Hacking Prevention Device Using Dummy Authentication Screens
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current hacking prevention methods fail to effectively block malicious access attempts by distinguishing between legitimate and hacking attempts, leading to potential disruptions in internal and external networks.
Innovation Solution
A hacking prevention device and method that identifies IP addresses attempting access, provides a dummy image with input forms and warning messages for terminals not on a blacklist, and blocks access based on repeated ID and password transmissions, updating the IP address to the blacklist when a preset count is exceeded.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If IP address scanning and blocking are implemented to prevent hacking, then security is improved, but legitimate user access may be disrupted due to false detections
Solution Approach 1:
The system performs preliminary actions by providing dummy processes and warning messages before actual hacking attempts can succeed. When a terminal attempts access, the system first checks if the IP is on the blacklist, and if not, provides a dummy process with warning messages that prevent successful hacking attempts without blocking legitimate users. This preliminary prevention mechanism reduces false detections while maintaining security.
Solution Approach 2:
The system implements feedback mechanisms through warning messages displayed to terminals attempting access. The warning messages provide feedback to the terminal about the security status, allowing legitimate users to understand why access is being restricted. This feedback loop helps distinguish between legitimate users and hackers, reducing false blocking while maintaining security effectiveness.
2Reliability
If multiple stages of verification are implemented to distinguish legitimate and hacking attempts, then hacking prevention accuracy is improved, but system complexity increases
Solution Approach 1:
The verification process is segmented into distinct stages: first checking if the IP address is on the blacklist, then providing dummy processes for non-blacklisted IPs, and finally implementing blocking only after multiple failed attempts. This segmentation simplifies the overall complexity by breaking down the verification process into manageable steps, each with a specific function, rather than implementing a single complex verification system.
Solution Approach 2:
The system uses dummy processes that copy the appearance and behavior of legitimate authentication processes. These dummy processes replicate the look and feel of real login interfaces, making them indistinguishable from actual authentication mechanisms to observers. This copying technique allows the system to provide multiple verification stages without significantly increasing detectable complexity, as the dummy processes mimic legitimate operations.
Data Source
AI summary
The present invention provides a device for blocking hacking and a method therefor. That is, according to the present invention: when access is attempted by a terminal, an IP address of the terminal attempting the access is identified, and the access of the terminal is blocked if the IP address is included in a preconfigured blacklist; if the IP address is not included in the blacklist, a destination port of the terminal is identified; in response to the identified destination port of the terminal, the terminal is provided with a screen including an alert message and an input form for inputting an ID and a password, which is a dummy process; when the terminal transmits an ID and a password, it is determined, depending on the number of transmissions, that the terminal has attempted the access for hacking purposes, and the access of the terminal is thus blocked.