Implementasi Zero Trust Architecture pada Infrastruktur Self-Hosted: Analisis Pengujian Keamanan Data Berdasarkan Prinsip CIA Triad
DOI:
https://doi.org/10.61722/jssr.v4i3.10532Keywords:
Zero Trust Architecture, Self-Hosted, CIA Triad, Keamanan Data, Keamanan Siber, Implementasi Zero Trust Architecture pada Infrastruktur Self-Hosted: Analisis Pengujian Keamanan Data Berdasarkan Prinsip CIA TriadAbstract
Tren self-hosting banyak diminati oleh praktisi teknologi informasi, namun implementasinya sering kali masih mengandalkan model keamanan konvensional berbasis perimeter jaringan yang rentan terhadap eksploitasi. Penelitian ini bertujuan untuk memitigasi celah keamanan tersebut dengan merancang, mengimplementasikan, dan mengevaluasi efektivitas Zero Trust Architecture (ZTA) pada ekosistem infrastruktur server mandiri berskala kecil. Evaluasi keandalan sistem dilakukan menggunakan metode pengujian fungsional observasional berdasarkan matriks keamanan CIA Triad (Confidentiality, Integrity, Availability). Lingkungan pengujian dibangun menggunakan server lokal dengan linux ubuntu 24.04 yang diintegrasikan dengan layanan outbound tunnel (Cloudflare Tunnels), sistem Single Sign-On (Authentik), dan jaringan VPN (Tailscale). Hasil pengujian mengonfirmasi bahwa arsitektur ZTA berhasil memenuhi ketiga parameter keamanan data secara optimal. Pada aspek kerahasiaan, gerbang SSO secara aktif memblokir akses anonim. Pada aspek keutuhan, enkripsi ujung-ke-ujung berbasis protokol TLS 1.3 dan WireGuard terbukti melindungi transmisi data dari ancaman. Pada aspek ketersediaan, penutupan port fisik publik sukses mengamankan sumber daya server dari pemindaian otomatis tanpa mengorbankan aksesibilitas pengguna yang sah. Penelitian ini membuktikan bahwa keamanan siber tingkat korporat dapat diaplikasikan secara efisien pada infrastruktur personal, sekaligus mendemonstrasikan kepatuhan terhadap etika profesi melalui simulasi di lingkungan terkendali.
References
N. Mokadem, J. Treur, and P. H. M. P. Roelofsma, “Enhancing cybersecurity through adaptive networks and AI-coaching: Organizational learning and risk management,” Cogn. Syst. Res., vol. 97, Jun. 2026, doi: 10.1016/j.cogsys.2026.101464.
M. Xie and M. Zeng, “A multimodal reinforcement learning-based access control model for power systems under zero-trust architecture,” Alexandria Engineering Journal, vol. 141, pp. 269–283, Apr. 2026, doi: 10.1016/j.aej.2026.03.017.
M. Nadeem et al., “Preventing Cloud Network from Spamming Attacks Using Cloudflare and KNN,” Computers, Materials and Continua, vol. 74, no. 2, pp. 2641–2659, 2023, doi: 10.32604/cmc.2023.028796.
M. A. Gopee, S. A. Prieto, and B. García de Soto, “Self-hosted multimodal large language models for speech-driven perception and navigation in construction robotics,” Autom. Constr., vol. 183, Mar. 2026, doi: 10.1016/j.autcon.2026.106805.
C. Sharma, A. Kumar, and P. K. Tiwari, “Quality of service driven energy-efficient computing to enhance sustainable cloud,” Array, vol. 30, Jul. 2026, doi: 10.1016/j.array.2026.100790.
S. Cahyono, A. Gustomo, and A. Ghazali, “Integrating knowledge management with organizational culture transformation to enhance data security: A qualitative perspective,” Journal of Open Innovation: Technology, Market, and Complexity, vol. 12, no. 2, Jun. 2026, doi: 10.1016/j.joitmc.2026.100766.
N. N. Hari, P. Krishnan, K. Jain, A. K. J. Saudagar, P. P., and R. C. Poonia, “A three-tier microsegmentation framework for enterprise networks under Zero Trust Architecture,” Alexandria Engineering Journal, vol. 141, pp. 150–164, Apr. 2026, doi: 10.1016/j.aej.2026.03.014.
A. Vinueza-Cabezas, J. J. Samaniego-Frixone, and M. Bourgeat-Salazar, “How personal and professional characteristics shape the link between work engagement and work–home interactions during the COVID-19 transition: Evidence from Ecuador,” Acta Psychol. (Amst)., vol. 265, p. 106671, May 2026, doi: 10.1016/j.actpsy.2026.106671.
S. Hasan, I. Amundson, and D. Hardin, “Zero-trust design and assurance patterns for cyber–physical systems,” Journal of Systems Architecture, vol. 155, Oct. 2024, doi: 10.1016/j.sysarc.2024.103261.
M. K. Islam, C. Ya, M. N. Islam, S. Sultana, and M. Das, “A bibliometric analysis of governmental cybersecurity policies: Trends, challenges, and future directions,” Jun. 01, 2026, Elsevier B.V. doi: 10.1016/j.jeconc.2026.100215.
S. Singh and A. Dhumane, “Unmasking digital deceptions: An integrative review of deepfake detection, multimedia forensics, and cybersecurity challenges,” Dec. 01, 2025, Elsevier B.V. doi: 10.1016/j.mex.2025.103632.
M. A. Mohamed, B. M. Chaudhry, J. Chakraborty, and K. J. O’sullivan, “Bridging the Zero Trust Gap: A Knowledge Management Approach to Business Data Protection,” Procedia Comput. Sci., vol. 278, pp. 590–597, 2026, [Online]. Available: www.sciencedirect.com
Y. Liu, “Construction of network access Layer security protection System based on zero trust architecture,” in Procedia Computer Science, Elsevier B.V., 2024, pp. 1013–1022. doi: 10.1016/j.procs.2024.09.121.
T. Wan, B. Shi, and H. Wang, “A continuous authentication scheme for zero-trust architecture in industrial internet of things,” Alexandria Engineering Journal, vol. 122, pp. 555–563, May 2025, doi: 10.1016/j.aej.2025.03.012.
F. Tang, C. Ma, and K. Cheng, “Privacy-preserving authentication scheme based on zero trust architecture,” Digital Communications and Networks, vol. 10, no. 5, pp. 1211–1220, Oct. 2024, doi: 10.1016/j.dcan.2023.01.021.
S. A. Alanazi and F. Ahmad, “Future-Proofing CIA Triad with Authentication for Healthcare: Integrating Hybrid Architecture of ML & DL with IDPS for Robust IoMT Security,” Computers, Materials and Continua, vol. 85, no. 1, pp. 769–800, 2025, doi: 10.32604/cmc.2025.066753.
C. Z. Oroni and F. Xianping, “Evaluating the influence of cybersecurity policies and cybersecurity behavior on institutional security performance in remote learning: the moderating role of technological readiness,” Sustainable Futures, vol. 10, Dec. 2025, doi: 10.1016/j.sftr.2025.101554.
A. Zineddine, Y. Belfaik, A. Rehaimi, Y. Sadqi, and S. Safi, “Single Sign-On Security and Privacy: A Systematic Literature Review,” 2025, Tech Science Press. doi: 10.32604/cmc.2025.066139.
S. Ahmadi, “Autonomous identity-based threat segmentation for zero trust architecture,” Cyber Security and Applications, vol. 3, Dec. 2025, doi: 10.1016/j.csa.2025.100106.
Y. S. Razooqi and A. Pekar, “A flow-level dataset of WireGuard tunnel traffic with matched encrypted-side features and application labels,” Data Brief, vol. 66, Jun. 2026, doi: 10.1016/j.dib.2026.112696.
A. S. S. Andari and E. Nurmianti, “Peran dan Tanggung Jawab Etis Profesional TI dalam Mencegah Kebocoran Data Privasi,” Jejak digital: Jurnal Ilmiah Multidisiplin, vol. 2, no. 3, pp. 3856–3863, 2026, doi: 10.63822/kpy62w91.
R. A. Rahman, E. Nurmiati, and R. A. Diterima, “Tinjauan Etika Profesi TI pada Standar ACM-IEEE dan SKKNI: Systematic Literature Review,” Jurnal Ilmiah Sistem Informasi, vol. 2, no. 2, pp. 164–172, 2026.
Published
Issue
Section
License
Copyright (c) 2026 JOURNAL SAINS STUDENT RESEARCH
This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.
