ISSC660
Week 7 Assignment
ISSC660
Abstract
Security systems make up the primary defense within networks, and designing security
measures to protect network information is a key tenant of network security. This paper will
explore some of the central elements of security system designs, such as the creation of
security zones and mitigation techniques for protocol layer specific vulnerabilities.
Keywords: security, design
Security System Design
Security systems within networks must be designed in a way that promotes the
protection of information within an organization. Throughout the world today, the Internet of
Things (IoT) has created a grand ecosystem of interconnected devices whose purposes
complement each other. This also creates security problems, as most modern technology is
able to connect wirelessly to networks. One thing that can help mitigate risks associated with
connected devices is through the creation of security zones.
Security zones within a network serve to segment different elements of network traffic
and functions from each other. These zones can be generalized as uncontrolled, such as the
internet, and controlled, or the local area network (LAN). Network security professionals can
go even further depending on the availability of hardware or software to define a demilitarized
zone (DMZ), and separate internal network traffic based on purpose using virtual route
forwarding tables (VRFs). Defining these security zones is dependent on the organizations
requirements; if there is no need for a DMZ to be established, then the zone will not be
defined or created. In the event a DMZ is needed, it can be used as a buffer between the
