Smart campus network security architecture with deception console between distribution and firewall layers

Abstract

The present utility model addresses the technical problem of insufficient east–west visibility and delayed detection of lateral movement in segmented smart campus networks by providing a deception-based cybersecurity architecture. The system introduces a deception management console positioned between the distribution layer and the firewall layer to manage interactive decoy hosts deployed across multiple Virtual Local Area Networks (VLANs) in the access layer. These decoy hosts simulate legitimate assets and generate engagement data when accessed by unauthorized entities. By embedding deception capabilities within the network topology rather than as an external overlay, the architecture enables early detection of internal threats and produces high-confidence alerts derived from decoy interactions and observed inter-VLAN traffic. The utility model enhances campus network security by supporting proactive threat identification and providing actionable data for analysis.