Please enable JavaScript.

Coggle requires JavaScript to display documents.

Ch4: Network Security - Coggle Diagram

- - - - Metered Usage
      - Reduced cost of ownership
      - Reduced energy and cooling costs
      - Scale up
    - - Software as a Service (S
        aaS)
        
        Ex. Google Workspace or Microsoft 365
        
        Pro: reduce IT investment costs
        
        Pro: increase work flexibility
        
        user access software via the Internet
      - Platform as a Service (PasS)
        
        provide platform for devlopers who care only app and data
        
        provider gives: infra and tools for soft dev, e.g. runtime, middleware, os and hardware
      - Infrastructure as a Service (IaaS)
        
        provide platform for devlopers who care only app and data
        
        provider gives: infra and tools for soft dev, e.g. runtime, middleware, os and hardware
  - - - Demilitarized Zone (DMZ)
      - Virtual Local Area Network (VLAN)
        
        To reduce collision domain
        
        To isolate network for particular tasks
      - Virtual Private Network (VPN)
        = communication tunnel between p2p tx
    - - Zero trust network
        
        micro segment networks
        
        require high sequrity check
        
        enfor frequent re-authentication of a user ID
      - Defense in Depth
      - Micro-segmentation
        
        divide the network with small subsections with their own security policies
        
        can utilize virtualization technology
        
        Ex. VLAN 1 for IT
        VLAN 2 for HR
- - - - 1.1 Host-Based IDS (HIDS)
        
        pro: detect anomaliteis on the host that NIDS cannot detect
        
        con: more costly b/c require admin attention on each system, but HIDS use centralized admin
        
        con: cannot detect network attacks on other systems
      - 1.2 Network-Based IDS (NIDS)
  - - - 4.1 HIPS
      - 4.2 NIPS