Penerapan Snort Dalam Mendeteksi Penyerangan Pada Sistem Keamanan Jaringan Komputer SMKN 2 Seluma

Abstract

This research focuses on deploying Snort as an Intrusion Detection System (IDS) to fortify the computer network security at SMK Negeri 2 Seluma, specifically targeting the protection of school servers and network infrastructure. Empirical testing demonstrated that the system successfully detected Ping of Death attacks by identifying anomalous Internet Control Message Protocol (ICMP) traffic, consequently generating high-priority alerts. During malware evaluation, Snort effectively flagged the EICAR Standard Anti-Virus Test File when accessed through PowerShell; however, it failed to recognize the payload when downloaded via a standard web browser. Furthermore, the system successfully identified simulated W32/ProxyBack trojan activity executed via HTTP CONNECT communications using PowerShell, triggering maximum-priority alerts to indicate a critical threat level.