Network Intrusion Prevention (IPS)
Home > Ask the Security Experts > Network Security Questions & Answers > Is a 'self-defending network' possible?
Ask The Security Expert: Questions & Answers
EMAIL THIS

Is a 'self-defending network' possible?

Mike Chapple EXPERT RESPONSE FROM: Mike Chapple

Pose a Question
Other Security Categories
Meet all Security Experts
Become an Expert for this site


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


>
QUESTION POSED ON: 14 September 2007
Certain vendors have long touted the benefits of what has been called the "self-defending network." Can a self-defending network really be possible, and if so, do I have to buy a certain vendor's products to have one?

>
EXPERT RESPONSE
The term "self-defending network" is clearly marketing hype promoted by a certain manufacturer of networking and security gear. If you're asking whether there's a product available that can be plugged into your network and allow you to rest easy, the answer is an unqualified "absolutely not." No matter what network devices you choose, there is simply no substitute for the time and expertise of qualified security professionals.

That said, there is some benefit gained from choosing interoperable security products, which is what the "self-defending" expression may be suggesting. If you have an intrusion prevention system (IPS), security incident manager and network admission control (NAC) system that can recognize each other and even make use of each others' data, you can save a great deal of time that you'd normally spend correlating events from each system individually.

As with any marketing catchphrase, I'd urge you to take the term "self-defending network" with a grain of salt. Perhaps the idea would be more accurately termed as a "coordinated defense network." But I guess that wouldn't sell as many widgets.

More information:

  • Learn how the Microsoft NAP/TNC alliance brings new dimension to network access control decisions.
  • Lynn Lucas, director of Cisco's mobility group, discusses how Cisco's latest work on the wireless front has fit into its vision of a 'self-defending network.'


  • Sound Off! -   Be the first to post a message to Sound Off!


    Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


    RELATED CONTENT
    Network Security
    Will Cisco's plan to open access to the IOS improve network security?
    Will VoIP attacks result in more than just spam?
    Should enterprises implement a mandatory iPhone VPN?
    Will organizations that lag behind on IPv6 adoption have greater security risks?
    Should iPhone email be sent without SSL encryption?
    How to secure an FTP connection
    DMVPN configuration: Is an additional firewall needed between the router and the Internet?
    Is centralized logging worth all the effort?
    What are the pros and cons of shaping P2P packets?
    Should an ISP keep corrupted machines off of a network?

    Network Intrusion Prevention (IPS)
    Network intrusion prevention systems: Should enterprises deploy now?
    What security risks do enterprise honeypots pose?
    What are the benefits of 'in-the-cloud' network security services?
    What is a 'top-down' IPS sensor search?
    Best practices for purchasing an intrusion detection device
    VeriSign, AirMagnet team up for wireless IPS
    Sourcefire, Nmap deal to open vulnerability scanning
    Interop: Vendors update software, demonstrate new security features
    McAfee launches IPS for 10g networks, but is IT ready?
    Microsoft NAP-TNC compatibility won't speed adoption, users say
    Network Intrusion Prevention (IPS) Research

    Network Access Control Basics
    Sophos finds patching issues through endpoint NAC tool
    Forrester: NAC ready for wider deployments
    Quiz: Using NAC to create a strong endpoint security strategy
    Phased NAC deployment for compliance and policy enforcement
    What should an internal support model for identity management look like?
    Security Wire Weekly: Sizing up the NAC market
    Making the NAC decision: Open source vs. commercial network access control products
    Experts: NAC not dead, just immature
    FreeRADIUS: Acing a secure connection
    How to test drive NAC without busting the budget

    RELATED GLOSSARY TERMS
    Terms from Whatis.com − the technology online dictionary
    Diffie-Hellman key exchange  (SearchSecurity.com)
    intrusion prevention  (SearchSecurity.com)
    network behavior analysis  (SearchSecurity.com)

    RELATED RESOURCES
    2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
    Search Bitpipe.com for the latest white papers and business webcasts
    Whatis.com, the online computer dictionary



    Search and Browse the Expert Answer Center
    Search and browse more than 25,000 question and answer pairs from more than 250 TechTarget industry experts.
    Browse our Expert Advice

    TechTarget Security Media
    Information Security View this month\\'s issue and subscribe today.
    Information Security Decisions Apply online for free conference admission.
    SearchSecurity.com
    HomeNewsMagazineWebcastsWhite PapersLearningAdviceTopicsEventsAbout Us

    About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
    TechTarget provides enterprise IT professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective IT purchase decisions and managing their organizations' IT projects - with its network of technology-specific Web sites, events and magazines.

    TechTarget Corporate Web Site  |  Media Kits  |  Reprints  |  Site Map




    All Rights Reserved, Copyright 2003 - 2008, TechTarget | Read our Privacy Policy
      TechTarget - The IT Media ROI Experts