Project 1 - Design Enterprise Security Model

1. First we should choose all the assests that are used in infrastructure are well secured and with good bandwidth.
2. Vlidate all security checks are perfectly built before deploying.
3. Ensure to use only secured protocls for data transmission.

Web application
1. secure coding, proper input validation, output encoding, implementing all security http headers etc.
2. Using latest libraries and frameworks.

Servers
1. Proper configuration required, closing all unnecessary ports, updating and patching
2. Perform validations on access controls.
3. Avoid insecure logging.

Database
1. prepared statements, input validations and parameterized quries helps databases from sql injections.

Cisco router
1. Enables you to route securly and avoid packet inspection, MAC flooding.

WAF
1. Enables you to inspect all incoming and outgoing traffic in order to block web attacks
2. Has to define updated rules.

IDS/IPS
1. proactively look for attacks on defined set of rules, should detect, prevent and report all detected attacks.

IBM Database activity monitor.
1. Should activily monitor all logs if any unintendent occurs should report.