Establishing a Comprehensive Enterprise Security System

Abstract

The article considers the complex provision of information security of an enterprise using modern technologies and tools. The analysis of the existing network infrastructure was carried out, the main vulnerabilities were identified, including the absence of VLANs, subnets and IDS/IPS systems, which increases the risk of unauthorized access and data leakage. To eliminate the identified shortcomings, a network upgrade was proposed, including the introduction of virtual local area networks (VLANs), subnets and the Snort intrusion detection and prevention system. A test model of a corporate network was created on the GNS3 platform, including a pfSense firewall with an integrated IDS/IPS system, routers, switches and workstations divided into VLANs. Simulations of network attacks using Kali Linux were carried out, which made it possible to demonstrate the effectiveness of the proposed measures. The Snort system successfully detected and recorded attempts to bypass filters and unauthorized scanning, which confirms its suitability for corporate use. The results of the work show that an integrated approach to information security based on traffic isolation, access control and network monitoring significantly reduces the risks of cyber-attacks, increases network stability and improves its manageability. The proposed methods can be recommended for implementation in enterprises seeking to increase the level of security of their information systems.