Implementasi Sistem Pendeteksi Intrusi Jaringan Berbasis Snort Pada Single-Board Computer Untuk Peningkatan Ketahanan Siber Lingkungan Pendidikan Militer Indonesia (Studi Kasus: Jaringan Data Akademi Angkatan Udara)
DOI:
https://doi.org/10.54706/senastindo.v7.2025.448Kata Kunci:
Keamanan Siber Militer, Low-Cost Cyber Defense, Offline Packet AnalysisAbstrak
Ancaman siber terhadap infrastruktur pendidikan kedinasan militer Indonesia terus meningkat. Penelitian ini mengembangkan sistem deteksi intrusi jaringan (NIDS) berbiaya rendah menggunakan Snort 3.9.5 pada Raspberry Pi 4 Model B 4 GB untuk mendeteksi tiga pola serangan yang paling sering menjadi tahap awal serangan kompleks: pemindaian port, serangan penolakan layanan berbasis ICMP flood, dan percobaan autentikasi berulang (brute-force) terhadap layanan aplikasi web serta SSH. Pengujian dilakukan dalam lingkungan terkontrol yang mensimulasikan jaringan lokal Akademi Angkatan Udara dengan dua skenario: tanpa perlindungan dan dengan NIDS aktif dalam mode analisis offline berbasis file .pcap. Hasil menunjukkan tingkat deteksi 100 % tanpa false positive, konsumsi daya rata-rata 5,1 W, dan beban prosesor maksimum 31 % saat menganalisis 15.553 paket. Solusi ini memberikan alternatif keamanan siber yang hemat biaya (total < Rp 2.000.000) dan mudah direplikasi oleh satuan TNI Angkatan Udara lainnya
Unduhan
Referensi
[1] E. M. Hutchins, M. J. Cloppert, and R. M. Amin, “Intelligence-driven computer network defense informed by analysis of adversary campaigns and intrusion kill chains,” in Proc. 6th Int. Conf. Inf. Warfare Security (ICIW), Washington, DC, USA, 2011, pp. 113–125.
[2] A. Khraisat, I. Gondal, P. Vamplew, and J. Kamruzzaman, “Survey of intrusion detection systems: Techniques, datasets and challenges,” Cybersecurity, vol. 2, no. 1, Dec. 2019, Art. no. 20, doi: 10.1186/s42400-019-0038-7.
[3] R. Sommer and V. Paxson, “Outside the closed world: On using machine learning for network intrusion detection,” in Proc. IEEE Symp. Security Privacy (SP), Oakland, CA, USA, May 2010, pp. 305–316, doi: 10.1109/SP.2010.25.
[4] K. Scarfone and P. Mell, “Guide to intrusion detection and prevention systems (IDPS),” Nat. Inst. Standards Technol., Gaithersburg, MD, USA, NIST Special Publication 800-94, Feb. 2007. [Online]. Available: https://doi.org/10.6028/NIST.SP.800-94
[5] E. Upton and G. Halfacree, Raspberry Pi User Guide, 5th ed. Hoboken, NJ, USA: Wiley, 2022.
[6] Raspberry Pi Foundation, “Raspberry Pi 4 Model B product brief,” Raspberry Pi Foundation, Cambridge, U.K., Datasheet, Jul. 2024. [Online]. Available: https://www.raspberrypi.com/documentation/computers/raspberry-pi.html
[7] M. Roesch, “Lightweight intrusion detection system,” U.S. Patent 7 188 178 B2, Mar. 6, 2007.
[8] M. N. Schmitt, Ed., Tallinn Manual 2.0 on the International Law Applicable to Cyber Operations, ser. International Cyber Law Series. Cambridge, U.K.: Cambridge Univ. Press, 2017, vol. 2.
[9] Snort Team, Snort 3 User Manual and Rule Writing Guide, Cisco Systems, San Jose, CA, USA, 2024. [Online]. Available: https://docs.snort.org/
[10] R. Fauzi, “Sistem keamanan jaringan komputer berbasis teknik intrusion detection system (IDS) untuk mendeteksi serangan distributed denial of service,” M.S. thesis, Dept. Inf. Technol., Univ. Pendidikan Indonesia, Bandung, Indonesia, 2023.
[11] Mandiant, “M-Trends 2024: Special report,” Mandiant, 2024. [Online]. Available: https://www.mandiant.com/resources/reports/m-trends-2024 (Diakses: 15 Nov. 2025).
Unduhan
Diterbitkan
Cara Mengutip
Terbitan
Bagian
Kategori
Lisensi
Hak Cipta (c) 2025 Muhammad Fahrurozi, Ardian Infantono, Indra Listyanto
Artikel ini berlisensiCreative Commons Attribution-ShareAlike 4.0 International License.
