New secure and low-cost design for defense in depth implementation using open source software

In this paper, we propose a new design with high-level security and low-cost implementation for different network topologies. Achieving both factors at the same time is a challenging work for network experts, especially when they want to apply defense in depth strategy in various components of their...

Full description

Saved in:
Bibliographic Details
Main Authors: Sajjadi Torshizi, Seyed Dawood, Rostampour, S., Tanha, M.
Format: Conference Proceeding
Language:English
Subjects:
Cisco
DMZ
Fires
Firewall
IDS
Linux
Monitoring
Open Source
Security
Web servers
Online Access:Request full text
Tags: Add Tag
No Tags, Be the first to tag this record!
Description
Summary:In this paper, we propose a new design with high-level security and low-cost implementation for different network topologies. Achieving both factors at the same time is a challenging work for network experts, especially when they want to apply defense in depth strategy in various components of their networks. Offered scenario has been done for one of the most visited web sites in an Iranian organization with more than 15,000 concurrent web users that all of them reliably and smoothly were served. Also, defense in depth strategy has been used to provide sufficient level of security in diverse components of the project. All applied security solutions in this project were based on open source [1] tools that results in saving a tangible cost by the prevention of purchasing commercial options. We will describe project big map, acquired results and all main components with their functions in this paper.
DOI:10.1109/SCOReD.2011.6148781