scholarly journals Simulasi Sistem Keamanan Jaringan Komputer Berbasis IPS Snort dan Honeypot Artilery

AITI ◽  
2020 ◽  
Vol 16 (2) ◽  
pp. 135-150
Author(s):  
Alja Aminanto ◽  
Wiwin Sulistyo

The Intrusion Prevention System (IPS) Snort is a server security System that can prevent attacks by examining and recording all data packets as well as recognizing packets with sensors, when the attack has been identified, IPS Snort will deny the access (block) and log of all data packets identified. However by using only IPS Snort which can only check and note the Allert attacks that are incoming in less sense to secure a server by collaborating with the other server's secure system in the sense of being able to make the network security of the server better. Honeypot Artillery chosen which works when there is a Hacker trying to penetrate through open ports can be detected as if hackers can break through the system, then Honeypot Artillery will provide information about who attackers and how the attacker could enter the Snort IPS system for later record in the database that can be viewed on the Web interface, Allert recorded on the experiment that has been done in the database as much as 9453 on TCP protocol as much as 9%, UDP as much as < 1%, and ICMP As much as 91%.

2021 ◽  
Vol 5 (1) ◽  
pp. 60-69
Author(s):  
Farid Wahyudi ◽  
◽  
Listanto Tri Utomo ◽  

Security is very main in computer networks, where many devices are connected to each other to interact and exchange data without limits. Network security is also a very important issue to prioritize, one of which is to use an intrusion prevention system. At PDTI UNIRA there are often network security problems, one of which is that during the test season, the server experiences many intrusion problems. The purpose of this research is to develop a social science system based on the analysis at PDTI of Raden Rahmat Islamic University Malang. This research method uses a computer security development approach, namely the Intrusion Prevention System (IPS), by combining firewall engineering methods and Intrusion-Detection System (IDS). The result of this research is a technology that can be used to prevent attacks that will enter the local network checking and recording all data packets and recognizing sensor packets, when the attack has been identified, IPS will deny access (block) and record (log) all data packets. identified. So IPS acts as a firewall that will allow and block combined with IDS that can detect packets in detail. With a network security system, the Unira PDTI server is safer and can avoid intrusion.


2021 ◽  
Vol 5 (1) ◽  
pp. 180-186
Author(s):  
Tati Ernawati ◽  
Fikri Faiz Fadhlur Rachmat

Computer network systems have been designing to share resources. Sharing resources process, data security, and confidentiality are main issues in anticipating misuse of the access to information by unauthorized parties. The solution to anticipating these problems is the availability of a security system capable of handling various intruders who threaten the system and protect network resources. This study builds and analyzes the performance of computer network security using cowrie honeypot and snort inline-mode as an Intrusion Prevention System (IPS). The development process goes through the stages of analysis, design, implementation, and monitoring. The content analysis method has been using to explore the problems and requirements of the system built. The security system was build by configuring the IP address and network system devices (server, remote admin, client attacker). The test has been carrying out on 3 test parameters (confidentiality, availability, and integrity), comparison testing method has been using to test the integrity parameters. The test results indicate that the system functionality test for user needs have fulfilled, the results of the confidentiality test (83.3%), availability (93.3%), and the integrity of the inline-mode snort show faster response time (0.069 seconds on average) and more CPU resource usage efficient (0.04% average) than the cowrie honeypot. IPS snort inline-mode overall integrity parameter testing is more recommended for used network security systems than cowrie honeypots.  


2020 ◽  
Vol 12 (02) ◽  
pp. 131-144
Author(s):  
Suryayusra Suryayusra ◽  
Dedi Irawan

Perkembangan teknologi yang Semakin hari semakin meningkat, kita di tuntut untuk meningkatkan system keamanan jaringan yang kita miliki, karena semakin mudahnya  orang bisa mengetahui tentang hacking dan cracking dan juga didukung oleh tools yang mudah didapatkan secara gratis. Dan untuk mencegah hal itu kita harus megamankan jaringan yang kita gunakan, untuk mengamankan jaringan tersebut peneliti menggunakan sebuah  metode keamanan yang bernama Intrusion Prevention System (IPS), merupakan media yang banyak digunakan dalam membangun sebuah system keamanan komputer, lalu IPS di gabungkan dengan menggunkan Teknik firewall dan metode Intrusioan Detection System, dalam penelitian ini penulis menggunakan sistem operasi Linux yaitu Ubuntu dan CentOS, karena linux merupakan software yang bersifat free/opensource sehingga untuk memperolehnya dapat diunduh secara gratis. Pada awalnya linux merupakan system operasi yang cocok untuk jaringan tapi sekarang linux sudah berubah menjadi system operasi yang tidak hanya handal dari segi jaringan dan server tapi juga sudah menjelma menjadi sistem operasi yang enak dipakai di lingkungan desktop baik untuk keperluan pribadi atau bahkan untuk perkantoran. Untuk mengamankan jaringan tersebut menggunakan sebuah mtode keamanan yaitu Intrusion Prevention System (IPS), juga dibantu dengan sebuah tools dalam sistem Operasi Linux yang  berfungsi sebagai alat untuk melakukan filter (penyaring) terhadap lalulintas data (trafic), yaitu IPTables.   Technological developments are increasing day by day, we are required to improve our network security system, because the easier it is for people to find out about hacking and cracking and it is also supported by tools that are easily available for free. And to prevent that we have to secure the network that we use, to secure the network researchers use a security method called the Intrusion Prevention System (IPS), which is a medium that is widely used in building a computer security system, then IPS is combined with using techniques. firewall and Intrusioan Detection System method, in this study the author uses the Linux operating system, namely Ubuntu and CentOS, because Linux is a free / opensource software so that it can be downloaded for free. Initially, linux was an operating system suitable for networking, but now linux has turned into an operating system that is not only reliable in terms of networks and servers but has also been transformed into an operating system that is comfortable to use in a desktop environment for personal use or even for offices. To secure the network using a security method, namely the Intrusion Prevention System (IPS), it is also assisted by a tool in the Linux operating system which functions as a tool for filtering data traffic, namely IPTables


Author(s):  
Hendri Alamsyah ◽  
Riska ◽  
Abdussalam Al Akbar

Security is an important aspect to be considered in computer networks. This security system can be a detection and prevention of attacks that are being done by the attacker (intruders). The problem of attacks that occur in computer networks is that intruders can do port scanning, enter the system using open ports such as telnet, ftp and others.. The purpose of this study is the implementation of IDPS, can be from. To do network security from various attack threats, a system that can detect and prevent it directly is needed. The method that can be used is Intrusion Detection and Prevention System (NIDPS). NIDPS can exchange and block the attacks. This security system is collaborated with IP Tables. IP Tables is used to filter incoming data packets and drop packets of data that are indicated by attack. With the Intrusion Detection and Prevention system, it can detect attacks and prevent them by blocking data packets sent by intruders through port scanning, FTP attacks, and telnets.


Sign in / Sign up

Export Citation Format

Share Document