3.1 Compare and Contrast security implications of different architecture models

What does IaC stand for and what does this do?

This stands for Infrastructure as Code. This is a way to define servers, network and applications as code. When using IaC, there are versions you can save and implement across different cloud networks for future use to make deployment easy and simple as well.

What’s the difference between microservices and API’s?

Microservices: This is considered as “monolithic applications” meaning that it’s one big application installed on the client to handle all the decisions. This faced several issues such as code changes that had to be made and change control versions.

API: Instead of one application making decisions for the client, this is the “glue” for microservices. The client connects to the API gateway and the API handles the traffic to the appropriate microservice. This is more scalable meaning you can add or modify certain microservices without affecting the rest and resilient meaning if one microservice fails or if there is an outage, it won’t affect the rest.

What does “air gapped” mean in terms of network infrastructure?

This is a term used to define 2 or more network devices that are not connected to each other. An example are 2 switches that are not connected together to communicate. So if an attacker got inside one of the switches, they’d have no way of knowing about the other switch.

What are the 3 layers used in SDN and what do each of them do?

Infrastructure Layer / Data Plane: This handles data being traversed over the network such as forwarding packets or frames, trunking, encrypting and NAT.

Control Layer / Control Plane: This manages the actions of the data plane. An example would be routing tables, session tables and NAT.

Application Layer / Management Plane: This is where you manage and configure the device either by through browser, SSH, API.

What is SCADA / ICS?

SCADA / ICS (Supervisory Control and Data Acquisition System / Industrial Control Systems is where a single device manages the equipment such as power generation, manufacturing equipment and more. This is more common ins industrial facilities and allows someone to monitor the equipment in real time and make modifications from that device instead of physically walking over to each piece of equipment.

What does RTOS mean and what does this do?

RTOS stands for Real Time Operating System. This is a specialized operating system designed to handle time-sensitive tasks with precise timing constraints, ensuring predictability and stability. These are common in embedded systems, medical devices and/or robotics.