Efficiency Increase of Intrusion Detection System with Honey Pot for Transmission New Media Broadcasting via Internet

Abstract

This paper presents how Honeypot can help enhancing the efficiency of the Intrusion Detection Systems (IDS) in cyber security. Honeypot will distract, delay, or deviate hackers from attacking the computer network. There are three attacking technique which cause Denial of Service (DOS), delay or deviate: SYN Flood, UDP Flood and Smurf Flooding. Honeyd, a part of Honeypot will be used to create a virtual computer or a virtual server within a particular secured network, without firewall or any other forms of security. Only Honeypot will be deployed on the network, while the Snort program will be used on IDS. All programs will be developed as Open Source on Linux OS. As a result of test on the internal and external network attack via switch and router device by attacker send 1,000 packet to system, we found that we can enhance the efficiency of the Intrusion Detection Systems (IDS) in cyber security by using Honeypot. The attacked rates on LAN network and WLAN network were not much different. However, comparing SYN Flood attack and Smurf Flooding attack. In summary, the attack results from internal network will result in an attack of more than 18% of all attacks from external attacks. In every attack through the network will have an attack effect about 8% of the average wireless attack on every experiment means that the network that is transmitting new media through the Internet must be protected. SYN Flood attacks and internal attacks are the most dangerous. Finally, HoneyPot can reduce the impact of the attack by about 7%.