Cyber Security Day 4: Understanding Layered Security & Defence in Depth


HELLO FRIENDS!!

WELCOME TO MY CYPHER LOG

Successfully I have learned continuously for three days without any procrastination and I am just feeling proud of myself, 
I hope you guys too learn continuously without any distractions.

Ok let's see what I have learned today,

   In the last blogs we have seen about security controls in this blog we are going to dive into depth of defence in cyber security and also there is an architecture called zero trust, let's see how it works.

Defence in depth

   Security controls are just a single safety measure to prevent an attack but defence in depth are not like that as we can understand with the name itself it's controlling structure which will protect the asset from an attack layer by layer. And it has five layers. 
If a company hosts a website they won't just rely on a single layer of security like five layers of controls
Layer 1 is an external firewall that will automatically block the IP address which looks suspicious to them as we program.
Layer 2 web application firewall and it will automatically filter out the malicious traffic in the web to prevent attacks.
Layer 3 Operating system firewall unlike others it only allows the curated and specific ports to communicate with their applications.
Layer 4 Host based Anti-Virus, it will scan the files in the server for safety measures .
Layer 5 File permissions, unlike the other layers here, only specific ports like admin can read the database.
This is how the whole 5 layers works to protect data from theft.

Ok move in to the next topic which is an Zero trust architecture

You may think I only know about building architecture which will be the zero trust architecture, actually I thought that so I will make it clear to you .
If we want to know about zero trust architecture we need to time travel to past years because cyber security operates on a "castle and moat model for decades", and it is also called as an perimeter security, but it won't work properly for modern attacks so they have switched to zero trust architecture.
 To make it more simple our mom would always say don't trust anyone when you go out that's the base of zero trust architecture and it also works under the base "never trust always verify".

It also has 3 core principles

The first one is verify explicitly 

it always  authentication and Authorization based on  all available points like if an employee from a company work from home, the control system will automatically checks their laptop have malicious attacks happened to make their data secure.

The second one is least privilege access 

    If an new employee hired in a company they would get the access based on their role because for safety precautions organisation use this by this they can protect their data.

And the last one is assume breach 

     Always stay alert like an hacker already entered in our network by assuming like this we can be alert and precautious, so organisation use this technique.

So that's all guys today's lesson 
I have tried to explain based on how I understood it so I hope you guys too understood it, let's see in another interesting blog.

If you want study guide for this topic you can get through this site

                                     THANK YOU

Comments

Post a Comment

Popular posts from this blog

Day 2: Understanding the CIA Triad, AAA

Image
HELLO FRIENDS!! WELCOME TO MY CYPHERLOG Today I studied the fundamentals of cybersecurity - the CIA Triad and AAA Framework. by journaling this in this blog I pushed myself to be stay productive  it's really motivating me!! Let me break down what I learned in simple terms.   At first I have started with CIA Triad and AAA Framework actually this the basic foundation of cybersecurity so we need to understand it well to master it, as you thing its not an complicating topics because I too thought that, its just an simple topic which we can easily connect with our daily life, so let me explain it clearly. THE CIA TRIAD    CIA Triad is nothing but a combined term of three words which is CONFIDENTIALITY, INTEGRITY AND AVAILABILITY and we can call it as an three pillars of cybersecurity so let see how it is more important in cyber. CONFIDENTIALITY  CONFIDENTIALITY is, if you are authorized to the system or data like we can take our mobile or laptop as an example you're ...
Read more

Cryptography Basics: Encryption Types & Hashing Explained

Image
 HELLO FRIENDS WELCOME TO MY CYPHER LOG         Today I came up with a topic which I wondered about what it will be from the first year of my studies in cybersecurity, The cryptography.  In this blog we are going to un-wrap this topic and learn more about it. LETS GET INTO THE TOPIC CRYPTOGRAPHY     You may think that it can be difficult to learn but actually there's nothing like that because I too thought like that about this, if you still think it's difficult I will explain it Like you want.    Cryptography is encrypting data from a readable plain text to unreadable cipher text format. Cryptography is like a knife It has both advantages and disadvantages. Its purpose varies based on who uses it, if you want to use it to protect data it can keep it secure, On the other hand if an attacker uses it he can create a massive bad impact like implement the attack the ransomware. THE TWO MAIN TYPES OF CRYPTOGRAPHY     As I have mentio...
Read more