Daking Rai, Chirag Thakuri Malla, Vishnu Kumar Rana (Supervisor)
St. Xavier's College
11 July 16
Thesis or project
Enterprise Network, Modular Design, Hierarchical Network Design,
Scalable Network Design, Defense-in-depth, Demilitarized Zone, Firewall.
An enterprise network connects and integrates all system within an organization.
Security is an important aspect while designing an enterprise network. The need for
enterprise security is becoming more apparent with increasing numbers of attack and
harms it can cause. The landscape of network security threat continues to change
constantly. There is significant increase in malicious intruders developing new
innovative and improvised ways to compromise your systems as older vulnerabilities
are discovered and patched. Therefore, it is very important to be aware of the new
threats and also tools and techniques that can be used to defend enterprise network
“Designing and Implementation of Secure Modular Enterprise Network
Architecture” is a research project that aims to show the design of scalable secure
enterprise network that is resilient to attacks. The proposed network design will
incorporate the fundamental security principles such as defense in depth,
compartmentalization of information, principle of least privilege. The network security
architecture is designed not only to protect the network but the other aspect of the
network such as performance, availability, reliability, management and maintenance of
network is also considered.
The modular enterprise network architecture follows the hierarchical network design
and also separates the network into different security zones to separate the network
infrastructure of different security level. The implementation of hierarchical levels and
security zone in network have also increased the scalability of network significantly.
The provisions and policies of network security help the network administrator to
monitor attack, misuse, modification or unauthorized access of a computer network.
Hence, the proposed network design will be a secured enterprise network resilient to