{"id":47731,"date":"2022-07-29T16:59:00","date_gmt":"2022-07-29T16:59:00","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/network-security-depends-on-two-foundations-you-probably-dont-have\/"},"modified":"2022-07-29T16:59:00","modified_gmt":"2022-07-29T16:59:00","slug":"network-security-depends-on-two-foundations-you-probably-dont-have","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/network-security-depends-on-two-foundations-you-probably-dont-have\/","title":{"rendered":"Network security depends on two foundations you probably don\u2019t have"},"content":{"rendered":"
<\/div>\n

You\u2019ve done everything to secure your network, and you still face threats. That\u2019s what most enterprises say about their network security, and they\u2019re half right. Yes, they still face threats<\/a>, but they\u2019ve not done everything to address them. In fact, most enterprises haven\u2019t really implemented the two foundations on which real network security must be based.<\/p>\n

When I ask enterprises whether they\u2019ve done a top-down analysis of network security, they usually say they do it every year. When I ask what\u2019s involved in that assessment, they say they look for indications that their current strategies have failed. They build another layer, which is kind of like putting a second Band-Aid on a cut.<\/p>\n

Forgive me, but that doesn\u2019t sound very \u201ctop-down.\u201d Modern network security should start with the simple requirement that nobody should be able to access anything they\u2019re not supposed to be accessing. Here\u2019s Charlie, who supervises parking-lot maintenance. Suddenly, Charlie is reviewing last quarter\u2019s sales records, or checking out the inventory level of some products. Are these products perhaps wearing out the asphalt, or is this a signal of a threat from Charlie, or malware?<\/p>\n