 |
Firstly, the firewall divides equipment into different parts and verifies identities; afterward, the intrusion-detection system creates Virtual Local Area Networks (VLANs) for separation, preventing malicious users from accessing critical equipment.
Meanwhile, the intrusion-detection system will also track users¡¯ online behaviors; when detecting unusual behaviors, the system temporarily suspends the user¡¯s action. Users¡¯ unusual behaviors vary; for example, when a user¡¯s login location changes dramatically within one hour, it probably means the user has experienced hackers¡¯ invasion and conducted attacks in many countries using IP hopping.
The proposed design also contains a multi-factor authentication mechanism, using various identity authentication methods to verify legal users.
For instance, users can access private blockchains to conduct further actions when confirmed and authorized; if they fail to pass the verification three times, the system will lock their IP locations. This study aims to create a complete network security architecture, making private blockchains safer and avoiding data leakage.
|
IEEE/ICACT20240064 Slide.08
[Big Slide]
[YouTube]