tailieunhanh - Bảo mật hệ thống mạng part 2

Rõ ràng, chúng ta không thể chỉ dựa vào một loại duy nhất của an ninh để bảo vệ thông tin một Orga-nization của. Tương tự như vậy, chúng ta không thể dựa vào một sản phẩm để cung cấp tất cả các bảo mật cần thiết cho máy tính của chúng tôi và các hệ thống mạng. Thật không may, một số nhà cung cấp (trong lòng nhiệt huyết của họ để bán sản phẩm của họ) đã ngụ ý rằng đó thực sự là đúng sự thật | 10 Network Security A Beginner s Guide products. If the product is not certified users might be considered negligent if their site was successfully penetrated. Unfortunately we have two problems with such a concept The pace of technology continues so there is little reason to believe that a lab would have any better luck certifying products before they become obsolete than previous attempts. It is extremely difficult if not impossible to prove that something is secure. You are in effect asking the lab to prove a negative that the system cannot be broken into . What if a new development tomorrow causes all previous certifications to become obsolete Does every system now have to be recertified As the industry continues to search for the final answer we are left to define security as best we can. We do this through good security practice and constant vigilance. WHY SECURITY IS A PROCESS NOT POINT PRODUCTS Obviously we cannot just rely on a single type of security to provide protection to an organization s information. Likewise we cannot rely on a single product to provide all of the necessary security for our computer and network systems. Unfortunately some vendors in their zeal to sell their products have implied that such was actually true. The reality of the situation is that no one product will provide total security for an organization. Many different products and types of products are necessary to fully protect an organization s information assets. In the next few paragraphs we will see why some of the more prominent security product categories cannot be the all-encompassing solution. Anti-Virus Software Anti-virus software is a necessary part of a good security program. If properly implemented and configured it can reduce an organization s exposure to malicious programs. However anti-virus software only protects an organization from malicious programs and not all of them remember Melissa . It will not protect an organization from an intruder who misuses a .