Implementation of a Security System using Snort and Honeypot for Network Attack Detection and Prevention

This research is based on the increasing incidence of cyberattacks on network infrastructure, especially in the telecommunications sector, which demands an effective and sustainable network security system. The purpose of this study is to implement Snort as an Intrusion Detection System (IDS) and Honeypot as a decoy system to improve the ability to detect, monitor, and mitigate attacks on server networks. The research method used is action research, which includes the stage of diagnosis, action planning, implementation of actions, and reflection. The system implementation was carried out in a simulation environment using Kali Linux and VirtualBox as the virtualization platform. The test was carried out through attack simulations in the form of port scanning using Nmap, brute force attack using Hydra, and Denial of Service (DoS) simulations. The results showed that Snort was able to detect all attacks tested with a recall rate of 100% while Honeypot managed to redirect attacks and record attacker activity in detail. The integration of Snort and Honeypot has been proven to increase threat visibility and provide additional protection to the main server, making it effective as an open-source-based network security solution.