Статьи

COMPARATIVE ANALYSIS OF THE EFFECTIVENESS OF APPLYING CIS BENCHMARK FOR ELTEX SWITCHES IN CORPORATE INFRASTRUCTURE

E. A. Eremina , A. N. Prostova
UDC: 004.056.53 EDN: PSVIBN Published: 01.03.2025 Issue: Vol. 1 No. 005 (2025): Professionalitet, 2025
Download PDF Article on eLIBRARY.RU

Abstract

The paper addresses the problem of securing undocumented domestic network devices (Eltex MES1428, Eltex ESR-15R) in the absence of official CIS Benchmark profiles. An approach based on projecting controls from CIS Cisco IOS Benchmark v4.1.1 and CIS Network Device General Benchmark v2.0.0 onto three planes — management, control, and data — is proposed. Experimentally, on a physical testbed, default configuration audits, hardening, re-audits, and a series of eight types of active attacks using Kali Linux were performed before and after applying the controls. Attack blocking was verified both by the absence of results for the attacker and by the presence of a corresponding event in the centralized syslog.

It was found that 91 % of the controls are applicable (fully or partially) to the MES1428 and 96 % to the ESR-15R; the share of blocked attacks after hardening over applicable vectors reached 100 % for both devices (up from 0 % in the default configuration), while throughput degradation did not exceed 4 %. The results obtained are compared with the reference Cisco Catalyst 2960 and Cisco 1941 devices.

The proposed methodology has practical significance for import substitution in corporate networks, making it possible to ensure the required level of security on Eltex equipment in the absence of ready-made CIS profiles, and can be replicated for other vendors.

Online viewer

References

  1. CIS Benchmarks. (2025). CIS Benchmarks. Center for Internet Security. Retrieved March 31, 2025, from https://www.cisecurity.org/cis-benchmarks (accessed: 31.03.2025).
  2. Center for Internet Security. (2024). CIS Cisco IOS 15 Benchmark v4.1.1. East Greenbush, NY: CIS. (accessed: 31.03.2025).
  3. Uymin, A. G., & Tolmachev, I. M. (2025). Application of domestic network equipment Eltex and EcoRouter within the specialty 09.02.06 "Network and System Administration". Automation and Informatization of the Fuel and Energy Complex, (11), 58–62. (accessed: 31.03.2025).
  4. Eltex. (2024). *Eltex MES-series Documentation. Version 10.2*. Retrieved March 31, 2025, from https://docs.eltex-co.ru/display/MES10/ (accessed: 31.03.2025).
  5. Eltex. (2024). *Eltex ESR-series Documentation. Version 1.24*. Retrieved March 31, 2025, from https://docs.eltex-co.ru/display/ED124/ (accessed: 31.03.2025).
  6. Olifer, V. G., & Olifer, N. A. (2020). Computer Networks. Principles, Technologies, Protocols (5th ed.). St. Petersburg: Piter. (accessed: 31.03.2025).
  7. National Institute of Standards and Technology. (2020). *NIST SP 800-53 Rev. 5: Security and Privacy Controls for Information Systems and Organizations*. Gaithersburg: NIST. (accessed: 31.03.2025).
  8. Uymin, A. G. (2022). Network and System Administration: A Teaching Manual (3rd ed.). St. Petersburg: Lan. (accessed: 31.03.2025).
  9. Center for Internet Security. (2024). CIS Network Device General Benchmark v2.0.0. East Greenbush, NY: CIS. (accessed: 31.03.2025).
  10. Lyon, G. (2025). Nmap: the Network Mapper. Retrieved March 31, 2025, from https://nmap.org/book/man.html (accessed: 31.03.2025).
  11. iPerf3. (2025). iPerf3 Documentation. Retrieved March 31, 2025, from https://iperf.fr/ (accessed: 31.03.2025).
  12. Russian Federation. (2017). *Federal Law No. 187-FZ of July 26, 2017 "On the Security of Critical Information Infrastructure of the Russian Federation"*. Retrieved March 31, 2025, from https://www.consultant.ru/document/cons_doc_LAW_220885/ (accessed: 31.03.2025).
  13. GOST R 57580.1-2017. (2018). Security of financial (banking) operations. Information protection of financial organizations. Moscow: Standartinform. (accessed: 31.03.2025).
  14. Positive Technologies. (2025). Current Cyber Threats: Results of 2024. Retrieved March 31, 2025, from https://www.ptsecurity.com/ru-ru/research/analytics/ (accessed: 31.03.2025).
  15. Gerhards, R. (2009, March). RFC 5424: The Syslog Protocol. IETF. (accessed: 31.03.2025).
  16. Mills, D. (2006, January). RFC 4330: Simple Network Time Protocol (SNTP) Version 4. IETF. (accessed: 31.03.2025).
  17. FreeRADIUS Project. (2025). FreeRADIUS Documentation. Retrieved March 31, 2025, from https://freeradius.org/documentation/ (accessed: 31.03.2025).
  18. Bejtlich, R. (2013). The Practice of Network Security Monitoring. San Francisco: No Starch Press. (accessed: 31.03.2025).
  19. Wool, A. (2004). A Quantitative Study of Firewall Configuration Errors. IEEE Computer, 37(6), 62–67. (accessed: 31.03.2025).

License

Copyright (c) 2025 E. A. Eremina, A. N. Prostova (Author)

Creative Commons Attribution (CC BY) 4.0

Keywords

CIS Benchmark Eltex MES1428 Eltex ESR-15R Kali Linux hardening import substitution network security