Information AssuranceThree Generations of Security Technology

• Trusted Computing Base

• Access Control & Physical Security

• Multiple Levels of Security

• Cryptography

1st Generation

(Prevent Intrusions)

Intrusions will Occur

Some Attacks will Succeed

2nd Generation

(Detect Intrusions,

Limit Damage)

3rd Generation

(Operate Through Attacks)

• Firewalls

• Intrusion Detection Systems

• Boundary Controllers

• Virtual Private Networks

• Public Key Infrastructure

• Big Board View of Attacks

• Real-Time Situation Awareness & Response

• Real-Time Trade-Off of Performance, Functionality, and Security

• Intrusion Tolerance

• Graceful Degradation

• Hardened Core

Previous slide

Next slide

Back to first slide

View graphic version