Network Security, Firewalls, and VPNs, 3rd Edition

Network Design and Defense in Depth

Every network is different. However, common security principles apply to every network, regardless of its unique elements. One of these common principles is secure network design. Secure network design embeds core protections and improvements into an IT infrastructure before it is implemented. Design comes from planning. Planning comes from sufficient knowledge and understanding of business needs, user behavior, and network vulnerabilities.

Common security goals include confidentiality, integrity, availability, privacy, authentication, authorization, nonrepudiation, and accounting. To accomplish these goals efficiently, informed planning assists you in designing the network before deployment. Understanding ...