Corporate Networks Research Articles

Modeling and optimization of a computer corporate network with priority service "Elections"

Analyzed indicators modeling and optimization of a computer corporate network with priority service "Elections". The urgency of designing corporate computer networks and providing quality of service (QoS – Quality of Service) is based on the fact that the work was carried out in accordance with the design plan of the State Automated Information System "Elections" and the application new equipment and technology. The purpose of the work: development of methods for calculating the probability denial of the flood inquiries in corporate computer networks and the probability of timely delivery preparation proposals on the selection and effective use telecommunications equipment when creating corporate computer networks development methods for optimizing the parameters of telecommunication nodes operating with different service systems. Using analytical models of a computer corporate communication network, the probabilities loss and timely delivery of requests are determined. The work of the corporate communication network "Elections" of the Republic of Azerbaijan has been studied.

Design and Development of an Efficient Network Intrusion Detection System using Ensemble Machine Learning Techniques for Wifi Environments

Intrusion Detection Systems(IDS) are vital for com-puter networks as they protect against attacks that lead to privacy breaches and data leaks. Over the years, researchers have formulated IDS using machine learning (ML) and/or deep learning(DL) to detect network anomalies and identify attacks. Network Intrusion Detection Systems (NIDS) within corporate networks is a form of security that detects and generates an alarm for any cyberattacks. In both academia and industry, the concept of deploying a NIDS has been studied and adopted. The majority of NIDS research, on the other hand, has focused on detecting threats that emerge from outside of a wired connection. In addition, the NIDSs recognize Wi-Fi and wired networks alike. The Wi-Fi network’s accessible connectivity distinguishes this from the wired network. A wired connection is highly resistant to many insider threats that could occur on a Wi-Fi router. A conventional view to developing NIDSs may miss malicious activities. This paper aims to design a multi-level NIDS for Wi-Fi predominant networks to identify both organizational Wi-Fi networks malicious activity and standard network malicious activity. Wi-Fi devices are common on campuses and businesses, and they are incorporated into the fixed wired network at the gateway. Wi-Fi networks are the primary target for this implementation; however, they are also designed to function in wired environments. For the Multi-Level NIDS, the proposed model used an ensemble learning method that pools the strengths of multiple weak learners into a single strong learner.

An Enhanced Traffic Split Routing Heuristic for Layer 2 and Layer 1 Services

Virtual Private Networks (VPNs) have now taken an important place in computer and communication networks. A virtual private network is the extension of a private network that encompasses links through shared or public networks, such as the Internet. A VPN is a transmission network service for businesses with two or more remote locations. It offers a range of access speeds and options depending on the needs of each site. This service supports voice, data and video and is fully managed by the service provider, including routing equipment installed at the customer’s premises. According to its characteristics, VPN has widely deployed on ”COVID-19” offering extensive services to connect roaming employees to their corporate networks and have access to all the company information and applications. Hence, VPN focuses on two important issues such as security and Quality-of-Service. This latter has a direct relationship with network performance such as delay, bandwidth, throughput, and jitter. Traditionally, Internet Service Providers (ISPs) accommo-date static point-to-point resource demand, named, Layer 1 VPN (L1VPN). The primary disadvantage of L1VPN is that the data plane connectivity does not guarantee control plane connectivity. Layer 2 VPN is designed to provide end-to-end layer 2 connection by transporting layer 2 frames between distributed sites. An L2VPN is suitable for supporting heterogeneous higher-level protocols. In this paper we propose an enhanced routing protocol based on Traffic Split Routing (TSR) and Shortest Path Routing (SPR) algorithms. Simulation results show that our proposed scheme outperforms the Shortest Path Routing (SPR) in term of network resources. Indeed, 72% of network links are used by the Enhanced Traffic Split Routing compared to Shortest Path Routing (SPR) which only used 44% of the network links.

Impact Analysis of Resilience Against Malicious Code Attacks via Emails

The damage caused by malicious software is increasing owing to the COVID-19 pandemic, such as ransomware attacks on information technology and operational technology systems based on corporate networks and social infrastructures and spear-phishing attacks on business or research institutes. Recently, several studies have been conducted to prevent further phishing emails in the workplace because malware attacks employ emails as the primary means of penetration. However, according to the latest research, there appears to be a limitation in blocking email spoofing through advanced blocking systems such as spam email filtering solutions and advanced persistent threat systems. Therefore, experts believe that it is more critical to restore services immediately through resilience than the advanced prevention program in the event of damage caused by malicious software. In accordance with this trend, we conducted a survey among 100 employees engaging in information security regarding the effective factors for countering malware attacks through email. Furthermore, we confirmed that resilience, backup, and restoration were effective factors in responding to phishing emails. In contrast, practical exercise and attack visualization were recognized as having little effect on malware attacks. In conclusion, our study reminds business and supervisory institutions to carefully examine their regular voluntary exercises or mandatory training programs and assists private corporations and public institutions to establish counter-strategies for dealing with malware attacks.

Information technology for classification of encrypted traffic in corporate networks using machine learning

Currently, there is growing interest in the tasks of effective management of packet networks, namely: quality of service, ensuring information security, optimization of the use of hardware and software resources of the network. All these tasks are largely based on the analysis and classification of network traffic. Traffic classification allows you to identify packets of various applications and services and ensure their prioritization during transmission over the network. Today, the task is relevant both from the point of view of network administration and from the point of view of ensuring its security. Given the fact that a large number of applications now have encryption, traffic classification is of particular interest, which makes it possible to indirectly identify anomalies in the network. All of the above confirms that the identification and classification of traffic of data transmission networks is an important topic of research, as they determine the main steps in creating a traffic management model when solving the problems of correct application of the security policy. The article considers the problem of network traffic classification using machine learning methods. Various statements of the task are presented, the characteristics used for its solution, existing approaches and areas of their applicability are described. The properties of network traffic are analyzed, due to the characteristics of the transmission environment, as well as the technologies used, which somehow affect the classification process.

Performance analysis of OSPF and EIGRP convergence through IPsec tunnel using Multi-homing BGP connection

Increasingly, networks stability and convergence time are critical parameters in overall network performance. Therefore, it is essential to compare the routing protocols performance to understand the convergence issues and future needs. Corporate networks require a better performing network with a stable connection with the remote branches. There is a need for a backup link availability for the remote branches’ connection in case of a link failure. The Internet Service Providers (ISPs) cannot guarantee a network connection without errors or link failures. To avoid network downtime, the enterprise uses a backup link, preferably with a different ISP with a failover link capability for their network. Other research conducted under the title of Routing Protocol Performance Analysis for RIP, EIGRP, OSPF compares the performance of the protocols using the parameters like delay, jitter, throughput. However, not many consider the link failure and its impact on the enterprise network. This research was conducted to analyze the problem faced by the corporate networks in case of link failure and what routing protocols they should use to minimize the network delay, jitter, convergence time and failover convergence time for better network performance when both internal and external routing protocols are used over the secure network connection using IPsec tunnel by simulating the network using GNS3. BGP multi-homing environment is implemented with multiple internet connections with different ISPs using different AS numbers. IPsec tunnel is established over the public network, and EIGRP and OSPF routing protocol performance is compared running over the IPsec tunnel. The testing parameters used in this study are delay, packet loss, initial convergence time, failover convergence time. For added security, the protocols convergence timings are recorded using MD5 authentication. The result of this study indicates that EIGRP has a better initial convergence time, and it has a better failover convergence time compared to OSPF.

ДОСЛІДЖЕННЯ ЗАДАЧ ПОБУДОВИ БЕЗДРОТОВИХ СЕНСОРНИХ МЕРЕЖ

The research of problems of construction of wireless sensor networks is carried out in the work, the main stage of their decision is development of models of the description of a sensor network and the corresponding methods, technologies of maintenance of necessary parameters of quality of functioning of a sensor network. The study involves the consideration of basic technologies and standards in which there is an opportunity to implement the creation of wireless sensor networks. The basis of wireless sensor networks are communication channels organized between network elements using appropriate wireless technology. The main tasks of building wireless sensor networks: determining traffic parameters; determining the list of services; development or selection of a network model; determination of network functioning indicators; solving the problem of compromise between the quality of operation, traffic and resources. A number of wireless networking technologies are widespread in corporate networks, use an unlicensed frequency band, and in private networks, which allows their use in a number of tasks, due to the density of devices that support them and the availability of technology. A number of technologies do not support the functions of self-organization of the communication network. Such mechanisms can be implemented using software and related protocols at the network level. Existing technologies have the ability to organize communication from tens to tens of thousands of meters. For specific applications, it is one of the essential factors in choosing the appropriate technology. The probability of connectivity in wireless sensor networks depends on the structure and parameters that determine the network: characteristics of the service area (volume, flat, configuration, geometric dimensions), number of network nodes, characteristics of communication capabilities of network elements, antenna patterns, standards and protocols, communication range, transmitter power), features of the involved routing protocols. Features of providing connectivity in wireless sensor networks lie in the possibility of using gateways built using various technologies, which can significantly expand the capabilities of wireless networks in increasing the likelihood of connectivity. A feature of the construction of wireless sensor networks are significant differences in traffic servicing in the networks of different technologies used. Indicators of the quality of wireless networks, such as bandwidth, delay, probability of loss are interdependent and show how effectively the sensor network works. When you change one of the performance indicators of wireless sensor networks, it affects other quality indicators.

Wireless Networks Encryption by Simulation of Attacks

Wireless LANs widespread use is attributable to a combination of factors, including simple construction, employee convenience, connection selection convenience, and the ability to support continual movement from residences to large corporate networks. For organizations, however, the availability of wireless LAN means an increased danger of cyberattacks and challenges, according to IT professionals and security specialists. This paper examines many of the security concerns and vulnerabilities associated with the IEEE 802.11 Wireless LAN encryption standard, as well as typical cyber threats and attacks affecting wireless LAN systems in homes and organizations, and provides general perception of weaknesses for home and business users.

Position of five new urban centers in Shanghai from the perspective of corporate networks

Position of five new urban centers in Shanghai from the perspective of corporate networks

THE MAIN APPROACHES TO EVALUATING THE EFFECTIVENESS OF APPLYING THE RISK ANALYSIS AND MANAGEMENT METHODOLOGY AT ENERGY COMPANY

At present, it is difficult to imagine the provision of any global services without the introduction of information and communication technologies. The energy company of the Islamic Republic of Iran is territorially distributed, and without a corporate information and telecommunications network, it would cease to exist. In a geographically distributed company on 1,648,195 sq.km, there are several hundred access points and several thousand users of the corporate information and telecommunications network and, therefore, it is very important to understand the possible risks, their assessment and management. In such large geographically distributed corporate information and telecommunications networks with high load, for the use of big data, you need to have a complete picture of risks in order to develop risk models. Without a picture of possible risks, it is impossible to build scenarios for various negative and emergency situations. If we consider the probability of a negative event occurring in the corporate information and telecommunications network as a risk, then its definition, analysis and taking measures to minimize the negative consequences is called risk management. One of the main properties of the risks of a corporate information and telecommunications network is their uncertainty. A geographically distributed corporate network is highly exposed to external factors that can directly affect the quality of its functioning. The occurrence of such situations is difficult to predict.

Analyzing startup ecosystem through corporate networks based on investment relation of venture capitals in unicorns

We propose a method to build a corporate investment network based on the investment relationship between unicorns and venture capital (VC) and to analyze the characteristics of the startup ecosystem. Unicorns, unlisted startup companies with valuation of over $ 1 billion, are the leading drivers in innovation. For startup companies to grow into unicorns, it is important for them to be supported in startup ecosystem, where VCs play a very important role. In this research, we propose a method to build corporate investment networks of unicorns and VCs around the world, and to quantitatively analyze the characteristics of the relationship between the unicorns and the VCs and the diffusion of startup activities from inter-industry and international viewpoints, and the factors that affect the valuation value of unicorns and performance of VCs. The proposed method is able to quantitatively measure the characteristics of the startup ecosystem and effective to promote produce of unicorns.

Security Architecture of Network Security Centers as Part of Modern Intranets

The paper presents a structural model of the modern typical corporate network (intranet). The detailed functional structure security architecture of the Network Security Center (NSC) within the intranet is proposed. The research results can be used to build an intranet, which initially aims to counteract computer attacks and, more importantly, to prevent information security (IS) incidents by implementing the most complete set of IS controls in the intranet's NSC.

РАЗРАБОТКА ПРОГРАММНО-АППАРАТНОГО СТЕНДА С ПРИМЕНЕНИЕМ СОВРЕМЕННЫХ СРЕДСТВ ВИРТУАЛИЗАЦИИ ДЛЯ ИЗУЧЕНИЯ КОМПЬЮТЕРНЫХ СЕТЕЙ СТАНДАРТА IEEE 802.11

The article analyzes the specifics of organizing the work of a software and hardware stand with wireless computer networks, the need for which arises when training future IT specialists in the system administration of wireless networks or when modeling an enterprise corporate network in order to apply and test modern technologies for protecting network infrastructure from information security threats, aimed at users of wireless computer networks. A feature of this stand is the use of advanced virtualization tools while maintaining the physical wireless environment, which allows you to effectively train modern competitive IT specialists and test the resistance of customized technologies to various computer attacks aimed at the wireless segment of corporate computer networks.

Email spam protection technology based on DMARC

The article explores the issues of protecting information and communication systems and e-mail from unwanted spam or spam attacks. Theoretical information about spam and its types is provided. The main technologies and methods of protecting communication systems from spam and spam attacks are formulated. The influence of spam on the activity and work of the corporate network is considered. Using a practical example, countermeasure technology is developed and it is shown how spam can affect the network and how you can protect yourself from spam attacks using DMARC technology.

Detection of abnormal traffic and network intrusions based on multiple fuzzy rules

Fuzzy network intrusion detection systems use a set of fuzzy rules using symmetric Gaussian membership functions to determine the probability of specific or common network attacks. A fuzzy set can be formed to describe traffic on a particular network. Fuzzy association rule sets are used to describe normal and abnormal classes. The belonging of a record to a certain class is determined by using the appropriate metric. Fuzzy association rules are formed on the basis of normal training samples. A tested sample is classified as normal if the index generated by the set of rules will be higher than a certain threshold value. Samples with a lower score are considered abnormal. In addition, a method to speed up rule induction by reducing the number of items from the extracted rules is quite effective. In this article the task of identifying possible attacks on corporate network resources is considered. Analysis of approaches to the detection of violations of information security using the theory of fuzzy sets, including procedures for building Gaussian membership functions based on quantitative even comparison of degrees of individual values, which are formed on the basis of expert evaluations of decision makers. The use of symmetric Gaussian curve for membership functions is due to the fact that this function has a smooth top and smooth transitions and expert evaluations, which will form some statistical array of data, with a high probability will be described by the Normal Distribution. It is shown that in order to in-crease the efficiency of detection of situations of possible intrusion, it is necessary to use modern technologies of intellectual analysis with the use of rules and methods of fuzzy logic. The structural scheme of fuzzy system for detecting abnormal traffic in the network segment is proposed.

Cyber Resilience and Cyber Security: What's the Difference?

The concepts of cyber security and cyber resilience are considered, and a comparative characterization of these concepts is also carried out. You will learn what measures cyber security includes and the elements of a proactive action plan to prevent attackers from accessing the corporate network. Measures that should be included in a cyber resilience plan in order to minimize the negative impact of cyber attacks as much as possible are considered. The mechanisms that should be applied for both cyber security and cyber resilience are explored.

A study of dynamics and classification of attacks on corporate network web services

A study of dynamics and classification of attacks on corporate network web services

Impacts of Corporate Network Building and Strategic Learning for Environmental Management on Business Performance

This study discovered the effects of strategic learning and network building on a company’s environmental management performance. According to the results, the environmental awareness of the company and competition threats within the industry did not significantly affect the establishment of environmental strategy, whereas the consumer’s sensitivity to the environment and the environmental regulation of the government did. The environmental awareness of the company and the consumer’s sensitivity to the environment were found to greatly impact a company’s network building. which is closely related with the utilization of multimedia system and technology. In addition, it was found that the establishment of corporate environmental strategy had a significant effect on network building and strategic learning, but network building did not significantly affect strategic learning, indicating a difference. Finally, corporate strategic learning affected environmental management performance, suggesting an importance in accumulating strategic learning capabilities to increase environmental management performance.

UNIVERSITY INFORMATION SECURITY AUDIT

The paper presents the results of a search for information security vulnerabilities as a result of penetration testing carried out in the corporate networks of some higher education institut. Subject of study. The subject of the research is the information resources of various education organizations. Method. Methodology and requirements for conducting audits in accordance with the developed algorithm, as well as ISO27000, ISO017799, ISO15408 standards. Main results. Report on the specific vulnerabilities found typical for universities, as well as recommendations for their elimination. Practical significance. The results of the work can be used for modeling and assessing the security of networks and information systems of universities to solve information security problems.

WORK IN GROUP OR PERSONAL MAINTENANCE OF CORPORATE SOCIAL MEDIA

Objective. Social media have become one of the main technologies for promoting the university library. The purpose of the work is to characterize the main stages of organizing work in social media for librarians (SMM specialists and a working group) of the Scientific Library of the Belarusian National Technical University (BNTU). Methods. Statistical analysis tools made it possible to study in detail the corporate networks of the BNTU Library. A comparative analysis of the experience of maintaining BNTU accounts in social media by an SMM specialist and a working group of employees from various library departments was carried out. Results. The advantages and risks in the work of the group are summarized. The following areas highlighted: Team building; Communication and work organization; Creativity and creative power; Overcoming the challenges of group work; Content formation techniques; Potential. Conclusions. Working in a group produces creative and interesting content in large volumes. The experience of managing the process of forming a content policy in 2020 proves that the process has become more flexible and independent of the personality of an SMM specialist.