Analisis Kinerja Suricata terhadap Serangan Brute Force pada Server SSH
Keywords:
brute force, Suricata, NIDS, network security, Ubuntu ServerAbstract
Secure Shell (SSH) services are vulnerable to brute force attacks, yet literature remains limited in analyzing internal mechanisms affecting Detection Rate (DR) under high-speed attacks. This study analyzes Suricata Network Intrusion Detection System (NIDS) performance on Ubuntu Server 24.04 LTS using a quantitative experimental method. Suricata inspects port 22 traffic in real-time via signature-based rules. Evaluation began with False Positive Rate (FPR) testing, followed by two scenarios: Scenario I (baseline) and Scenario II (Suricata). Results showed FPR 0.000% (True Negative (TN) = 4, False Positive (FP) = 0). In Scenario I, Suricata was inactive, so no detection occurred. Scenario II recorded a DR of 86.969 ± 0.801%. DR below 100% was triggered by OpenSSH connection refusals when exceeding MaxStartups (10:30:100) sending TCP RST/RST-ACK packets, terminating sessions before Suricata finished reassembling packet data. Throughput was 19.677 Kbps (Scenario I) and 19.948 Kbps (Scenario II). Packet loss 0.000% (Scenario I) and 0.053% (Scenario II). Central Processing Unit (CPU) load was 3.099%. (Scenario I) and 4.332% (Scenario II), while Random Access Memory (RAM) load was 25.732 MB (Scenario I) and 18.162 MB (Scenario II), with idle RAM overhead 48.035 MB (2.345% of total RAM). Suricata proves precise and efficient, yet requires active mitigation.
Downloads
References
T. Ariyadi, M. A. Nuriansyah, E. Rahmadan, and D. Saputra, “Keamanan FTP Server Berbasiskan IPS Menggunakan Sistem Operasi Linux Ubuntu Versi 24.04. Jurnal Penelitian Multidisiplin Bangsa,” JURNAL PENELITIAN MULTIDISIPLIN BANGSA, vol. 2, no. 1, pp. 49–55, Jun. 2025, doi: https://doi.org/10.59837/jpnmb.v2i1.428.
B. R. Utomo, N. H. J. A, A. K. Jati, I. A. Saputro, and Moch. H. Purwidiantoro, “Analisis implementasi keamanan jaringan dengan fail2ban terhadap serangan bruteforce,” in SEMINAR NASIONAL AMIKOM SURAKARTA (SEMNASA), Nov. 2024, pp. 1211–1223. Accessed: Aug. 08, 2026. [Online]. Available: https://ojs.amikomsolo.ac.id/index.php/semnasa/article/view/634
T. M. Diansyah, I. Faisal, A. Perdana, B. O. Sembiring, and T. H. Sinaga, “Analysis Of Using Firewall And Single Honeypot In Training Attack On Wireless Network,” in Journal of Physics: Conference Series 930 012038, IOP Publishing, 2017. doi: 10.1088/1742-6596/930/1/012038.
Farhannullah and M. Hardjianto, “Sistem Monitoring Serangan SSH Dengan Metode Intrusion Prevention System (IPS) Fail2ban Menggunakan Python Pada Sistem Operasi Linux,” Jurnal TICOM: Technology of Information and Communication, vol. 11, no. 1, pp. 33–38, Sep. 2022, doi: https://doi.org/10.70309/ticom.v11i1.68.
P. Balqis and R. Rahman, “Analisis Keamanan Layanan SSH terhadap Brute Force Attack,” Merkurius: Jurnal Riset Sistem Informasi dan Teknik Informatika, vol. 3, no. 4, pp. 240–246, Jul. 2025, doi: 10.61132/merkurius.v3i4.949.
M. Ridho, A. Hafizh, I. Dani, and T. Ariyadi, “Peningkatan Keamanan SSH Server Berbasis Linux melalui Implementasi Fail2Ban dan Uji Serangan Brute Force,” Jurnal Penelitian Multidisiplin Bangsa, vol. 1, no. 12, pp. 2206–2214, 2025, doi: https://doi.org/10.59837/jpnmb.v1i12.431.
B. Raharjo, Keamanan SISTEM INFORMASI. Semarang: Yayasan Prima Agus Teknik, 2021.
M. H. Qutqut, A. Ahmed, M. K. Taqi, J. Abimanyu, E. T. Ajes, and F. Alhaj, “A Comparative Evaluation of Snort and Suricata for Detecting Data Exfiltration Tunnels in Cloud Environments,” Journal of Cybersecurity and Privacy, vol. 6, no. 1, Feb. 2026, doi: 10.3390/jcp6010017.
Open Information Security Foundation, “Suricata User Guide,” Suricata Documentation. Accessed: May 06, 2026. [Online]. Available: https://docs.suricata.io/en/suricata-8.0.6/
M. Zaini, A. Atthariq, and A. Anwar, “Implementasi Intrusion Detection System Menggunakan Suricata Pada Jaringan Komputer,” Jurnal Teknologi Rekayasa Informasi dan Komputer, vol. 8, no. 2, pp. 30–38, Sep. 2025, doi: 10.30811/jtrik.v8i2.7440.
O. Rivaldi and N. L. Marpaung, “Penerapan Sistem Keamanan Jaringan Menggunakan Intrusion Prevention System Berbasis Suricata,” JURNAL INOVTEK POLBENG, vol. 8, no. 1, pp. 141–153, 2023, Accessed: Aug. 08, 2026. [Online]. Available: https://pdfs.semanticscholar.org/d427/9b536209c0ddd30d641f3794e6edcbf138a2.pdf
A. A. Kurniawan, Jusak, and Musayyanah, “Intrusion Detection System Using Deep Learning for DoS Attack Detection,” JEECS (Journal of Electrical Engineering and Computer Sciences), vol. 6, no. 2, pp. 1087–1098, Dec. 2021, doi: 10.54732/jeecs.v6i2.203.
S. Khadafi, D. Y. Pratiwi, and E. Alfianto, “KEAMANAN FTP SERVER BERBASISKAN IDS DAN IPS MENGGUNAKAN SISTEM OPERASI LINUX UBUNTU,” Jurnal Ilmiah NERO, vol. 6, no. 1, p. 2021, 2021, Accessed: Aug. 08, 2026. [Online]. Available: https://www.researchgate.net/publication/351031729_KEAMANAN_FTP_SERVER_BERBASISKAN_IDS_DAN_IPS_MENGGUNAKAN_SISTEM_OPERASI_LINUX_UBUNTU
T. Ylonen and C. Lonvick, “RFC 4253: The Secure Shell (SSH) Transport Layer Protocol,” Jan. 2006. Accessed: Aug. 05, 2026. [Online]. Available: https://datatracker.ietf.org/doc/html/rfc4253
K. B. A. Nurcahyo and A. Prihanto, “ANALISIS QUALITY OF SERVICE (QOS) PADA JARINGAN VLAN (VIRTUAL LOCAL AREA NETWORK),” Journal of Informatics and Computer Science, vol. 03, 2021, doi: https://doi.org/10.26740/jinacs.v3n01.p62-70.
D. Wahyudi, M. Mujiono, and M. Nur Fu’ad, “Analisis Quality of Service (QoS) pada Jaringan Nirkabel di Akademi Komunitas Negeri Putra Sang Fajar Blitar Berdasarkan Standar Parameter TIPHON: Studi Kasus Program Studi Administrasi Server dan Jaringan Komputer,” JAMI: Jurnal Ahli Muda Indonesia, vol. 5, no. 2, pp. 164–171, Dec. 2024, doi: 10.46510/jami.v5i2.343.
OpenBSD, “OpenSSH Manual Pages,” OpenSSH Manual Pages. Accessed: May 07, 2026. [Online]. Available: https://www.openssh.org/manual.html
The Kernel Development Community, “The Linux Kernel documentation,” The Linux Kernel. Accessed: Aug. 04, 2026. [Online]. Available: https://docs.kernel.org/
Downloads
Published
Issue
Section
License
Copyright (c) 2026 Ivan Jacobus Hutauruk Hutauruk, Tengku Mohd Diansyah
This work is licensed under a Creative Commons Attribution 4.0 International License.
Universitas Harapan Medan
.png)
.png)
.png)
.png)
.png)
