Network Security Architectures

Chapter 5. Device Hardening

This chapter covers the following topics:

• Components of a Hardening Strategy

• Network Devices

• NIDS

• Host Operating Systems

• Applications

• Appliance-Based Network Services

• Rogue Device Detection

At the stumbling of a horse, the fall of a tile, the slightest pin prick, let us promptly chew on this: Well, what if it were death itself? And thereupon let us stiffen and fortify ourselves. —Michel de Montaigne, That to Philosophize Is to Learn to Die, 1580

There is no security for any of us unless there is security for all. —Howard Koch, Mission to Moscow, 1943

This chapter defines basic hardening strategies for the most common elements of a security system. Entire books have been written in detail about hardening ...