IS (information system) security of an organization and an application

Security of IS's is a growing concern due to the increased use of internet and information system depended business models. Fundamental security concepts and enterprise IS security subjects are reviewed first in the study. An application is developed in order to propose an architecture of security. In the application, a fictitious organization is defined and modified to reach a secure architecture. Commonly used security products are integrated to the modified architecture with a defense in depth strategy. By this, more than one defense points are established between the attacker and the asset. Resulting architecture is tested against sample attack vectors.