Analisis Perbandingan Performansi Intrusion Detection and Prevention System (IDPS) OSSEC dan Snort Menggunakan Quality of Service (QoS)

Arifah, Ramadhan (2024) Analisis Perbandingan Performansi Intrusion Detection and Prevention System (IDPS) OSSEC dan Snort Menggunakan Quality of Service (QoS). Undergraduate Thesis thesis, Institut Teknologi Telkom Purwokerto.

	Text Cover.pdf Download (935kB)
	Text Abstrak.pdf Download (69kB)
	Text Abstract.pdf Download (69kB)
	Text BAB I.pdf Download (80kB)
	Text BAB II.pdf Download (330kB)
	Text BAB III.pdf Download (339kB)
	Text BAB IV.pdf Restricted to Registered users only Download (800kB)
	Text BAB V.pdf Download (71kB)
	Text Daftar Pustaka.pdf Download (198kB)
	Text Lampiran.pdf Restricted to Registered users only Download (665kB)

Abstract

A public network will be easily accessed by everyone from various countries, this is what makes this network vulnerable to attack. Even though every network already uses a firewall, it can be easily attacked by attackers. In solving this problem, a system that is stronger than a firewall is needed, namely the Intrusion Detection and Prevention System or better known as IDPS. Securing the system can be done by integrating OSSEC and Snort where this system will provide logs to record activities carried out by attackers. OSSEC will act like a firewall that can allow and block. While Snort will analyze all network traffic to intercept and look for several types of intrusions in a network. In this research, a Distributed Denial of Service (DDoS) attack is tested on a network server that has been installed with OSSEC and Snort. After testing the attack, network quality measurements will be made using Quality of Service (QoS) to determine the state of the network before the attack and after the attack. In the performance comparison between Snort and OSSEC in detecting attacks, for ICMP Flood attacks, Snort is superior in terms of throughput and Packet loss, while OSSEC is better in delay and jitter. In detecting TCP Flood attacks, Snort showed superior performance in throughput, delay, and Packet loss, while OSSEC excelled in jitter. For UDP Flood attacks, Snort is better in throughput and delay, while OSSEC has better performance in jitter and Packet loss. Keywords: Intrusion Detection and Prevention System, OSSEC, Snort, Quality of Service

Actions (login required)

View Item