This paper addresses a customized solution to ensure security of the trusted network while receiving files from applications residing on less trusted networks. The solution is a four layered secured file transfer service which controls and authenticates the data transfer through service blocking mechanism and digital signatures at the first two levels and by introducing a novel concept of privileged socket creation and finger printing TCP packets at layer three and four by customizing the Linux kernel. The solution is deployed using a pair of systems connected peer to peer running customized Linux kernels and the solution will ensure that the first system on the gateway accepts only authentic data and transfers to second system which accepts the data only when it originates from the first system. The link between the two systems and the systems as such are physically protected. Data is received only from the first system. In this paper we explain its security architecture and discuss implementation on Linux kernel 2. 6. 24. 2

Network Security Secured automated file exchange Kernel hardening