Data plane.
Process the frames, packets and network data
Process forwarding, trunking encrypting, NAT
Control plane:
Control plane:
Manages the actions of the data plane
Define policies and rules
Determines how packets should be forwarded
Routin tables session tables, NAT tables
Controlling trust :
Adaptive Identity :
Consider the source and the requested resources
Multiple risk indicators relationship to the organization, physical location, type of connection, IP
address.
Make the authentication stronger if needed
Threat scope reduction:
Decrease the number of possible entry points
Policy-driven access control:
Combine the adaptive identity with a predefined set of rules.
Security comes down to these questions
What is your critical data?
Where is located?
Who has access to it?
Who should have access to it?
Identity = the network you try to protect. How the company makes money.
Protect = act to protect the network
Detect = find the thread to try to solve it
Respond = react on danger
Recover = recover critical data that may be damaged by cyberattack
Govern = give funding, give direction.
CIA Triad:
Confidentially – maintain the secrecy of sth. Prevents the intentional or
unintentional disclose of data:
Encryption
Access Control with IAAA and Physical security
Integrity – make sure data has not been changed by unauthorised personnel
Hashing Algorithm:
Security Algorithm (SHA)
Message Digest 5
Availability – accessible when needed by those who need it
Redunadancy and fault tolerance
Risk redundancies
Power reduces
Backups and generators
Must focus on all three but it is important to put three care areas in priority order
Intelligence agencies are concerned more with confidentiality
Financial institutions are focused on integrity
E-business sites put more emphasis on integrity
Threat – sth that can mess you up. An Agent or an actor that can cause harm.
Ex: Malware, inside treats, api’s
Vulnerability – a weakness or a flow that someone can exploit to cause harm
Ex: unpatcheched systems, zero days, untrained users
Exploit – a technique or code that a treat can use to take advantage of a vulnerability
Risk – is a probability for loss. This is where: Thread overlap with Vulnerability.
Basic Risk Concepts:
Security deals with a managing risk to your critical assets
Remember: Risk is the probability of a thread a crossing or touching a vulnerability
Risk = Vulnerability * Threat
Threats are outside of our control, focus on what we can control (Vulnerability)

Focus on the vulnerability that matter to your organization
Threats that have the highest like hood
Vulnerability that has the highest impact

It is impossible to eliminate all risk
Your job to track all the recent threads and try to prevent them from happening
Risk Mitigation is about finding the right balance between security and functionality
100% security does exist, but it has 0% value

Every time you add functionality you are reducing security
The benefits achieved by the functionality should outweigh any risk created by the reduction in
security
AAA
Authenticity and non-repudiation
Authenticity ensures data, messages and identities are real, reliable and haven’t been tampered
with by unauthorised personnel.
Prove that you sent this email not sb ese
Non-repudiation ensures that a person or entity cannot deny sending a message performing for their
digital actions
Technical Controls: Firewalls, encryption, GPO, IDS/IPS, least Privilege, Antivirus Software
Restriction to sign in at 9 am
Managerial Controls: Setting the House Rules, Security Policies,
Operational Controls: daily habits in the house, have you changed your password ?
Physical Controls: fences, guards, cctv, secure rooms,