By Ashish Gupta, Executive Vice President and Chief Marketing Officer at Infoblox which operates in the Middle East and Africa
With digital threats growing more rampant across the world, the idea of building ‘walls’ for cyber defence and protection can seem appealing. But even in this age of hackers relentlessly penetrating our networks, in the information technology security industry we know that walls don’t work.
The truth is that surrounding yourself with impenetrable barricades is akin to sticking your head in the sand. Walls by themselves fail to tackle the root cause of threats, meaning any sense of safety created is artificial. Organisations need to have a holistic security posture that spans their internal network and devices. More importantly, they must anticipate malicious external threats.
Security requires a holistic approach
For protection, traditional IT security systems have for a long time relied on perimeter defences, such as firewalls, intrusion detection systems and intrusion prevention systems. But that paradigm has changed, as cybercriminals have evolved and cyberattacks have increased in volume and sophistication. Malware is continuing to explode. Singular perimeter defences are no longer enough.
Internal infrastructure, whether digital or physical, is meant to encourage and foster a natural ebb and flow – of both good and bad – with the world beyond the walls. Blocking this organic two-way flow only incites turmoil and turbulence within. Modern businesses rely on constant communication both within and outside the organisation. After all, while employees are crucial, a business cannot survive without customers, partners, investors and other external stakeholders. These are all outsiders who keep the business alive.
Therefore, building thick, impenetrable walls goes against this grain of open and constant communication that our 21st century enterprises are built on. Keeping everything out is not an option (including insidious actors, hackers or viruses) and keeping everything in (halting the outward flow of data) is also impossible. As such, the industry must respond not with rigid, insular systems that block, but rather open, adaptive systems that can learn as threats evolve and move quickly to discover and resolve threats. This is the only way to truly bolster security.
So how do we go about building these protective, intelligently porous systems? Let’s break down what a network like this would entail.
It starts with the foundation
Today’s digital organisations must strive to build secure systems and networks that are open and enable the bidirectional flow of information, support the needs of the business and are simple to manage, all while maintaining security. These networks are not one element but a collection of widgets, or to return to the wall metaphor – bricks that need to be glued together.
These bricks are crucial to the foundation of your infrastructure. They must strengthen each other, maintain the integrity of the foundation, and provide the necessary protection, but always allow the free flow of ideas, information, commerce and communication.
Control and security come from the core
The core of the network is what enables communication and interaction with others in the broader digital ecosystem. In stark contrast to rigid perimeter defences and walls, the network needs to provide protection without compromising openness. This means building digital infrastructure that is responsive and flexible.
Most importantly, in today’s dangerous cyber climate, they must protect the infrastructure’s integrity, the assets and data in the enterprise, and the users and devices — guarding against malware, hackers, data leaks and attacks.
Defence and intelligence are synonymous
Walls neglect to address the points at which the threats originate, allowing hackers to persist and grow more sophisticated in seeking new backchannels and vulnerabilities to penetrate. So in this day and age of so many threats, how can we safeguard against all this without erecting walls?
The solution to outdated perimeter defences is to build layers of actionable intelligence that seek to understand the causes, behaviour, history, and nature of those gaining access to the network — similar to our unsung heroes, the officers at airports and borders, who ask travellers where they’ve been, why they left, and what they’re bringing in. These are all contextual pieces of information that when analysed provide actionable intelligence.
We need to build the same kind of multilayer defence that the human physiology provides: the skin (the wall in this scenario) allows a natural ebb and flow, but is supported by our white blood cells fighting infections internally. Meanwhile, the brain learns how to avoid external threats using contextual and actionable insights, providing holistic defense. Today’s digital organisation and its network are much like a living organism that needs intelligence for survival.
Equally important is balancing visibility and flexibility. To enable a secure enterprise, you need to be able to see everything on your network and to evaluate new additions. Think of a device that is added to the network: you need to ensure that it is not introducing malware into the network while also being adaptable enough to accommodate a new piece of the network.
This could be something as simple as automating the process by which a printer is added to the network or creating guest permissions for a contractor’s device once it’s been verified. Crucially, networks must be scalable so that they can keep pace with a modern enterprises’ growth, as new people and devices constantly join or exit the fold, the network must be able to adapt.
Moving beyond bricks in the wall
Our rich digital ecosystems can only thrive and innovate via learning from and evolving with the disparate digital communities and netizens beyond our perimeters, even if this means occasional friction and conflict. Data, ideas, digital currency, commerce, and interactions rely on this two-way flow of both good and bad.
It is true that like every building, every organisation constructs defences around its physical and virtual premises. But all walls do well is isolate and create an artificial sense of security. Instead we must accept the reality that in today’s cyber climate, threats are bound to find their way in.
To move forward, we must build layers of defence, visibility, and intelligence that are adaptive, responsive and secure – ones that guarantee open communication, engagement, and unfettered commerce, but provide the protection and openness we need to thrive. It is about much more than just adding another brick in the wall.
