Proposta de implementação de um sistema de controle de acesso de dispositivos e utilizadores à rede corporativa: Novo Banco Popular S.A.

Abstract

With the growing number of network access devices, such as smartphones and even personal computers that connect to a corporate network, it is necessary to ensure visibility and greater control over the devices and the resources they access, especially within a company where critical and sensitive data cannot be accessible by just anyone. The present work presents a theoretical and practical approach on the implementation of a device and user access control system to the data network, focusing on the corporate environment of Novo Banco Popular, SA, considering how the general objective of the work is to propose a system that guarantees greater visibility and control over the devices and users that connect to the corporate network. To achieve this objective, the work proposes to analysis of the existing procedures to guarantee access to the corporate network of Novo Banco Popular SA. The work presents concepts related to computer networks, security policies, protocols and types of access control to the network applicable to the context of the bank, analyze available technological solutions for controlling access to the corporate network and, finally, implement a proof of concept of the proposed solution in a test environment. The implementation of this access control system aims to improve the security of the corporate network of Novo Banco Popular SA, allowing better visibility and control of devices and users authorized to connect. This will help protect the bank's information assets, mitigate possible security risks and ensure compliance with established security policies. The study shows that there is a need for investments in dynamic data network security measures, which presupposes network vulnerabilities due to limited control of the state of devices and users on the internal network. In this perspective, the present work aims to implement a proof of concept in order to guarantee the access control of devices and users to the internal network, in order to protect against unwanted use of the network, intentional and unintentional security threats, worms, viruses and more through vulnerable end systems.