Network Security for Vonnie's Distribution Services
Objective of this project is to design network solution and security system for the Vonnie's Distribution Services. The company is considering expanding from the first floor to the third floor within the next few years and the management asks the company Chief Information Officer (CIO) to design a stable, scalable and reliable network security and infrastructure. However, justification of the relationships between security and infrastructure is very critical for the design of the network system.
Justification and Support of the Relationship between Security and Infrastructure
In the network environment, organizations are faced two security problems concerning network infrastructure:
Noisy threats and Quiet threats.
Noisy threats are the network threats that interfere with a company network infrastructure, which could disrupt organizational business operations. On the other hand, quiet threats are the threats that cause real damage to the network infrastructure. The noisy threats include network attack through worms, virus, and spam. This type of attacks causes real damage to the network infrastructures, which could consequently disrupt business operations and productivity. However, the noisy threats can be visible. For example, when a CIO sees hundred of spam messages in his or her mailbox, the solution is to install anti-spam software in the network system.
However, quiet threats are more dangerous than the noisy threats, because this type of threats could involve data theft, which can go undetected for years. Network intruders can use different techniques such as unauthorized access attacks, network sniffing, and eavesdropping, when eventually discovered, an organization may not be able to calculate the material damages from the threats. In many cases, the data theft can include theft of customers' credit card information and theft of other sensitive information that could reach millions or billions of dollars depending on the size of an organization. The only solution to prevent both quiet and noisy threats from our network infrastructure is to integrate effective and efficient security systems into our network system to protect our organization from loss of data. (Verma, Sharma, & Mishra, 2012).
Intruders could gain access into our network infrastructures through our routers and servers. Thus, our organization is required to invest in the data and network security to enhance a secured and scalable network infrastructure. Typically, network security is very critical for our network infrastructures because integrating of security tools will enhance our risk management technique. Integration of risk management tool will assist our organization to limit the risk to our network systems.
Essentially, our business operation will require our organization to collect customer data such as credit card information, and other sensitive information such as bank account information, and our top policy is to protect our database from external intruders who may take advantages of our network upgrading to steal sensitive information. Our organization could lose large number of customers if we allow intruders to steal customers' data. Apart from the loss of revenue, and market advantages, our organization could face lawsuits for failing to protect customer's data. Thus, it is our obligation to design a scalable and secured network system using effective security systems to protect our network infrastructures.
Meanwhile, effective network security design is critical to enhance security of network system. The next section discusses the rational of physical and logical layout of our network infrastructures.
Rational for Physical and Logical Topography of our Network
A network is defined as group of software components and hardware devices necessary to enhance network connection within our organization. Our hardware component will consist of switches, hubs, cabling, phone lines and printer, and these devices are very critical for our networking environment. On other hand, software components will enhance effective communication system among our hardware devices. However, logical and physical layout of our network infrastructure is vey critical for our network system. The physical topography of our network refers to the physical design of our network infrastructures. Effective design of network topology will assist effective communication among users of our network system. Moreover, logical infrastructure of our network will consist of all software components required to enable network connectivity among the hardware devices, which will enhance effective network security system. Our network logical infrastructure will consist of:
Software products,
Network services end protocols.
Essentially, the logical component of our network typology will define number of important elements in our network infrastructure, which include:
Security system of our network
Speed of network connectivity, and Type of connection that will be established.
Design a Physical and Logical topographical Layout of the Planned Network Security System
The Fig 1 reveals our physical and network topology of our network infrastructure that also reveals the security configuration of our network system which focuses on high scalability, reliability, availability, feasibility and low latency.
Fig 1: Design a Physical and Logical topographical Layout of the Planned Network Security System
Typically, the system design provides the following security system:
Physical security,
Network security,
Application security,
Device hardening and Computer hardening.
Network security system includes the integration of network security infrastructures such as firewall, IDS (Intrusion Detection System), IPS (Intrusion Prevention System) and integration of network protection equipment such as routers and switches. On the other...
Firewalls: Great Network Security Devices, but Not a "Silver Bullet" Solution In construction, a firewall is a hardened divider between the hostile external environment outside and what needs to be protected inside. Similarly, firewalls are designed to protect computers from being accessed by unauthorized individuals, and for the most part, they perform this task well. Unfortunately, firewalls are also akin to the castles of old when siege weapons were built to
Which Products are Best Suited to a Small LAN With One Publicly Accessible Web Site: Cisco PIX Firewall Software is an excellent solution for small LANs with one publicly accessible web site. "Integrated Cisco PIX firewall hardware and software delivers full stateful firewall protection and IP Security (IPSec) VPN capabilities, allowing (...) rigorous (protection of...) internal network from outside intrusions" ("Cisco PIX," 2005). Cisco PIX firewall differs from typical CPU-intensive full-time
Firewall to Protect Companies A firewall is used to protect a person or business' network from exterior harms. Firewall may use packet filtering, user or client application authentication in order to protect the network. The actual process of protecting a network requires a firewall to filter incoming packet sizes, source IP address, protocol, and destination port. Administrators of a network are able to enact firewall protection on a router and
Cyber security tendencies have evolved into systems that are used for data security, mostly for big corporations which can afford the service. System vulnerability is one of the major concerns of organizations getting web servers, firewalls and security measures for their data. Technology companies burn the midnight oil trying to provide the highest level of security to databases, and a breach of security can be deemed a lapse by the
Firewalls Once upon a time a firewall was a physical barrier that kept a literal fire from spreading from one building to another. Now the term is more often used to refer to a variety of devices - both hardware and software - meant to keep information from being stolen from a computer. This paper examines the variety of commercial firewalls that are available today. Initially firewalls were separate pieces of hardware;
This is problematic, as these kinds of issues could lead to wide spread disruptions with no one knowing or understanding where it came from. For example, if a terrorist group was able to master this tool, they could utilize it to attack Western power grids. (Magnuson, 2013) This would create significant amounts of disruptions without having anyone being able to trace what is happening directly. When this occurs, there is
Our semester plans gives you unlimited, unrestricted access to our entire library of resources —writing tools, guides, example essays, tutorials, class notes, and more.
Get Started Now