lecture - 3 - layered approach to it security

Layered approach to Security

© Intelligent Quotient System Pvt. Ltd.

Traditional approach to security


If you spend more on coffee than on IT security, then you will be hacked.What's more, you deserve to be hacked.

Richard Clarke, Special Adviser on cybersecurity to the US President.


Threat is everywhere


IT IS ABOUT MAINTAINING APPROPRIATE SECURITY

MEASURES AND PROCEDURES AT FIVE DIFFERENT

LEVELS WITHIN YOUR IT ENVIRONMENT

ALSO KNOWN AS “DEFENCE IN DEPTH”

Layered security approach


Perimeter Level

Perimeter is the first line of defense from

outside, un-trusted networks

First and last point of contact for security

defences protecting the network

It is the area where your network ends and the

Internet begins

E.g. Makemytrip.com server hack – revenue loss


Perimeter Level

Firewall

Network-based anti-virus

VPN encryption


Network Level

Internal LAN and WAN

May include desktops and servers

Once you break perimeter you are inside and

once inside, you can travel across the

network unimpeded


Network Level

Intrusion detection /prevention system

(IDS/IPS)

Vulnerability management system

Network Access Control

Access control /user authentication


Host Level

Individual devices on the network, such as servers, desktops,

switches, routers, etc.

Configuration parameters if set inappropriately, can create

exploitable security holes

Includes - registry settings, services (applications) operating on

the device or patches to the operating system or important

applications

Configured to meet the specific operational characteristics of a

single device


Host Level

Hardware Component

OS Security

Host IDS

Host vulnerability assessment (VA)

Network access control

Anti-virus

Access control/user authentication


Application Level

Poorly protected applications can provide easy access to confidential data and records

Hard truth - most programmers don’t code with security in mind


Application Level

Application shield


Input validation


Data Level

Blend of policy and encryption



lecture - 3 - layered approach to it security

Documents