Implementasi Intrusion Prevention System (IPS) Pada Software Defined Network (SDN) Menggunakan Ryu Controlle

Bima, Setiyadi (2021) Implementasi Intrusion Prevention System (IPS) Pada Software Defined Network (SDN) Menggunakan Ryu Controlle. Diploma thesis, Institut Teknologi Telkom Purwokerto.

	Text cover.pdf Download (840kB)
	Text abstract.pdf Download (188kB)
	Text abstrak.pdf Download (188kB)
	Text bab 1.pdf Download (318kB)
	Text bab 2.pdf Download (752kB)
	Text bab 3.pdf Download (475kB)
	Text bab 4.pdf Restricted to Registered users only Download (1MB) | Request a copy
	Text bab 5.pdf Download (306kB)
	Text daftar pustaka.pdf Download (200kB)
	Text LAMPIRAN (2).pdf Restricted to Registered users only Download (327kB) | Request a copy

Abstract

SDN is a technology that separates the control plane and the data plane. The control plane functions to configure network devices using the SDN controller while the data plane functions to forward information packets. The controller is the main control for the network and is centralized, if this section is successfully attacked then the entire network can be taken over. If SDN resources are attacked with Denial Of Service, SYN Flooding will consume network resources, causing the SDN controller to be unable to serve SDN network user requests. One of the efforts to overcome this problem is to use an IPS security system because it can prevent DoS attacks by using the snort application to block attacks in real time. The tests carried out tested the performance of QoS parameters with a DoS SYN Flood attack using the hping3 application in the form of Throughput, Latency, CPU Load and memory usage before and after the implementation of the IPS security system with test scenarios before the attack, during the attack and during blocking. The results obtained in this study on the results of QoS throughput before the attack had an average of 22.536 Gb/s, during an attack 14,163 Gb/s, when blocking 14.926 Gb/s. In the results of QoS Latency before the attack was 0.10643& ms, the average during the attack was 0.11893 ms, when blocking had an average of 0.0461 ms. In the QoS CPU Load results before the attack 26.92%, during the attack 100.416%, when blocking 99.093%. In memory QoS results before attack 4.08%, during attack 0.1%, when blocking 18%. And the conclusion is that the implementation of using IPS has proven to be effective in detecting and blocking Denial Of Service attacks so as to improve the quality of the security system on the SDN network. Keywords: Software-Defined Network , Denial Of Service, Throughput, bandwidth,Latency, Intrusion Prevention System..

Actions (login required)

View Item