PENGGUNAAN SNORT SEBAGAI SISTEM PENDETEKSI SERANGAN PADA JARINGAN MENGGUNAKAN NOTIFIKASI TELEGRAM (STUDI KASUS: DINAS KOMUNIKASI INFORMATIKA DAN PERSANDIAN KABUPATEN SUKABUMI)

Network security has become very important to protect individuals, companies, and agencies from threats such as cyberattacks, and data theft. Therefore, understanding the importance of network security is essential. Based on the interview results, there is a server in the Sukabumi District Command Center managed by DISKOMINFOSAN Sukabumi District, the server is used as an application server. There is no network security monitoring system on the server to notify users in real time of attempted server attacks. Using an intrusion detection system is one method of strengthening server security (IDS). IDS is a system designed to identify potentially harmful behavior or network attacks. One of the main goals of IDS is to provide warnings against security threats that may occur. Snort is one of the open-source IDS tools. Snort was created to identify network attacks and provide realtime alerts to administrators when identifying certain behaviors or attack patterns. In this study the authors used the SPDLC development method. Security Policy Development Life Cycle (SPDLC) is a system development method that focuses on network security. After testing, it can be concluded that Snort can be used as an IDS installed on ubuntu server 22.04, with the rules that have been made Snort can detect when someone tries port scanning to the server using masscan and can detect ping attacks aimed at the server in real time. With the script that has been created, Snort can send alerts to network administrators using telegram in realtime so that these alerts can be followed up immediately.

Keywords: Command Center, DISKOMINFOSAN Kab.Sukabumi, Intrusion Detection System (IDS), Security Policy Development Life Cycles (SPDLC), Server, Snort, Telegram