Network

Defining Trust

What is trust in general terms? Before categorizing people and resources, trust must be defined. Trust is the likelihood that people will act the way you expect them to act. Trust is often based on past experiences. You could also say that trust can exist only between two individuals who know each other. You can never trust a total stranger, but you can start to trust one over a certain period of time. An exception to this rule exists in the context of networking. You might be willing to trust a stranger if you know that someone you trust trusts him. This is, after all, the basis for Secure Sockets Layer (SSL) and certificate exchange, as discussed in Chapter 13, "Public Key Infrastructure."

Now that trust is defined, a list of resources can be developed that ranges from most trusted to least trusted, as shown in Figure 1-1.

Figure 1-1. Security Zones

Most Trusted

The most trusted network resources in an organization are internal servers, domain controllers, and storage devices attached to the network. Only a limited number of well-known people should have access to these devices.

Less