A Network Safety-Defense Mechanism with the Linux Security Module

Abstract

With the increasing popularity of the Internet, more and more applications are extensively exploited on it. In the wake of that, malicious network behavior also occurs more and more frequently. Consequently, a network system must be enhanced to prevent attacks and invasions. Moreover, we usually use a gateway to connect network devices to share resources among them. The security mechanism of a gateway thus becomes an important part for network robustness. In this paper, we present a network security-defense mechanism developed with the Linux Security Modules (LSM) to prohibit ordinary invasive actions, like the Backdoor, Worm, Port Scan, and SYN Flooding attacks. Such a mechanism can be employed on a network gateway to nullify illegal network actions to improve its security.