Security and control issues in local area network design

Abstract

This paper presents security and control issues and concerns associated with network design within a local area network (LAN) environment. Five key issues are identified for more detailed investigation: adequate network planning, sound network management, dangers from external LAN connections, access to data and programs, and level of LAN service. For each of these issues control and security measures are proposed as guidelines to counter these risks or concerns. To complement this issues approach, an alternative strategy based on LAN components is presented in the form of a summary table. Here network design is subdivided into several functional areas or components, together with the security and control measures providing protection for each component. The identification and discussion of these issues, concurrently with suggested security measures, provides guidance to personnel involved in the design and review of LAN security during the LAN design phase. Information on LAN risks, exposures and protective measures will be valuable to information systems management when planning resource commitments for the security budget.