National Program of Depth

saikrishnathota1

Main
Similar Questions

Home >Homework Answsers >Computer Science homework help

urgent

Cyber Attacks

Protecting National Infrastructure, 1st ed.

page1image996030256 page1image996250640 page1image996648112

Chapter 6

Depth

page1image996197168

page1image996673664 page2image1039975824

Introduction

Anylayerofdefensecanfailatanytime,thusthe
introduction of defense in depth
Aseriesofprotectiveelementsisplacedbetweenan
asset and the adversary
Theintentistoenforcepolicyacrossallaccesspoints

page2image1040014112

page2image1040020352

Chapter 6 – Depth

page3image1039965776

Fig. 6.1 – General defense in depth schema

page3image1040045392 page3image1040045728

page3image1040051952

Chapter 6 – Depth

page4image1039989376

Effectiveness of Depth

Quantifyingtheeffectivenessofalayereddefenseis often difficult
Effectivenessisbestdeterminedbyeducatedguesses
Thefollowingarerelevantforestimating
effectiveness
– Practical experience
– Engineering analysis
– Use-case studies
– Testing and simulation

page4image1040103968

page4image1040110208

Chapter 6 – Depth

page5image1040070672

Fig. 6.2 – Moderately effective single layer of protection

page5image1040133552 page5image1040133888

page5image1040140048

Chapter 6 – Depth

page6image1040154816

Effectiveness of Depth
• Whenalayerfails,wecanconcludeitwaseither

flawed or unsuited to the target environment

• Nolayeris100%effective—thegoalofmakinglayers “highly” effective is more realistic

page6image1085285088

page6image1085291296

Chapter 6 – Depth

page7image1040074672

Fig. 6.3 – Highly effective single layer of protection

page7image1085316592 page7image1085316928

page7image1085323120

Chapter 6 – Depth

page8image1040071808

Fig. 6.4 – Multiple moderately effective layers of protection

page8image1085349344 page8image1085349680

page8image1085355840

Chapter 6 – Depth

page9image1085338048

Layered Authentication

Anationalauthenticationsystemforeverycitizen would remove the need for multiple passwords, passphrases, tokens, certificates, and biometrics that weaken security
Singlesign-on(SSO)wouldaccomplishthis authentication simplification objective
However,SSOaccessneedstobepartofa multilayered defense

page9image1085408640

page9image1085414880

Chapter 6 – Depth

page10image1082218656

Fig. 6.5 – Schema showing two layers of end-user authentication

page10image1082520816 page10image1082521152

page10image1082527376

Chapter 6 – Depth

page11image1085373104

Fig. 6.6 – Authentication options including direct mobile access

page11image1085439792 page11image1085440128

page11image1085446384

Chapter 6 – Depth

page12image1085381680

Layered E-Mail Virus and Spam Protection

Commercialenvironmentsareturningtovirtual,in- the-cloud solutions to filter e-mail viruses and spam
Tothatsecuritylayerisaddedfilteringsoftwareon individual computers
Antivirussoftwarehelpful,butuselessagainstcertain attacks (like botnet)

page12image1085496720

page12image1085503024

Chapter 6 – Depth

page13image1085462848

Fig. 6.7 – Typical architecture with layered e-mail filtering

page13image1085527712 page13image1085528048

page13image1085534304

Chapter 6 – Depth

page14image1085549232

Layered Access Controls

• Layeringaccesscontrolsincreasessecurity

• Addtothisthelimitingofphysicalaccesstoassets

• Fornationalinfrastructure,assetsshouldbecovered by as many layers possible

– Network-based firewalls – Internal firewalls
– Physical security

page14image1085581312

page14image1085587616

Chapter 6 – Depth

page15image1082868992

Fig. 6.8 – Three layers of protection using firewall and access controls

page15image1082881024 page15image1082881360

page15image1082887584

Chapter 6 – Depth

page16image1085556864

Layered Encryption

• Fiveencryptionmethodsfornationalinfrastructure protection

– Mobile device storage – Network transmission

– Secure commerce
– Application strengthening
– Server and mainframe data storage

page16image1085630656

page16image1085636928

Chapter 6 – Depth

page17image1082967376

Fig. 6.9 – Multple layers of encryption

page17image1083018784 page17image1083019120

page17image1083015616

Chapter 6 – Depth

page18image1083105776

Layered Intrusion Detection

Thepromiseoflayeredintrusiondetectionhasnot been fully realized, though it is useful
Theinclusionofintrusionresponsemakesthe layered approach more complex
Therearethreeopportunitiesfordifferentintrusion detection systems to provide layered protection
– In-band detection
– Out-of-band correlation – Signature sharing

page18image1083154864

page18image1083161168

Chapter 6 – Depth

page19image1083127392

Fig. 6.10 – Sharing intrusion detection information between systems

page19image1086348176 page19image1086348512

page19image1086354800

Chapter 6 – Depth

page20image1083010240

National Program of Depth

• Developingamultilayereddefensefornational infrastructure would require a careful architectural analysis of all assets and protection systems

– Identifying assets
– Subjective estimations
– Obtaining proprietary information – Identifying all possible access paths

page20image1083053296

page20image1083059568

Chapter 6 – Depth

ITS834Chapter6Depth.pdf

7 years ago
13.10.2019
10

Report issue

Answer(0)

other Questions(10)

National Program of Depth

cou

cyberattacks and counter measures

SCADA Systems

Disc6ssion

essay help

Discussion Board #4

discussion

emerging threats and counter measures of cyber security