The growing number of cyber-crimes is affecting all industries worldwide, as there is no business or industry that has maximum protection in this domain. This problem can produce minimal damage if an organization has information security audits periodically. The process of an audit includes several steps, such as penetration testing, vulnerability scans, and network assessments. After the audit is conducted, a report that contains the vulnerabilities is generated to help the organization to understand the current situation from this perspective. Risk exposure should be as low as possible because in cases of an attack, the entire business is damaged. In this article, we present the process of an in-depth security audit on a distributed firewall, with different approaches for the best results. The research of our distributed firewall involves the detection and remediation of system vulnerabilities by various means. In our research, we aim to solve the weaknesses that have not been solved to date. The feedback of our study is revealed with the help of a risk report in the scope of providing a top-level view of the security of a distributed firewall. To provide a high security level for the distributed firewall, we will address the security flaws uncovered in firewalls as part of our research.
In computer networks the traffic control is an essential management issue and a permanent challenge for network engineers. The paper is evaluating the main QoS (quality of service) technologies used in networks management. The article is mainly focusing on classful queuing disciplines and HTB (hierarchy token bucket) Linux implementations. The shaping and prioritization mechanisms are explained, and are proposed three different practical solutions for implementing HTB, under a common Linux environment, for a defined QoS scenario.
Micro-level energy sources from the ambient environment can be a viable alternative to increase the life of the sensor nodes from a WSN network. Harvesting energy from the environment - particularly solar energy, is a technique that can support the operation of the sensor nodes. The power extracted from the luminous radiation is extremely variable, depending on day/night alternation, atmospheric conditions, temperature, geographical location, indoor or outdoor environment - which makes the energy harvested insufficient for use as an exclusive power source to supply sensor nodes. A special case is the indoor environment, in which the solar radiation is strongly reduced, compared to the outside environment, and artificial lighting levels are usually below 1000 Lux. We made experiments on an indoor solar cell using illumination from three different sources: fluorescent, incandescent, LED. Detailed measurements, performance comparisons, and conclusions are presented.
Authorizing access to the public cloud has evolved over the last few years, from simple user authentication and password authentication to two-factor authentication (TOTP), with the addition of an additional field for entering a unique code. Today it is used by almost all major websites such as Facebook, Microsoft, Apple and is a frequently used solution for banking websites. On the other side, the private cloud solutions like OpenStack, CloudStack or Eucalyptus doesn’t offer this security improvement. This article is presenting the advantages of this new type of authentication and synthetizes the TOTP authentication forms used by major cloud providers. Furthermore, the article is proposing to solve this challenge by presenting a practical solution for adding two-factor authentication for OpenStack cloud. For this purpose, the web authentication form has been modified and a new authentication module has been developed. The present document covers as well the entire process of adding a TOTP user, generating and sending the secret code in QR form to the user. The study concludes with OpenStack tools used for simplifying the entire process presented above.
Firewalls are essential for networking, because they are security devices designed to help protect an infrastructure from unwanted traffic, malicious attacks and outsiders that want to gain unauthorized access. These devices, hardware or software, can provide different levels of protection, depending on the situation where they are used and the entity's security policy. Because to the different network topologies and the evolution of exploits in different forms, classic firewalls can become inefficient. A low budget solution to these problems is a distributed firewall developed with open-source tools, which brings new features and improvements. Our approach in this paper is to propose a distributed firewall that solves problems and improves the overall results in network protection. We suggest the distribution of security policies of a firewall into distributed devices that work together and obtain better performance. The traffic is split between several firewalls that analyze and decide if the incoming packets will enter the network, be dropped, rejected, or redirected to a honeypot. Our proposed distributed firewall has the possibility to be scaled with different numbers of clients and network devices.