Understanding the protection game [computer network security]

This article gives a general outline of the requirements required for computer network security. The main focus is on blended protection solutions that cover in-line intrusion prevention, network and client virus scanning, spam and content filtering, and virtual private network (VPN) gateway functionality. Specific security elements discussed include: firewall functionality - to block unauthorised access attempts to systems, applications, networks, plant, and partner sites - and real-time inspection systems that monitor and protect against Web, email, and file transfer protocol (FTP) traffic. In addition to standard anti-virus (AV) services, specialist network AV filtering is also considered, to protect vulnerable control systems that cannot run desktop or server-based AV. Additional consideration is also be given to the provision of intrusion prevention systems (IPS).