Pengembangan Sistem Deteksi Dan Respon Pada Distributed Intrusion Detection System Menggunakan Mobile Agent Based On Community

Andrijasa, Muhammad Farman (2009) Pengembangan Sistem Deteksi Dan Respon Pada Distributed Intrusion Detection System Menggunakan Mobile Agent Based On Community. Masters thesis, Institut Teknologi Sepuluh Nopember.

Text 5107201013-Master_thesis.pdf Restricted to Repository staff only Download (50MB)

Abstract

Beberapa solusi timbul dalam mencegah sistem terhadap intrusi, namun kebanyakan perlindungan terhadap sistem diaktifkan hanya apabila terjadi penerobosan sistem keamanan. Kedua, teknik-teknik saat ini mencoba untuk memperbaiki keseluruhan permasalahan besar yang ada hanya dengan menggunakan peralatan kecil seperti firewall, antivirus, serta sistem Intrusion Detection and Prevention. Oleh karena itu, ada kebutuhan untuk membangun sebuah strategi menggunakan Mobile Agent yang selanjutnya mengoperasikan hal-hal yang bersifat reaktif dan proaktif, sehingga tujuan akhir dari pengamanan sistem secara keseluruhan dapat dicapai. Sistem diasumsikan aman apabila akses yang tidak diberi kuasa (penetrasi) tidak mungkin terjadi dan sistem selamat dari kerusakan. Beberapa model mobile agent telah diusulkan para peneliti untuk menangani permasalahan ini. Kebanyakan strategi yang diusulkan terdiri dari tiga aspek, yaitu (a) secara mandiri dan terus-menerus mendeteksi vulnerability pada host yang berlainan (dalam jaringan terdistribusi) sebelum penyerang dapat melakukan exploit, (b) melindungi host dengan mendeteksi usaha-usaha intrusi dan merespons dalam waktu cepat (real-time), dan terakhir (c) menyelenggarakan tugas-tugas yang berhubungan dengan manajemen keamanan. Pada tesis ini akan diusulkan model mobile agent based on community sebagai pengembangan dari model-model mobile agent pada Distributed Intrusion Detection System (DIDS) yang telah ada. Strategi pengembangan ini bertujuan untuk mengembangkan fungsi mobile agent yang secara mandiri terus-menerus memperbarui informasi dan aktif ikut serta dalam pertukaran informasi tentang vulnerability dan exploit sebelum kejadian tersebut terjadi di sistem kita. Dengan demikian, sistem deteksi dan respons pada DIDS akan menjadi lebih real-time.
====================================================================================================================================
Some solutions have been proposed to prevent systems from intrusion, but most system protection mechanisms are activated only when a security breach occurs. Second, current techniques attempt to address the overall security problems using individual tools such as firewalls, antivirus software, and Intrusion Detection and Prevention Systems. Therefore, there is a need to develop a strategy using mobile agents to implement both reactive and proactive approaches. Thus, the overall goal of system security can be achieved. Some mobile agent models have been proposed by researchers to address these problems. Most of the proposed strategies consist of three aspects: (a) continuously and independently detecting vulnerabilities on different hosts in a distributed network before attackers can exploit them, (b) protecting hosts by detecting intrusion attempts and responding in real time, and finally (c) performing tasks related to security management. In this thesis, a mobile agent based on community model is proposed as an extension of existing mobile agent models applied to the Distributed Intrusion Detection System (DIDS). This development strategy aims to enhance the capabilities of mobile agents to continuously update information independently and actively participate in exchanging information about vulnerabilities and exploits before they occur in the system. Thus, the detection and response system in the DIDS can operate more effectively in real time.

Item Type:	Thesis (Masters)
Additional Information:	RTIf 004.6 And p
Uncontrolled Keywords:	Network Security, Intusion Detection System, Intrusion Prevention System, Mobile Agent, Network Security, Intrusion Detection System, Intrusion Prevention System, Mobile Agent.
Subjects:	T Technology > TK Electrical engineering. Electronics Nuclear engineering > TK5105.543 Routers (Computer networks)
Divisions:	Faculty of Information Technology > Informatics Engineering > 55101-(S2) Master Thesis
Depositing User:	magang .
Date Deposited:	21 Sep 2026 04:47
Last Modified:	21 Sep 2026 04:47
URI:	http://repository.its.ac.id/id/eprint/144730

Actions (login required)

View Item