Simulasi Sistem Keamanan Jaringan Komputer Berbasis IPS Snort dan Honeypot Artilery

Abstract

The Intrusion Prevention System (IPS) Snort is a server security System that can prevent attacks by examining and recording all data packets as well as recognizing packets with sensors, when the attack has been identified, IPS Snort will deny the access (block) and log of all data packets identified. However by using only IPS Snort which can only check and note the Allert attacks that are incoming in less sense to secure a server by collaborating with the other server's secure system in the sense of being able to make the network security of the server better. Honeypot Artillery chosen which works when there is a Hacker trying to penetrate through open ports can be detected as if hackers can break through the system, then Honeypot Artillery will provide information about who attackers and how the attacker could enter the Snort IPS system for later record in the database that can be viewed on the Web interface, Allert recorded on the experiment that has been done in the database as much as 9453 on TCP protocol as much as 9%, UDP as much as < 1%, and ICMP As much as 91%.

Analysis Performance Intrusion Detection System in Detecting Cyber-Attack on Apache Web Server

“…SPDLC Method SPDLC is described as a stage starting from the evaluation stage which validates the effectiveness of the initial analysis stage [10] [11]. Feedback from this evaluation can have an impact on changes in the architecture and technology used today [6] [12]. The explanation of the stages in Figure 1 is as follows:…”

“…The snort program can be operated in three modes: a. Packet Sniffer Reads packets from the network and shows an uninterrupted stream from on the console (screen). [12] If you only want to see the header packets from TCP/IP on the screen, try using the command : ./snort -v b. Packet Logger Logs the packets to disk. If you want to keep a log of packets to disk, it is necessary to include a logging directory, i.e.…”

“…where the log data is stored on it. [12] Using the following command Snort will automatically run in packet logging mode:…”

Analisis dan Implementasi Honeypot Honeyd Sebagai Low Interaction Terhadap Serangan Distributed Denial Of Service (DDOS) dan Malware

“…cara kerja honeyd memungkinkan pengguna untuk membuat dan menjalankan beberapa virtual host dalam jaringan komputer. Dari virtual host tersebut pengguna dapat mensimulasikan suatu konfigurasi jaringan komputer untuk meniru beberapa jenis server [15].…”