DocumentCode
1417726
Title
Network security: it´s time to take it seriously
Author
Dowd, Patrick W. ; McHenry, John T.
Author_Institution
Dept. of Electr. Eng., Maryland Univ., College Park, MD, USA
Volume
31
Issue
9
fYear
1998
fDate
9/1/1998 12:00:00 AM
Firstpage
24
Lastpage
28
Abstract
“Network security is the most important thing on the planet”. We have heard these words uttered with great conviction many times. However, the first time it causes any inconvenience to system owners, administrators, or users, the same people hasten to add “except when it impacts performance, system complexity, or cost”. Let´s face it. Security is usually discarded when it contends with performance. The reason is simple, and at one time it may have even been valid: performance directly contributes to the bottom line while security provides only indirect benefits. But as the world becomes more tightly interconnected, organizations are feeling a greater need to rediscover network security. A thread that spans most definitions of network security is the intent to consider the security of the network as a whole, rather than as an endpoint issue. A comprehensive network security plan must encompass all the elements that make up the network and provide five important services: access-provides users with the means to transmit and receive data to and from any network resources with which they are authorized to communicate; confidentiality-ensures that the information in the network remains private (usually through encryption); authentication-ensures that the sender of a message is who he claims to be; integrity-ensures that a message has not been modified in transit; nonrepudiation-ensures that the originator of the message cannot deny that he sent the message and this is useful for both commercial and legal reasons
Keywords
authorisation; computer network management; cryptography; data integrity; data privacy; legislation; message authentication; administrators; authentication; comprehensive network security plan; confidentiality; encryption; integrity; legal reasons; network resources; nonrepudiation; performance; system complexity; system owners; user access; Data privacy; Data security; Explosives; Extraterrestrial measurements; IP networks; Information security; Laboratories; National security; Pain; Surges;
fLanguage
English
Journal_Title
Computer
Publisher
ieee
ISSN
0018-9162
Type
jour
DOI
10.1109/2.708446
Filename
708446
Link To Document