A Model to Protect Disaster Recovery Centers from Cyber Threats with Multi-Layered Network Security Architecture

Abstract

Disaster Recovery Centers (DRC) systems are critical infrastructures for business continuity, cyber-attacks can cause valuable corporate and personal data to be seized by cyber attackers. This, in return, results in material and moral damages to institutions, individuals and states. In this study, a modern cyber network security architecture was developed to prevent attack vectors managed by cyber attackers from the internet to DRC systems. EVE-NG, Nessus, OpenVAS, Kali, Parrot, MITRE ATT&CK Enterprise, NIST v2 professional applications and framework systems, which are used and accessible worldwide, were used. A comprehensive application was conducted with ninety-nine real world systems and fourteen different virtual networks in the simulation environment. The simulation was conducted in three phases: the first phase involved attacks aimed at partially or completely disrupting internet access, while the second and third phases involved attacks aimed at rendering the application service servers (DMZ) and local network servers unavailable to the internet. As a result of attacks using various techniques on this network, attempts were made to damage target servers and devices. At the time of the attack, the network traffic between the attacker and the target device was examined using Wireshark and Forti Analyzer software.