dc.description.abstract | Review the “2009 CSI Computer Crime & Security Survey” from Computer Security Institute (CSI), 30% of information security experts processed the event of “Insider abuse of Internet access”, 15% processed the event of “Unauthorized access by insider”. Because of the technology TCP/IP and IEEE 802.3 used by LAN lack of authentication, this is an endless event of information security now and future, but will be helpful if adopting one network authentication solution ask user to do authentication first before access network.
But all network authentication solutions, some are expensive, some are insufficient, and some will make an impact on current state. This thesis brings one type of network authentication system, with the technology DHCP, DNS and Firewall based on the open source software. Idea to build this system is: the lowest cost, the best compatibility, and the highest performance.
The features and functions of this system are:
1. Compatibility: All current network equipments can be used after adopting this system, just make a little adjustment in the network structure.
2. Authentication: All users must to do authentication so that be allowed to access the LAN and WAN, or be blocked by this system without doing it.
3. Administration: System administrator can monitor current authenticated session, get the network state, and the system operation status by doing a query to show the report in this system.
This authentication system was verified that can be applied to the real business network environment because of two examinations: the maximum network throughput and the maximum network connections, so that one system both low cost and high performance is the contribution of this thesis.
| en_US |