NETWORK SECURITY ARCHITECTURE

Transcription

1 PAGE 1 NETWORK SECURITY ARCHITECTURE DEVELOPMENT GROUP, INC. Yur Netwrk Security Will Bite Yu Sner Than Yu Think

2 Netwrk Security It s a whle new wrld PAGE 2 In the past Firewall Anti-virus Cntent Filter Passwrds Nw Purpse-built architectures Individual prducts are significantly less relevant

3 Intrducing a Purpse-built Architecture Let s build a safe car PAGE 3 What d we need t add t a car t make it safe? We g fr a test drive and hit rain and sleet. Keep driving. It s slick, s we hit the brakes Brakes Air bags Seat belts Steering Headlights Windshield wipers Washer fluid Tubing A plan t integrate this int the car. Tires Inflatin standards Rutine checks and prcess Maintenance plans and replacement strategies S, we re starting t build an architecture here, but we re still missing smething.

4 Purpse-built Architecture (cnt d) What are we missing? PAGE 4 Prcedures Prcesses Training Rutine Maintenance Safety Checks Cleaning the windws Withut prcedures, ur vehicle will quickly becme cmprmised. Blinker utilizatin Back-up camera usage Shutting the drs Withut prcesses, ur vehicle will becme unreliable. Learning t drive Maintaining the vehicle Defensive driving Rad cnditins and hazards Even the safest f cars is dangerus in the hands f an untrained driver. All f these items, prcedures, prcesses, and training MUST be purpse-built t facilitate safety. Nearly every single cmpnent in the car has sme cntributin t safety and/r security. *Nt any ne cmpnent f the architecture is safety all by itself.

5 Let s Get Back t Netwrk Security Dn t get lst in the sea f chices PAGE 5 IT ften wants t talk abut: Firewalls Encryptin Netwrk Access Cntrl SSL Decryptin Sensr-based security Intrusin preventin Anti-Malware Exfiltratin Filtering Clud security Prtcls Cmpnents and stuff Just like with ur car, nt any single thing is safety/security all by itself. It all has t be purpse-built t all wrk tgether t cntribute t this cncept f safety.

6 Let s Get Back t Netwrk Security Dn t get lst in the sea f chices PAGE 6 All f thse things are imprtant, but They MUST all be purpse-built t wrk tgether t prduce the security utcme The security utcme MUST be: Sustainable (aligned with staffing/utsurcing capacity) Affrdable (what s it cst t d r nt d) Purpse-built (everything needs t be prven t wrk tgether) Many envirnments end up as an amalgamatin f prducts frm multiple manufacturers that ends up being expensive, ineffective, and unsustainable. It s a cstly science experiment.

7 But, what abut best-f-breed? Danger! PAGE 7 Often IT discusses buying best f breed prducts. They spend time evaluating individual cmpnents, but they ften lack the skill set, tls, testing plans, r envirnment t prperly d this. Let s build anther car a best f breed car. This will be an awesme car. Maserati engine BMW Suspensin Tyta bdy Nissan transmissin Vlkswagn brakes Jeep gears Tesla battery See the prblem? Each thing is awesme by itself. But, even IF yu get it t actually run Is it sustainable? Is it supprted? Is it still even safe and secure?

8 S, hw d we d it right? Find the right partner PAGE 8 K-12 IT will mst ften nt have the skill sets r resurces t authr and implement an architecture independently Have partners r manufacturers discuss business utcmes and architectures, nt prducts Avid manufacturers r partners selling bxes Identify primary stakehlders fr netwrk security this is never just IT Define business bjectives cllabratively with stakehlders Identify and critically analyze architectural appraches MINIMIZE the number f manufacturers invlved Sustainability and training MUST be part f the architectural plan

9 D it Differently Take away PAGE 9 Buying prducts ften fails t prduce the security utcme required by the rganizatin. Purpse-built architectures must drive prduct selectin, sustainability planning, training, business arrangements, plicy, and even staffing chices. Best-f-Breed appraches t netwrk security will likely create a highly cmplex, expensive, and unsustainable envirnment. Minimize cst and cmplexity by minimizing manufacturer partners within the architecture. Chse the right partner.

10 Questins? PAGE 10 Develpment Grup, Inc. Jasn Eatmn, Principal (530)