Implementasi Sistem Pendeteksi Intrusi Jaringan Berbasis Snort Pada Single-Board Computer Untuk Peningkatan Ketahanan Siber Lingkungan Pendidikan Militer Indonesia (Studi Kasus: Jaringan Data Akademi Angkatan Udara)
DOI:
https://doi.org/10.54706/senastindo.v7.2025.448Keywords:
Military Cybersecurity, Low-Cost Cyber Defense, Offline Packet AnalysisAbstract
Cyber threats to the Indonesian military's educational infrastructure continue to increase. This research develops a low-cost network intrusion detection system (NIDS) using Snort 3.9.5 on a 4 GB Raspberry Pi 4 Model B to detect three attack patterns that are most often the initial stage of complex attacks: port scanning, ICMP flood-based denial-of-service attacks, and brute-force authentication attempts against web application services and SSH. Testing was conducted in a controlled environment simulating the Air Force Academy's local network with two scenarios: unprotected and with the NIDS active in .pcap file-based offline analysis mode. Results showed a 100% detection rate with no false positives, an average power consumption of 5.1 W, and a maximum processor load of 31% when analyzing 15,553 packets. This solution provides a cost-effective cybersecurity alternative (total < Rp 2,000,000) and is easily replicated by other Indonesian Air Force units.
Downloads
References
[1] E. M. Hutchins, M. J. Cloppert, and R. M. Amin, “Intelligence-driven computer network defense informed by analysis of adversary campaigns and intrusion kill chains,” in Proc. 6th Int. Conf. Inf. Warfare Security (ICIW), Washington, DC, USA, 2011, pp. 113–125.
[2] A. Khraisat, I. Gondal, P. Vamplew, and J. Kamruzzaman, “Survey of intrusion detection systems: Techniques, datasets and challenges,” Cybersecurity, vol. 2, no. 1, Dec. 2019, Art. no. 20, doi: 10.1186/s42400-019-0038-7.
[3] R. Sommer and V. Paxson, “Outside the closed world: On using machine learning for network intrusion detection,” in Proc. IEEE Symp. Security Privacy (SP), Oakland, CA, USA, May 2010, pp. 305–316, doi: 10.1109/SP.2010.25.
[4] K. Scarfone and P. Mell, “Guide to intrusion detection and prevention systems (IDPS),” Nat. Inst. Standards Technol., Gaithersburg, MD, USA, NIST Special Publication 800-94, Feb. 2007. [Online]. Available: https://doi.org/10.6028/NIST.SP.800-94
[5] E. Upton and G. Halfacree, Raspberry Pi User Guide, 5th ed. Hoboken, NJ, USA: Wiley, 2022.
[6] Raspberry Pi Foundation, “Raspberry Pi 4 Model B product brief,” Raspberry Pi Foundation, Cambridge, U.K., Datasheet, Jul. 2024. [Online]. Available: https://www.raspberrypi.com/documentation/computers/raspberry-pi.html
[7] M. Roesch, “Lightweight intrusion detection system,” U.S. Patent 7 188 178 B2, Mar. 6, 2007.
[8] M. N. Schmitt, Ed., Tallinn Manual 2.0 on the International Law Applicable to Cyber Operations, ser. International Cyber Law Series. Cambridge, U.K.: Cambridge Univ. Press, 2017, vol. 2.
[9] Snort Team, Snort 3 User Manual and Rule Writing Guide, Cisco Systems, San Jose, CA, USA, 2024. [Online]. Available: https://docs.snort.org/
[10] R. Fauzi, “Sistem keamanan jaringan komputer berbasis teknik intrusion detection system (IDS) untuk mendeteksi serangan distributed denial of service,” M.S. thesis, Dept. Inf. Technol., Univ. Pendidikan Indonesia, Bandung, Indonesia, 2023.
[11] Mandiant, “M-Trends 2024: Special report,” Mandiant, 2024. [Online]. Available: https://www.mandiant.com/resources/reports/m-trends-2024 (Diakses: 15 Nov. 2025).
Downloads
Published
How to Cite
Issue
Section
Categories
License
Copyright (c) 2025 Muhammad Fahrurozi, Ardian Infantono, Indra Listyanto
This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.
