Transmission Packet Filtering via Protocol and Web App Permissions
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
User devices connected to private networks are vulnerable to cybercrimes due to unfiltered access to the open internet, which can lead to unauthorized access, data theft, alteration, or destruction, and resource wastage in mitigating these threats.
Innovation Solution
A cyber security service provider's control infrastructure inspects and selectively blocks internet protocol packets from user devices based on customized filtering policies, determining permissions based on IP addresses, ports, protocols, and web applications to prevent malicious activities.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If user devices are allowed unfiltered access to the open internet, then ease of operation and network connectivity are improved, but security and vulnerability to cybercrimes worsen
Solution Approach 1:
A security device is introduced as an intermediary between user devices and the open internet. The security device inspects transmission packets and applies customized filtering policies based on IP addresses, ports, protocols, and web applications, allowing legitimate traffic while blocking malicious content, thus maintaining both connectivity and security
Solution Approach 2:
The filtering process is segmented into multiple hierarchical levels: IP address filtering, port filtering, protocol filtering, and web application filtering. This multi-layered segmentation allows progressive refinement of security policies, enabling granular control over network traffic while maintaining ease of operation
2Reliability
If customized filtering policies are applied to inspect transmission packets, then security and protection from cybercrimes are improved, but device complexity and processing requirements worsen
Solution Approach 1:
The complex filtering system is divided into four distinct filtering modules: IP address filtering, port filtering, protocol filtering, and web application filtering. Each module handles a specific aspect of packet inspection independently, making the overall complex system manageable through modular design and reducing processing overhead
Solution Approach 2:
Customized filtering policies are pre-configured and stored in the security device before actual packet inspection begins. The security device maintains a database of permitted and blocked IP addresses, ports, protocols, and web applications, allowing rapid comparison and decision-making during transmission without real-time complex analysis
3Reliability
If multiple levels of filtering (IP address, port, protocol, web application) are applied, then security coverage and protection effectiveness are improved, but processing time and network latency worsen
Solution Approach 1:
The four-level filtering process is implemented as sequential but independent stages. Each filtering level (IP address, port, protocol, web application) operates as a separate processing stage that can be efficiently implemented using pre-configured rules, minimizing redundant processing and reducing overall packet processing time
Solution Approach 2:
The security device applies filtering progressively, starting with broader IP address filtering and moving to more specific port, protocol, and web application filtering only when necessary. This partial action approach ensures that most packets are quickly processed at higher levels without requiring full deep inspection of all packets, reducing average processing time while maintaining comprehensive security coverage
Data Source
AI summary
A method including receiving, by a security device from a user device that is in a private network, a transmission packet for communication to a destination device over an open network; determining, by the security device based on receiving the transmission packet, whether the user device is permitted to transmit the transmission packet to the destination device over the open network; determining, by the security device based on determining that the user device is permitted to transmit the transmission packet to the destination device, whether the user device is permitted to utilize a protocol utilized by the user device to transmit the transmission packet; and determining, by the security device based on determining that the user device is permitted to utilize the protocol, whether the user device is permitted to utilize a transmission web application utilized by the user device to transmit the transmission packet is disclosed.