Implementation and Analysis of Network Security in Raspberry Pi against DOS Attack with HIPS Snort

Cyber-attack is an inevitable risk from any business in internet era. Cyber-attack can originate from both internal employees and external sources. The office network can be in danger due to cyber-attack and can disturb the workflow. This issue can be prevented by Host Intrusion Prevention System (HIPS) Snort that secures the network through smart security in a box system with Raspberry Pi as the firewall to protect the user devices against Denial of Service (DoS) attacks. Raspberry Pi is configured to be the firewall with installing the HIPS Snort as a defence system to protect the user's work devices. This smart security in a box is installed between the user's devices before connected to the office network. The smart security in a box detects the misuse in the network for all data packets that are suspected of being DoS attacks and drops them. DoS attacks using SYN Flood and UDP Flood are going to put Snort to the test. The successful client connection when Snort is running are only the average of 48.60% and 46.31% for SYN Flood and UDP Flood attack respectively. When Snort is running, HIPS Snort can drop the average of 41.48% of SYN Flood attack and 28.27% of UDP Flood attack packets. CPU and Memory usage are higher when Snort is running. DoS SYN Flood attack consumes more CPU and Memory usage of Raspberry Pi with the average of 83.60% and 76.75% respectively when Snort is running.