A Proposed Model for Datacenter in -Depth Defense to Enhance Continual Security(Applied Study to ENR Datacenter – Egyptian National Railways)
Year: 2013
Type: article
Abstract: Defense in Depth is practical strategy for achieving Information Assurance in today's highly datacenter environments.It is a "best practices" strategy in that it relies on the intelligent application of techniques and technologies that exist today.The strategy recommends a balance between the protection capability and cost, performance, and operational considerations.This paper provides an overview of the major elements of the strategy and provides links to resources that provide additional insight.Co mpanies need to address the security challenges of datacenter using a comprehensive defense-in-depth strategy.No single security solution will keep a determined thief fro m the goal of compro mising the hardware or software given enough time and resources.Applying mu ltip le layers of system security will slow the progress made by a thief, and hopefully, force the thief to abandon the pursuit, at the least, resale of the stolen property, and at worst, of confidential corporate data.The Defense in depth is the concept of protecting a Datacenter with a series of defensive mechanisms such that if one mechanism fails, another will already be in place to thwart an attack.In this paper, the main focus is given to highlight the security aspects of data center fro m perspectives of threats and attacks from one side and approaches for solutions from the other side.The paper also proposes an effective and flexib le d istributed scheme with two salient features.Our scheme ach ieves the integration of continual security imp rovement and Security Risk localizat ion.This paper deals with the implementation of defense in depth at a strategic, principle -based level and provides additional guidance on specific sets of controls that may be applicable to support an organizat ion's defense in depth init iatives.The paper will present in Section (1) the Defense in depth concept, Section (2) Threats, Adversaries, Motivations, Classes of Attack and Vulnerab ility Analysis, Section (3) Informat ion Security Assurance, Defense in Multip le Places, Layered Defenses, Security Robustness, Section (4) Design Goals and finally proposed solution and provide The IT Security Ro le & Functional Matrix Index Terms-Defense in Depth
Institution: Sadat Academy for Management Sciences
Language: English
Subfield: Information Systems
Field: Computer Science
Domain: Physical Sciences
Open Access status: hybrid
OpenAlex ID: W2089076857