Hybrid Network Defense Model Based on Fuzzy Evaluation

Abstract

With sustained and rapid developments in the field of information technology, the issue of network security has become increasingly prominent. The theme of this study is network data security, with the test subject being a classified and sensitive network laboratory that belongs to the academic network. The analysis is based on the deficiencies and potential risks of the network's existing defense technology, characteristics of cyber attacks, and network security technologies. Subsequently, a distributed network security architecture using the technology of an intrusion prevention system is designed and implemented. In this paper, first, the overall design approach is presented. This design is used as the basis to establish a network defense model, an improvement over the traditional single-technology model that addresses the latter's inadequacies. Next, a distributed network security architecture is implemented, comprising a hybrid firewall, intrusion detection, virtual honeynet projects, and connectivity and interactivity between these three components. Finally, the proposed security system is tested. A statistical analysis of the test results verifies the feasibility and reliability of the proposed architecture. The findings of this study will potentially provide new ideas and stimuli for future designs of network security architecture.

Beyond the Quality of Service: Exploring the Evaluation Criteria of Airlines

“…Based on the ratings of each alternative and the weight of each criterion, Chen (2001) developed a multiple criteria decision-making process, with a final assessment value to determine the location of the distribution center. Cho and Pan (2014) based on the deficiencies and potential risks of the network's existing defense technology, establish an improvement over the traditional single-technology model that addresses the inadequacies. Table 3.…”

Incorporating a Honeyfarm With MLFFNN Ids for Improving Intrusion Detection

“…Reference [4] described a network defense model composed of a hybrid firewall module, IDS, and a virtual honeynet. Each are linked up to conduct real-time monitoring and detection [4]. The hybrid firewall segregates the model from the rest of the network and the internet.…”

“…The hybrid firewall ensures that connections outside the model is preventing malicious activity. Some issues to be investigatedinclude examining encrypted traffic, secure data communications between the components, and more study into early warnings to improve threat intelligence of the model [4].…”