Text

Implementasi Snort pada Simulator GRFICSv2 Sebagai Sarana Pembelajaran di Poltek SSN

---

Abstrak:
Pada beberapa tahun terakhir kasus kejahatan siber semakin meningkat serta target serangan semakin beragam. Industrial Control System (ICS) sebagai infrastruktur kritis juga berkemungkinan untuk menjadi target serangan siber. Politeknik Siber dan Sandi Negara (Poltek SSN) memiliki program studi Rekayasa Keamanan Siber (RKS) yang bertujuan mencetak praktisi keamanan siber nasional. Lulusan Poltek SSN harus mampu menjawab tantangan keamanan siber nasional, seperti tantangan mengamankan ICS. Untuk meningkatkan keterampilan taruna Poltek SSN dapat dilakukan pembelajaran yang mampu memberikan simulasi terkait proses fisik ICS. Penelitian ini menggunakan simulator Graphical Realism Framework for Industrial Control Simulation versi 2 (GRFICSv2) untuk memberikan gambaran mengenai proses fisik ICS dengan penambahan aspek keamanan berupa Intrusion Detection System (IDS) Snort. Pada penelitian ini digunakan dua contoh simulasi serangan yaitu Injecting Malicious Modbus Command dan Uploading Malicious PLC Program. Diperlukan tools tambahan berupa Kali Linux untuk menjalankan serangan. Serangan dilakukan dengan menargetkan simulator dan IDS Snort memberikan informasi atau alert saat terjadi serangan yang menargetkan simulator. Untuk mengetahui apakah dengan adanya simulator dapat memudahkan taruna Poltek SSN dalam memahami proses fisik ICS dilakukan pengujian pemahaman berupa pre-test dan post-test kepada taruna Poltek SSN. Data hasil pengujian yang didapatkan diolah menggunakan uji-t berpasangan untuk mengetahui perbedaan nilai rata-rata sebelum dan sesudah adanya simulator. Penelitian ini menunjukkan IDS Snort dapat diintegrasikan dengan simulator dan mampu memberikan peringatan saat terjadi serangan yang menargetkan simulator.
Abstract:
In recent years, cyber crime cases have increased and the targets of attacks have become more diverse. Industrial Control System (ICS) as a critical infrastructure is also likely to be the target of cyber attacks. Politeknik Siber dan Sandi Negara (Poltek SSN) has a Cyber Security Engineering (RKS) study program that aims to produce national cyber security practitioners. SSN Polytechnic graduates must be able to answer national cyber security challenges, such as the challenge of securing ICS. To improve the skills of SSN Polytechnic cadets, learning can be done that is able to provide simulations related to the physical process of ICS. This research uses the Graphical Realism Framework for Industrial Control Simulation version 2 (GRFICSv2) simulator to provide an overview of the physical process of ICS with the addition of security aspects in the form of Intrusion Detection System (IDS) Snort. In this research, two examples of attack simulation are used, namely Injecting Malicious Modbus Command and Uploading Malicious PLC Program. Additional tools in the form of Kali Linux are required to run the attack. The attack is carried out by targeting the simulator and IDS Snort provides information or alerts when there is an attack targeting the simulator. To find out whether the simulator can make it easier for SSN Polytechnic cadets to understand the physical process of ICS, an understanding test in the form of a pre-test and post-test was conducted to SSN Polytechnic cadets. The test result data obtained is processed using a paired t-test to determine the difference in average values before and after the simulator. This research shows that Snort IDS can be integrated with the simulator and is able to provide warnings when an attack targets the simulator.

---

Availability

No copy data

Detail Information

Series Title

--

Call Number

2023 MAR i

Publisher

Bogor : Politeknik Siber dan Sandi Negara., 2023

Collation

xv, 90 halaman

Language

Indonesia

ISBN/ISSN

--

Classification

Rekayasa Keamanan Siber

Content Type

-

Media Type

-

Carrier Type

-

Edition

--

Subject(s)

Poltek SSN
ICS
Simulator
Uji-t berpasangan

Specific Detail Info

-

Statement of Responsibility

Marcella Risky Avianti

Other version/related

File Attachment

Comments

---

You must be logged in to post a comment