#3 Defense in Depth

Physical controls

keep people away from the technology

Technical controls

hardware and software to keep things secure

fire walls, Active directory, authetication

Administrative controls

Policies and procedures

Physical segmentation

Separate devices, multiple units, separate infrastructure

Logical segmentation

Separate logically instead of physically using VLANs

Screened Subnet

Previously known as DMZ

An additionally layer of security between the internet and you

public access to public resources

Split knowledge

No one persona has all of the details

half of a safe combination

Network Access Control

You don’t get access until you authenticate

makes use of EAP and RADIUS

Honeypot

attract the bad guys by creating a virtual world to explore