Wireless Device Blocking Tool for Network Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Large networks face challenges in timely identification and removal of compromised devices, which can reconnect and compromise the network, making it difficult to maintain security against malicious activities.
Innovation Solution
A wireless device blocking tool that includes a user interface, location engine, retrieval engine, and update engine to identify and block compromised devices by communicating with an access control server, determining connection types, and updating access control lists to prevent reconnection through wireless or wired networks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If manual monitoring and removal of compromised devices is performed, then network security can be maintained, but the response time is too slow and devices can reconnect before being blocked
Solution Approach 1:
The system performs preliminary actions by automatically detecting compromised devices and blocking them from the network before they can cause further damage or reconnect. The automated blocking mechanism is triggered immediately upon detection, eliminating the time delay associated with manual monitoring and removal processes.
2Loss of time
If automated blocking mechanisms are implemented, then response time is reduced, but the system complexity increases
Solution Approach 1:
The system implements self-service by enabling automated detection and blocking of compromised devices without requiring manual intervention. The network monitoring system automatically identifies suspicious devices, determines their connection type (wired or wireless), and blocks them through appropriate mechanisms, thereby reducing response time while managing complexity through automation rather than manual processes.
3Reliability
If comprehensive device tracking and blocking is implemented, then network security is improved, but the operational complexity increases
Solution Approach 1:
The system applies segmentation by dividing the blocking process into distinct segments based on connection type: wired device blocking through switch/port isolation and wireless device blocking through access point disassociation. This segmentation simplifies operation by providing targeted blocking mechanisms for each connection type rather than requiring a single complex solution for all devices.
Data Source
AI summary
A wireless device blocking tool includes a user interface, a location engine, a retrieval engine, and an update engine. The user interface receives at least one of a MAC address of a device and an IP address of the device. The location engine communicates a query to an access control server, receives a response from the access control server in response to communicating the query, and determines, based on the response, that the device connected to a network through a wireless connection. The location engine also determines a WLC through which the device connected. The retrieval engine retrieves, from the WLC, an access control list. The update engine disconnects the device from the VLAN and reconnects the device through a second VLAN.