BBNAC: Blockchain Based Network Access Control for IT/OT Infrastructures

Authors:
Open Access
Publisher website
Google Scholar
Abstract
Network Access Control, a critical element in protecting IT and OT environments, plays a vital role in determining who or what can access network resources and what features the device that will provide this connection must have. The primary function of NAC is to enforce security policies at the layer 2 and layer 3 of the enterprise network, control access to network resources, and prevent unauthorized access to the network. It acts as a security guard by examining every device that attempts to connect to the network and ensuring compliance with established security policies and protocols. In an age where insider threats pose a significant risk, NAC’s ability to manage, monitor and restrict network access based on user credentials and device compatibility is invaluable. Blockchain technology, renowned for its robust security features such as decentralization, immutability and transparency, enhances the capabilities of NAC solutions. When integrated with NAC, blockchain offers a new layer of security and trust. It ensures that the access control and monitoring activities are not only well-documented and well-controlled but also immutable and transparent. This integration significantly reduces the chances of unauthorized access and internal threats, thereby fortifying the network’s defense against advanced persistent threats (APT) and sophisticated cyber attacks. This study proposes the integration of NAC within the Hyperledger Fabric network architecture. Both NAC and Hyperledger Fabric are compatible for private networks so blockchain’s decentralized structure and its ability to maintain an immutable record of network access events complement NAC’s robust access control mechanisms. This integration is designed to enhance cybersecurity, establish trust, and improve accountability. Furthermore, this study is set to make a contribution to the academic literature and ongoing research in the realm of cybersecurity.
Funding Information
  • Gazi Üniversitesi

This publication has 50 references indexed in Scilit: