Advanced Persistent Security

Introduction

In order to engage in Computer Network Defense (CND), you need to establish a firm base of protection. When you initially define the countermeasures for your organization, it is clearly based on a best guess as to where you may experience loss. You are, however, not expected to get it perfectly right the first time, and you will never get it perfectly right.

You will be attacked through attack vectors that you never anticipated. Even if you anticipated them, you may not have adequately mitigated the vulnerabilities exploited or even chosen to mitigate those vulnerabilities at all. For this reason, you need to consider your protection a dynamic program. You need to be proactive.

This section defines the issues involved in creating a ...