Analisis Performansi Intrusion Detection And Prevention Sytem (IDPS) Terhadap Serangan Port Scanning Dan UDP Flooding

Ikram, Muh. Aasif (2021) Analisis Performansi Intrusion Detection And Prevention Sytem (IDPS) Terhadap Serangan Port Scanning Dan UDP Flooding. Undergraduate Thesis thesis, Institut Teknologi Telkom Purwokerto.

	Text cover.pdf Download (0B)
	Text abstract.pdf Download (335kB)
	Text abstrak.pdf Download (334kB)
	Text bab1.pdf Download (411kB)
	Text bab2.pdf Download (888kB)
	Text bab3.pdf Download (1MB)
	Text bab4.pdf Restricted to Registered users only Download (469kB) | Request a copy
	Text bab5.pdf Download (337kB)
	Text daftar pustaka.pdf Download (408kB)

Abstract

Computer network security is increasingly needed along with the rise of attacks carried out by hackers with a specific purpose. Attacks that are common and generally easy for hackers to do are port scanning and Denial of Service (DOS). In this study, we will test the implementation of Snort in carrying out its function as an Intrusion Detection Prevention System (IDPS) when detecting port scanning and UDP flooding attacks using afpacket method. The performance test in this study uses the Quality of Service (QOS) measurement parameter on the client side which is accessing the web server at the time of testing the UDP flooding attack. Port scanning attacks are not measured using QOS, because they only function to see open ports. The throughput measurement results under normal conditions of 57081 bit/s then decreased when there was a UDP flooding attack to 56194 bit/s and increased again when Snort succeeded in detecting and blocking attacks to 64397 bit/s. The resulting delay value on a normal web server is 47.04 ms and increases during UDP flooding attacks to 50.63 ms and decreases to 33.52 ms when Snort is activated. The jitter generated when the web server is normal is 0.087 ms and decreases during a UDP flooding attack to 0.065 ms, then increases to 2.619 ms when Snort is activated. Packet loss value is 4.75% when UDP flooding and Snort are active. Key Words : Denial of Service, Intrusion Detection Prevention System, Port Scanning, Quality of Service, Snort

Actions (login required)

View Item