The totality of protection mechanisms within a network, including hardware, firmware, and software, the combination of which is responsible for enforcing a security policy.