The Enhancement of Egress NAC Systems for Valid Logging

บทคัดย่อ

In Egress Network Access Control (egress NAC) it is crucial to authenticate users before they access the Internet.One of the most important parts of the egress NAC is the network traffi c log system. According to the Thailand Computer Crime Act of 2007, several organizations spend a lot of money for egress NAC and log keeper systems. In many log systems, MAC Address is used to identify each user’s machine. However, most systems are used to control multi-hop connections, in which MAC addresses are changed in each hop. So, these systems end up with storing the invalid user’s MAC addresses. When the systems keep the invalid information in their log fi les, these log fi les cannot be used as valid evidence to point out the real users. Hence, this paper proposes an enhanced solution by using JAVA Applet technology to collect the real user’s MAC addresses. The experimental results have demonstrated that our system can keep valid log information in log fi les without reducing the system performance.