, p. 103784, Jan. 2024, doi: 10.1016/j.jnca.2023.103784.
[27] H. Niu et al., “A Survey on Artificial Noise for Physical Layer Security: Opportunities, Technologies, Guidelines, Advances, and Trends,” IEEE Commun. Surv. Tutor., vol. 28, pp. 341–381, 2026, doi: 10.1109/COMST.2025.3610758.
[28] M. Sajid, K. R. Malik, A. H. Khan, A. Bilal, A. Alqazzaz, and A. A. Darem, “Advanced multilayer security framework: integrating AES and LSB for enhanced data protection,” J. Supercomput., vol. 81, no. 17, p. 1607, Nov. 2025, doi: 10.1007/s11227-025-08093-x.
[29] B. M. Elomda, T. A. A. Abdelbary, H. A. Hassan, K. S. Hamza, and Q. Kharma, “An Enhanced Multi-Layer Blockchain Security Model for Improved Latency and Scalability,” Information, vol. 16, no. 3, p. 241, Mar. 2025, doi: 10.3390/info16030241.
[30] F. P. Eka Putra, Amir Hamzah, W. Agel, and R. O. Firmansyah Kusuma, “Impelementasi Sistem Keamanan Jaringan Mikrotik Menggunakan Firewall Filtering dan Port Knocking,” J. Sistim Inf. Dan Teknol., pp. 82–87, Jan. 2024, doi: 10.60083/jsisfotek.v5i4.329.
[31] O. H. Abdulganiyu, T. A. Tchakoucht, and Y. K. Saheed, “RETRACTED ARTICLE: Towards an efficient model for network intrusion detection system (IDS): systematic literature review,” Wirel. Netw., vol. 30, no. 1, pp. 453–482, Jan. 2024, doi: 10.1007/s11276-023-03495-2.
[32] F. P. E. Putra, U. Ubaidi, A. Zulfikri, G. Arifin, and R. M. Ilhamsyah, “Analysis of Phishing Attack Trends, Impacts and Prevention Methods: Literature Study,” Brill. Res. Artif. Intell., vol. 4, no. 1, pp. 413–421, Aug. 2024, doi: 10.47709/brilliance.v4i1.4357.
[33] J. Ali et al., “A deep dive into cybersecurity solutions for AI-driven IoT-enabled smart cities in advanced communication networks,” Comput. Commun., vol. 229, p. 108000, Jan. 2025, doi: 10.1016/j.comcom.2024.108000.
[34] A. Mubarakali, S. Sharavanan, H. Elshafie, and S. B. Changalasetty, “A secure and scalable home security system using IoT, 6G networks, AI-based hybrid deep learning models, blockchain, and smart contracts,” Int. J. Inf. Secur., vol. 25, no. 1, p. 15, Feb. 2026, doi: 10.1007/s10207-025-01178-x.
[35] F. A. Ananta, A. Wulandary, J. Rizka, W. A. Hidayat, and M. Azkal, “Analisis Keamanan Komputer dalam Melindungi Data dari Serangan Siber,” JIKUM J. Ilmu Komput., vol. 2, no. 1, pp. 133–137, Jan. 2026, doi: 10.62671/vxn5fx87.
[36] P. Rizkika, D. Juardi, and A. Susilo Yuda Irawan, “ANALISIS KEAMANAN PADA APLIKASI HIMFO BERBASIS ANDROID MENGGUNAKAN MOBSF,” JATI J. Mhs. Tek. Inform., vol. 8, no. 4, pp. 5945–5952, Jun. 2024, doi: 10.36040/jati.v8i4.10051.
[37] T. I. Protick, A. Sabir, S. Abhinaya, A. Bartlett, and A. Das, “Unveiling Users’ Security and Privacy Concerns Regarding Smart Home IoT Products from Online Reviews,” ACM J. Comput. Sustain. Soc., vol. 2, no. 4, pp. 1–41, Dec. 2024, doi: 10.1145/3685929.
[38] A. R. Aulia, E. I. Alwi, and A. W. M. Gaffar, “Perancangan Sistem Keamanan Jaringan Intrusion Prevention System Menggunakan Suricata Dan IPTables,” LINIER Lit. Inform. Dan Komput., vol. 1, no. 3, pp. 235–240, Dec. 2024, doi: 10.33096/linier.v1i3.2500.
[39] S. M. S. Bukhari et al., “Secure and privacy-preserving intrusion detection in wireless sensor networks: Federated learning with SCNN-Bi-LSTM for enhanced reliability,” Ad Hoc Netw., vol. 155, p. 103407, Mar. 2024, doi: 10.1016/j.adhoc.2024.103407.
[40] Muhammad Randy Fachrezi, Dwiky Oldi Amsyah, Alwi Syahputra, and Ibnu, “Perancangan dan Implementasi Sistem Enkripsi Data Sensitif Menggunakan AES-256-CBC pada Aplikasi Berbasis Web Sederhana,” J. Ilmu Komput. Dan Tek. Inform., vol. 2, no. 1, pp. 55–62, Jan. 2026, doi: 10.64803/juikti.v2i1.100.
[41] K. Aziz, S. Zakir, W. Aprison, and L. Efriyanti, “IMPLEMENTASI KEAMANAN JARINGAN DENGAN METODE FIREWALL FILTERING MENGGUNAKAN MIKROTIK DI SMKN 3 PAYAKUMBUH,” JATI J. Mhs. Tek. Inform., vol. 8, no. 3, pp. 3343–3352, May 2024, doi: 10.36040/jati.v8i3.9662.
[42] N. Syafitri, M. S. Lamada, and I. Suhardi, “Implementasi Firewall untuk Mencegah Ancaman Keamanan pada Akses Remote Dekstop Protocol di Sistem Operasi Windows,” JIMUJurnal Ilm. Multidisipliner, vol. 2, no. 04, pp. 1095–1105, Aug. 2024, doi: 10.70294/jimu.v2i04.494.
[43] P. Badoni, M. Wadhwa, and R. Walia, “System of IntelliGuard Access Using IoT,” in 2024 International Conference on Intelligent Systems for Cybersecurity (ISCS), Gurugram, India: IEEE, May 2024, pp. 1–6. doi: 10.1109/ISCS61804.2024.10581055.
[44] M. Saddam Ariyanto, G. Boy Hertantyo, and B. Hartati, “SERANGAN DEAUTHENTICATION ATTACK PADA WIRELESS ACCESS POINT: SYSTEMATIC LITERATUR REVIEW,” JATI J. Mhs. Tek. Inform., vol. 9, no. 4, pp. 6606–6612, May 2025, doi: 10.36040/jati.v9i4.13808.
[45] T. W. Lingga, O. K. Sulaiman, and K. Nasution, “Advance Encryption Standard (AES) sebagai Algoritma Kriptografi dalam Mengamankan Data pada Aplikasi E-Pariwisata,” Sudo J. Tek. Inform., vol. 3, no. 4, pp. 201–216, Jun. 2025, doi: 10.56211/sudo.v3i4.923.
[46] M. R. Fahlevvi, D. S. A. Putra, and W. Ariandi, “ALGORITMA AES128-CBC (ADVANCED ENCRYPTION STANDARD) UNTUK ENKRIPSI DAN DEKRIPSI BERKAS DOKUMEN PT. ADIARTA MUZIZAT,” J. Innov. Future Technol. IFTECH, vol. 7, no. 1, pp. 166–176, Feb. 2025, doi: 10.47080/iftech.v7i1.3929.
[47] H. Zhang, M. Zaman, A. Jain, and S. Sampalli, “A Hybrid Machine Learning Intrusion Detection System for Wireless Sensor Networks,” in 2024 International Wireless Communications and Mobile Computing (IWCMC), Ayia Napa, Cyprus: IEEE, May 2024, pp. 830–835. doi: 10.1109/IWCMC61514.2024.10592535.
[48] A. Belenguer, J. A. Pascual, and J. Navaridas, “A Review of Federated Learning Applications in Intrusion Detection Systems,” Comput. Netw., vol. 258, p. 111023, Feb. 2025, doi: 10.1016/j.comnet.2024.111023.
[49] A. F. Rachman, F. P. E. Putra, S. Syirofi, and D. Wahid, “Case Study of Computer Network Development for the Internet Of Things (IoT) Industry in an Urban Environment,” Brill. Res. Artif. Intell., vol. 4, no. 1, pp. 399–407, Aug. 2024, doi: 10.47709/brilliance.v4i1.4302.
[50] Fauzan Prasetyo Eka Putra, Dea Aulia Siswoyo, M. Idris Ainul Yaqin, and Rica Oktavia, “Tinjauan Regulasi Siber dan Kebijakan Keamanan Jaringan 5G: Perspektif Nasional dan Internasional,” J. Inform. Dan Tekonologi Komput. JITEK, vol. 5, no. 1, pp. 126–134, Mar. 2025, doi: 10.55606/jitek.v5i1.6141.
[51] N. Haidar Hari, F. P. Eka Putra, U. Hasanah, S. R. Sutarsih, and Riyan, “Transformasi Jaringan Telekomunikasi dengan Teknologi 5G: Tantangan, Potensi, dan Implikasi,” J. Inf. Dan Teknol., pp. 146–150, Jul. 2023, doi: 10.37034/jidt.v5i2.357.
[52] F. P. Eka Putra, . S., A. Ramadhani, and . M., “Integrasi Teknologi Kuantum dan fiber Optik untuk Meningkatkan Keamanan dan Efisiensi Jaringan Masa Depan,” J. Ilm. Ilk. - Ilmu Komput. Inform., vol. 8, no. 2, pp. 151–163, Jul. 2025, doi: 10.47324/ilkominfo.v8i2.342.
[53] R. Mustafa, N. I. Sarkar, M. Mohaghegh, and S. Pervez, “A Cross-Layer Secure and Energy-Efficient Framework for the Internet of Things: A Comprehensive Survey,” Sensors, vol. 24, no. 22, p. 7209, Nov. 2024, doi: 10.3390/s24227209.
[54] Y. Sanjalawe, S. Al-E’mari, S. Fraihat, M. Abualhaj, and E. Alzubi, “A deep learning-driven multi-layered steganographic approach for enhanced data security,” Sci. Rep., vol. 15, no. 1, p. 4761, Feb. 2025, doi: 10.1038/s41598-025-89189-5.
[55] A. Qaddos, M. U. Yaseen, A. S. Al-Shamayleh, M. Imran, A. Akhunzada, and S. Z. Alharthi, “A novel intrusion detection framework for optimizing IoT security,” Sci. Rep., vol. 14, no. 1, p. 21789, Sep. 2024, doi: 10.1038/s41598-024-72049-z.
[56] F. P. E. Putra, U. Ubaidi, A. Hamzah, W. A. Pramadi, and A. Nuraini, “Systematic Literature Review: Security Gap Detection On Websites Using Owasp Zap,” Brill. Res. Artif. Intell., vol. 4, no. 1, pp. 348–355, Jul. 2024, doi: 10.47709/brilliance.v4i1.4227.
Diterbitkan
Terbitan
Bagian
Lisensi
Hak Cipta (c) 2026 Jihan Abidah Fitriyah (Author); Belgis Putri Alfiyah, Trio Irham Chairil Anwar (Translator)
Artikel ini berlisensi Creative Commons Attribution 4.0 International License.
