Home > Ask the Security Experts > Network Security Questions & Answers > Is a 'self-defending network' possible?
Ask The Security Expert: Questions & Answers
EMAIL THIS

Is a 'self-defending network' possible?

Mike Chapple EXPERT RESPONSE FROM: Mike Chapple

Pose a Question
Other Security Categories
Meet all Security Experts
Become an Expert for this site


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


>
QUESTION POSED ON: 14 September 2007
Certain vendors have long touted the benefits of what has been called the "self-defending network." Can a self-defending network really be possible, and if so, do I have to buy a certain vendor's products to have one?

>
EXPERT RESPONSE
The term "self-defending network" is clearly marketing hype promoted by a certain manufacturer of networking and security gear. If you're asking whether there's a product available that can be plugged into your network and allow you to rest easy, the answer is an unqualified "absolutely not." No matter what network devices you choose, there is simply no substitute for the time and expertise of qualified security professionals.

That said, there is some benefit gained from choosing interoperable security products, which is what the "self-defending" expression may be suggesting. If you have an intrusion prevention system (IPS), security incident manager and network admission control (NAC) system that can recognize each other and even make use of each others' data, you can save a great deal of time that you'd normally spend correlating events from each system individually.

As with any marketing catchphrase, I'd urge you to take the term "self-defending network" with a grain of salt. Perhaps the idea would be more accurately termed as a "coordinated defense network." But I guess that wouldn't sell as many widgets.

More information:

  • Learn how the Microsoft NAP/TNC alliance brings new dimension to network access control decisions.
  • Lynn Lucas, director of Cisco's mobility group, discusses how Cisco's latest work on the wireless front has fit into its vision of a 'self-defending network.'


  • Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


    RELATED CONTENT
    Network Security
    What are the differences between intrusion detection and intrusion prevention?
    Will there be DMZ routing issues if several firewalls serve as the default gateway?
    Should tunnel connections be initiated from an ISP to a internal data center, or vice versa?
    What are the top LAN security issues in a client-server network environment?
    What warning signs will indicate the presence of a P2P botnet?
    What reporting tools are available for an enterprise IDS?
    Is it possible to allow select access to IP addresses using Windows Server 2003?
    Is an IPsec VPN necessary when connecting remote servers that process financial transactions?
    What are best practices for creating an IDS and maintaining a signature database?
    What are the best ways to hide system information from network scanning software?

    Network Intrusion Prevention (IPS)
    What are the differences between intrusion detection and intrusion prevention?
    IBM announcements mark two years of ISS marriage
    Product review: AirDefense Enterprise 7.3
    NitroSecurity covers its bases with RippleTech deal
    Network intrusion prevention systems: Should enterprises deploy now?
    If one server in a DMZ network gets attacked from outside, will the other servers be corrupted?
    What security risks do enterprise honeypots pose?
    What are the benefits of 'in-the-cloud' network security services?
    What is a 'top-down' IPS sensor search?
    Best practices for purchasing an intrusion detection device
    Network Intrusion Prevention (IPS) Research

    Network Access Control Basics
    Network access control poised for a comeback by aiming small
    What are the top LAN security issues in a client-server network environment?
    What's the difference between access control mechanisms and identity management techniques?
    McAfee adds NAC module, appliance for unified policy enforcement
    Learn how to choose NAC services
    Exploring Microsoft's Network Access Protection policy options
    Companies Finding a Place for Maturing NAC Projects
    Sophos finds patching issues through endpoint NAC tool
    Forrester: NAC ready for wider deployments
    Which is a more secure data access technology: SPAN or TAP?

    RELATED GLOSSARY TERMS
    Terms from Whatis.com − the technology online dictionary
    Diffie-Hellman key exchange  (SearchSecurity.com)
    intrusion prevention  (SearchSecurity.com)
    network behavior analysis  (SearchSecurity.com)

    RELATED RESOURCES
    2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
    Search Bitpipe.com for the latest white papers and business webcasts
    Whatis.com, the online computer dictionary



    Search and Browse the Expert Answer Center
    Search and browse more than 25,000 question and answer pairs from more than 250 TechTarget industry experts.
    Browse our Expert Advice



    Find Security Solutions for Your Business
    Targeted Security Channel Tips for Resellers, Integrators and Consultants
    TechTarget Security Media
    Information Security View this month\\'s issue and subscribe today.
    Information Security Decisions Apply online for free conference admission.
    SearchSecurity.com
    HomeNewsMagazineMultimediaWhite PapersLearningAdviceTopicsEventsAbout Us

    About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
    TechTarget provides enterprise IT professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective IT purchase decisions and managing their organizations' IT projects - with its network of technology-specific Web sites, events and magazines.

    TechTarget Corporate Web Site  |  Media Kits  |  Reprints  |  Site Map




    All Rights Reserved, Copyright 2003 - 2008, TechTarget | Read our Privacy Policy
      TechTarget - The IT Media ROI Experts