Nt1330 Unit 3 Exercise 1

"Something that has been mentioned indirectly a few times already is the concept of defense in depth. The concept of defense in depth originated from the military and was seen as a way to delay rather than prevent an attack. As an information security tactic, it is based on the concept of layering more than one control. These controls can be physical, administrative, or technical in design. We have looked at a variety of physical controls in this chapter such as locks, doors, fences, gates, and barriers. Administrative controls include policies

Ever since the earliest days of writing, people have had reasons to limit their information to a restricted group of people. Because of this, these people have had to develop ideas of making their information unable to be read by unwanted people. The general techniques used to hide the meaning of messages constitute the study known as cryptography. "Ciphers, in general fall into three major classifications: 1. Concealment Cipher, 2. Transposition Cipher, and 3. Substitution Cipher" (4). Cryptography protects information by altering its form, making it unreadable to unwanted people or groups of people.

Compartmentalization is a technique used to segment network space to better control access and isolate risk of exposure. A variety of security products can be layered into “compartments” to address examination, detection, prevention, and encryption requirements.

Network Security is a very dynamic and technical field dealing with all aspects of scanning, hacking and securing systems against intrusion. It is more than just encrypting user data, virtual private networks or installing firewalls. Network security consists of the provision, policies adopted by a network administrator to prevent and monitor unauthorized access, misuse, modification, or denial of a computer network and network-accessible resources (Xie, 2013).

In order to develop a proper security which can protects critical data, systems, and other resources, individual must first understand what it is facing in terms of potential sources of harm that may exploit existing vulnerabilities. Threat assessment identifies potential sources of attack to information assets and estimating the probability and consequences associated with their action. Understanding of the source of attacks, along with their likelihood of

Network is an interconnection of many computer devices which is useful for flexible data transmissions and reception. Network security is the process of take care bout information resources in a universal networking (Internet) environment.

It is the method of protecting information by encrypting it into unreadable format. And then we can share decoding technique that can be used for decoding technique to the requested use who wants to see the original information, so we can prevent this information from unwanted users to see it. But the problem is, the techniques which we are used getting more complex.

layer, the application logic layer and the database layer. All these layers in the security system

Building a solid foundation for good security requires an IT infrastructure and operating culture that not only safeguards data and minimizes risk, but helps make the business more agile, responsive and transparent. The challenge is striking the right balance between protection, cost and user flexibility. For security teams, a good starting point is to mitigate risk wherever possible. Following some best practice guidelines can help.

In order to get a system is characterized by durability, flexibility and resistant any potential change, the security system is designed and consists of three layers: the user interface layer, the application logic layer and the database layer. All these layers in the security system the main goal is to make applications evolve and implementation easy and efficient.

Expectations for a complete suit network visibility – network visibility is critical in taming breaches of security in businesses and organizations. Breaches such as those witnessed in leading retail brands such as Target and Staples are happening because most network security designs in use today have not adapted to the more forceful dynamic access and threat environment. In addition, the reduction in network visibility is what has curtailed the ability of retail brands to fully secure their network assets. The shift to complete network visibility will benefit networking vendors who are keen on providing complete network visibility requirements and high compute capacity solutions.

The world is becoming more interconnected with the advent of the Internet and new networking technology. There is a large amount of personal, commercial, military, and government information on networking infrastructures worldwide. Network security is becoming of great importance because of intellectual property that can be easily acquired through the internet. When considering network security, it must be emphasized that the whole network is secure. Network security does not only concern the security in the computers at each end of the communication chain. When transmitting data the communication channel should not be vulnerable to attack.

These systems control different operations such as security, mechanical processes, and communication processes among others (Drew, 2005). Arguably, these systems make organizational operations effective as long as they are maintained and protected from security threats. The security systems usually face a lot of risks that jeopardize the whole system as well as the organizational operations (Nyanchama & Stefaniu, 2003). The threats are in most cases caused as a result of the vulnerability of the security system. Arguably, experts define system vulnerability as a firmware, hardware, or software defect that makes it susceptible. In other words, vulnerability is a weakness in the procedures of an automated system security (Drew, 2005). The main threat faced by vulnerable systems is exploitation. This is whereby an unauthorized individual gains access to restricted information and controls. Some people exploit such systems so as to steal data or money while others do it for personal reasons such as revenge. Arguably, the main cause of vulnerability of system security is the complex structure of the system. The complexity of internal security systems makes it easy for it to have flaws. As noted earlier, such flaws are known as security system vulnerability.

There are closed networks and open networks. The closed networks are available for a person who belongs to that entity. On the other hand, open networks are available for the rest of the people. Previously, networks were designed as closed for a set of people and sites which do not connect to other people. With the advent of personal computers, LANs, and the wide-open world of the Internet,

As a consequence, an increasing number of users and organizations have expressed the need of more robust systems and applications. Hence, this fact implies incorporating an effective security stage into the development life cycle in order to be able to efficaciously assess security issues.