Visible to the public Experimental Evaluation of Security Monitoring and Notification on Network Intrusion Detection System for Server Security

TitleExperimental Evaluation of Security Monitoring and Notification on Network Intrusion Detection System for Server Security
Publication TypeConference Paper
Year of Publication2021
AuthorsHelmiawan, Muhammad Agreindra, Julian, Eggi, Cahyan, Yavan, Saeppani, Asep
Conference Name2021 9th International Conference on Cyber and IT Service Management (CITSM)
KeywordsForce, Human Behavior, Network, network intrusion detection, policy-based governance, Protocols, Prototypes, pubcrawl, Real-time Systems, resilience, Resiliency, security, security weaknesses, server security, Servers
AbstractSecurity of data and information in servers connected to networks that provide services to user computers, is the most important thing to maintain data privacy and security in network security management mechanisms. Weaknesses in the server security system can be exploited by intruders to disrupt the security of the server. One way to maintain server security is to implement an intrusion detection system using the Intrusion Detection System. This research is experimenting to create a security system prototype, monitoring, and evaluating server security systems using Snort and alert notifications that can improve security monitoring for server security. The system can detect intrusion attacks and provide warning messages and attack information through the Intrusion Detection System monitoring system. The results show that snort and alert notifications on the security server can work well, efficiently, and can be handled quickly. Testing attacks with Secure Shell Protocol and File Transfer Protocol Brute Force, Ping of Death and scanning port attacks requires a detection time of no more than one second, and all detection test results are detected and send real-time notification alerts to the Administrator.
DOI10.1109/CITSM52892.2021.9588988
Citation Keyhelmiawan_experimental_2021