Internal Threat Defense using Network Access Control and Intrusion Prevention System

Abstract

This study aims to create a network security system that can mitigate attacks carried out by internal users and to reduce attacks from internal networks. Further, a network security system is expected to be able to overcome the difficulty of mitigating attacks carried out by internal users and to improve network security. The method used is to integrate the ability of Network Access Control (NAC) and the Intrusion Prevention System (IPS) that have been designed and implemented in this study, then an analysis is performed to compare the results of tests that have been carried out using only the NAC with the results using integration of NAC capabilities and IPS. The results obtained from the tests that have been carried out, namely, the security system by using the integration of NAC and IPS capabilities is better than using only the NAC.

Evaluation of Data Center Network Security based on Next-Generation Firewall

“…The test results obtained that the integration of cisco ISE as Network Access Control (NAC) and Cisco Firepower 8250 devices as IPS can prevent attacks to HTTP ports, SQL Injection, and OS Bash Injection Attack the server from internal attacks. Compared to using only NAC devices because Cisco ISE devices can not prevent such attacks [4].…”

Strengthening Network Security: Evaluation of Intrusion Detection and Prevention Systems Tools in Networking Systems

“…It is crucial to safeguard computer networks and systems from unauthorized access and malicious activities. IDPS monitors network traffic and analyzes it for any signs of suspicious or malicious behavior [17]- [19]. IDPS includes detecting and preventing unauthorized access attempts, malware attacks, and other security breaches [20], [21].…”