Share this page on these sites
Posted Friday, September 04, 2015
AFIT alum, Lt Col Eric Trias (M.S. Computer Engineering, 2002, Distinguished Graduate) co-authored the following article in the Air & Space Power Journal
SEADE:
Countering the Futility of Network Security
Mr. Frank Konieczny
Lt Col Eric Trias, PhD, USAF
Col Nevin J. Taylor, USAFR
Today's media is flooded with stories of cyber attacks prompting a loss of public confidence, resignations by senior officials, and a significant near- and long-term impact on our nation. Defense in depth, heavily dependent upon network perimeter security, is no longer sufficient. We should assume that adversaries will always be on our networks therefore, we must find new security concepts to protect our application and data. The security-encapsulated application and data enclave (SEADE), which includes a virtual application data center (VADC) and enterprise-level security (ELS), is a fundamentally different paradigm that will change the way systems are developed, deployed, and defended. By providing a separate security enclave for each application inside a VADC, enabled by ELS dynamic access control, we will be able to protect our most important treasure--the data within--as we continue to operate in a contested environment. The SEADE architecture will increase both speed of user access and application delivery to the mission, decrease day-to-day management of the network and applications, and counter the futility of network perimeter security.