<![CDATA[AbstrakPenelitian ini mengevaluasi kinerja dan keamanan jaringan di Disdukcapil Kabupaten Tasikmalaya yang rentan karena belum memiliki sistem keamanan memadai. Menggunakan metode Network Development Life Cycle (NDLC) dan simulasi Graphical Network Simulator-3 (GNS3), diimplementasikan Intrusion Detection System (IDS) berbasis Snort yang diintegrasikan dengan iptables sebagai IPS. Hasil menunjukkan serangan SYN Flood menurunkan throughput hingga 99,99% dan meningkatkan latency 95 kali lipat. Snort berhasil mendeteksi seluruh serangan dengan detection rate 100%, sementara mekanisme IPS auto-block memulihkan performa jaringan mendekati kondisi normal. Penelitian ini merekomendasikan solusi keamanan open-source yang efektif dan ekonomis bagi instansi pemerintah.Kata kunci: Snort, keamanan jaringan, quality of service, NDLC, GNS3, IPSAbstractThis study evaluates the network performance and security of Disdukcapil Tasikmalaya Regency, which is vulnerable due to the lack of security systems. Using the Network Development Life Cycle (NDLC) method and Graphical Network Simulator-3 (GNS3) simulation, a Snort-based Intrusion Detection System (IDS) integrated with iptables as an IPS was implemented. Results show that SYN Flood attacks reduce throughput by 99.99% and increase latency 95-fold. Snort successfully detected all attacks with a 100% detection rate, while the IPS auto-block mechanism restored network performance close to normal. This research recommends an effective and economical open-source security solution for government agencies.Keywords: Snort, network security, quality of service, NDLC, GNS3, IPS]]>
