Day zero damage: Rapidly propagating attacks (Slammer, Nimda, MyDoom) happen too fast for reactive
products to control. Therefore, an automated, proactive security system is needed to combat the dynamic
array of modern-day viruses and worms.
With modern-day distributed networks, security cannot be enforced only at the network edge or perimeter. We
will discuss perimeter security in more detail later in this chapter.
Zero-day attacks or new and unknown viruses continue to plague enterprises and service provider networks.
To attempt to establish protection against attacks, enterprises try to patch systems as vulnerabilities become
known. This clearly cannot scale in large networks, and this situation can be addressed only with real-time
proactive-based systems.
Security now is about management and reduction of risk in a rapidly evolving environment. Maximum risk
reduction is achieved with an integrated solution built on a flexible and intelligent infrastructure and effective
operations and management tools. Business objectives should drive security decisions. Today, we are in the
new era that forces us to rethink security and outbreak prevention.
Principles of Security??”The CIA Model
A simple but widely applicable security model is the confidentiality, integrity, and availability (CIA) triad.
Pages:
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52