Planning for Network Security
摘要
The Internet allows an attacker to attack from anywhere in the world from their home desk. They just need to find one vulnerability, while a security analyst needs to close every vulnerability. If that sounds nearly impossible to defend, then implement defense in depth: many layers require an attacker to penetrate multiple levels of security to succeed. Network security inventories services, then uses data classification techniques and zoning to secure resources. Network controls address confidentiality, authenticity, integrity, non-repudiation and anti-hacking.