Thursday, 24 August 2017 17:31

IT Defense In Depth Part 1

Written by
Rate this item
(1 Vote)

In the 1930s, France built a trench network called the Maginot Line to rebuff any invasion. The philosophy was simple: if you map out all the places an enemy can attack, and lay down a lot of men and fortifications at those places, you can rebuff any attack. The problem is, you can’t map every possible avenue for attack.

What does this have to do with IT security? Today many business owners install an antivirus program as their Maginot Line and call it a day. However there are many ways to get into a network that circumvent antivirus software.

Hackers are creating viruses faster than antivirus programs can recognise them (about 100,000 new virus types are released daily), and professional cybercriminals will often test their creations against all commercially available platforms before releasing them onto the net.

Even if you had a perfect anti­virus program that could detect and stop every single threat, there are many attacks that circumvent anti­virus programs entirely. For example, if a hacker can get an employee to click on a compromised email or website, or “brute force guess” a weak password, all the antivirus software in the world won’t help you.

There are several vulnerabilities a hacker can target: the physical layer, the human layer, the network layer, and the mobile layer. You need a defense plan that will allow you to quickly notice and respond to breaches at each level.

The physical layer refers to the computers and devices that you have in your office. This is the easiest layer to defend, but is exploited surprisingly often.

Here are a few examples:

  • Last year 60% of California businesses reported a stolen smartphone and 43% reported losing a tablet with sensitive information.
  • The breaches perpetrated by Chelsea Manning and Edward Snowden occurred because they were able to access devices with sensitive information.
  • For example, Comptia left 200 USB devices in front of various public spaces across the country to see if people would pick a strange device and insert into their work or personal computers. 17% fell for it.

For the physical layer, you need to:

  • Keep all computers and devices under the supervision of an employee or locked away at all times.
  • Only let authorized employees use your devices
  • Do not plug in any unknown USB devices.
  • Destroy obsolete hard drives before throwing them out

Next time in Part II, we will talk about the human and network layers of security.

Read 13603 times Last modified on Thursday, 24 August 2017 17:46
Jordon Darling - CISSP

Jordon is the President/CEO of  HITECH. He is a business minded security professional who has a passion for people and small business.  Some of his certifications include: CISSP, CSSA, MCPS, MCNPS, MS, SA

1145 comments

  • Comment Link nasdaqim Monday, 24 June 2019 05:40 posted by nasdaqim

    air jordan 10 ovo nero scarpe per vendita asics gel lyte iii varsity verde
    nasdaqim

  • Comment Link estoreplaces Monday, 24 June 2019 05:38 posted by estoreplaces

    oakland raiders replica jersey for cheap custom authentic michigan football jersey uk sale jordan retro 10 x under armour clutchfit drive low vert nike kd 7 prm blanco mens 2015 nike nfl philadelphia eagles t shirts 32
    estoreplaces

  • Comment Link bindonfarm Monday, 24 June 2019 04:06 posted by bindonfarm

    white sox 35 frank thomas black alternate cool base stitched youth mlb jersey mlb jerseys san francisco giants 22 jake peavy grey cool base road 2 w 2014 world series patch jerseys elite darren sproles mens jersey philadelphia eagles 43 road white nfl germany 11 werner away soccer country jersey nike jets 54 avery williamson white mens stitched nfl vapor untouchable limited jersey nike falcons 2 matt ryan black super bowl li 51 mens stitched nfl limited 2016 salute to service jersey
    bindonfarm

  • Comment Link deliaspub Monday, 24 June 2019 03:52 posted by deliaspub

    blanco azul p煤rpura nike zoom kobe icon uk zapatos rojo and p煤rpura jordans new air max 90s jordan 31 negro and rojo uk scarpe bianca nero nike air total foamposite max wholevendita nike mercurial vapor femminile nero blu marrone
    deliaspub

  • Comment Link secorsaab Sunday, 23 June 2019 19:07 posted by secorsaab

    jordan 11 phantom blue billig camo red sox hat womens yeezy billig nike mercurial veloce fg black and red billig kobe 10 black mamba pack for cheap billig rays 3 evan longoria white womens fashion stitched mlb jersey billig women nike tampa bay buccaneers 65 jeremy trueblood elite red team color nfl jersey sale billig
    secorsaab

  • Comment Link kenchona Sunday, 23 June 2019 15:18 posted by kenchona

    white sox 35 frank thomas black alternate cool base stitched youth mlb jersey mlb jerseys san francisco giants 22 jake peavy grey cool base road 2 w 2014 world series patch jerseys elite darren sproles mens jersey philadelphia eagles 43 road white nfl germany 11 werner away soccer country jersey nike jets 54 avery williamson white mens stitched nfl vapor untouchable limited jersey nike falcons 2 matt ryan black super bowl li 51 mens stitched nfl limited 2016 salute to service jersey
    kenchona http://www.kenchona.com/

  • Comment Link bostbarge Sunday, 23 June 2019 14:12 posted by bostbarge

    youth nike new england patriots 39 danny woodhead limited navy blue team color nfl jersey sale billig roshe run mens wolf grey billig limited gavin escobar youth throwback jersey dallas cowboys 89 alternate white nfl billig cubs 21 sammy sosa grey road womens stitched mlb jersey billig uk red sale nike acg billig nike air max 2014 black white gold shoes on sale billig
    bostbarge

  • Comment Link edisondcs Sunday, 23 June 2019 12:52 posted by edisondcs

    game lael collins youth jersey dallas cowboys 71 road white nfl billig women nike tampa bay buccaneers 25 aqib talib game red team color nfl jersey sale billig reebok oakland raiders sebastian janikowski 11 white authentic jerseys sale billig mlb jerseys st louis cardinals 45 bob gibson cream 2011 world series fall classic mlb jerseys billig
    edisondcs

  • Comment Link tvtgCoar Sunday, 23 June 2019 09:57 posted by tvtgCoar

    [url=http://cialisgretkjss.com/]online cialis[/url] cialis cheap cialis generic

  • Comment Link olplCoar Sunday, 23 June 2019 09:43 posted by olplCoar

    [url=http://viagranerrds.com/]viagra pill[/url] viagra price viagra price

Leave a comment

Make sure you enter all the required information, indicated by an asterisk (*). HTML code is not allowed.