Premium Content

Access "Beyond network perimeter defense: A 'submarine warfare' strategy"

Dan Houser, Contributor Published: 01 Aug 2003
IPSec vs. SSL VPNs: Which cures your remote access ills?

This article is part of the August 2003 issue of IPSec vs. SSL VPNs: Which cures your remote access ills?

Perimeter defense is a lost battle. Like old generals, we're still fighting the last war, in which our network was a castle with impregnable walls, a well-defined entry point across the drawbridge (head-end router), portcullis (firewall) and guards (IDS). Today's infosec paradigm is submarine warfare. Attacks can come from anywhere, at any time. There's no well-defined perimeter, and it's often difficult to tell friend from foe. Defenses should focus on hardened, well-protected assets--not bigger, stronger fences. Stealth, intelligence gathering and deception play increasingly critical roles in enterprise security. We have failed to adapt to the rapid changes in technology that have fundamentally altered the battle we're fighting. Instead, we continue to spend money on point solutions to counter the latest attacks. We need a fundamental change in thinking--not just more layers of firewalls, IDSes and network components. We're simply fueling an infosec arms race, in which the only victors are the arms suppliers. The submarine warfare model teaches us that ... Access >>>

Access TechTarget
Premium Content for Free.

By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Already a member? Login to access this content.

What's Inside

Features
  • Columns
    • Examining device-based authentication by Diana Kelley, Contributor

      Combining device-based authentication technology with existing user-based authentication would be appealing for many organizations, but technical details remain unclear.

More Premium Content Accessible For Free

Back to top