Upload File

developing network security strategies network security d esign network security m echanisms

  • Home
  • Documents
  • Developing Network Security Strategies Network Security D ESIGN Network Security M ECHANISMS
33
Developing Network Security Strategies ______________________ Robert DeWolf

Post on 19-Dec-2015

259 views

Category:

Documents


3 download

Report

Tags:

TRANSCRIPT

Page 1: Developing Network Security Strategies Network Security D ESIGN Network Security M ECHANISMS

Developing Network Security Strategies

______________________Robert DeWolf

Page 2: Developing Network Security Strategies Network Security D ESIGN Network Security M ECHANISMS

Developing NetworkSecurity Strategies

Network Security DESIGN

Network Security

MECHANISMS

Page 3: Developing Network Security Strategies Network Security D ESIGN Network Security M ECHANISMS

SECURITY: DESIGN

•Factors- Affordances (E-Commerce)- Remote-Access Services- Business partners

•Top-Down Approach- Customer development

Page 4: Developing Network Security Strategies Network Security D ESIGN Network Security M ECHANISMS

SECURITY: DESIGN

Identify network assets.Analyze security risks.Analyze security requirements and tradeoffs.Develop a security plan.Define a security policy.Develop procedures for applying security policies.Develop a technical implementation strategy.Achieve buy-in from users, managers, and technical staff.Train users, managers, and technical staff.Implement the technical strategy and security procedures.Test the security and update it if any problems are found.Maintain security.

Page 5: Developing Network Security Strategies Network Security D ESIGN Network Security M ECHANISMS

SECURITY: DESIGN

Identify network assets.Analyze security risks.Analyze security requirements and tradeoffs.Develop a security plan.Define a security policy.Develop procedures for applying security policies.Develop a technical implementation strategy.Achieve buy-in from users, managers, and technical staff.Train users, managers, and technical staff.Implement the technical strategy and security procedures.Test the security and update it if any problems are found.Maintain security.

Page 6: Developing Network Security Strategies Network Security D ESIGN Network Security M ECHANISMS

Identify network assets

•Network HostsOSApplicationsData

•Internetworking DevicesRoutersSwitches

•Network Data

•OtherTrade SecretsCompany Reputation

Page 7: Developing Network Security Strategies Network Security D ESIGN Network Security M ECHANISMS

SECURITY: DESIGN

Identify network assets.

Analyze security risks.Analyze security requirements and tradeoffs.Develop a security plan.Define a security policy.Develop procedures for applying security policies.Develop a technical implementation strategy.Achieve buy-in from users, managers, and technical staff.Train users, managers, and technical staff.Implement the technical strategy and security procedures.Test the security and update it if any problems are found.Maintain security.

Page 8: Developing Network Security Strategies Network Security D ESIGN Network Security M ECHANISMS

Analyze security risks

EXPERT INTRUDERS AND END USERS

Page 9: Developing Network Security Strategies Network Security D ESIGN Network Security M ECHANISMS

SECURITY: DESIGN

Identify network assets.Analyze security risks.

Analyze security requirements and tradeoffs.Develop a security plan.Define a security policy.Develop procedures for applying security policies.Develop a technical implementation strategy.Achieve buy-in from users, managers, and technical staff.Train users, managers, and technical staff.Implement the technical strategy and security procedures.Test the security and update it if any problems are found.Maintain security.

Page 10: Developing Network Security Strategies Network Security D ESIGN Network Security M ECHANISMS

Analyze security requirements and tradeoffs

•Affordability•Usability•Performance•Availability•Manageability

•TradeoffsPacket Filters/Data Encryption

Page 11: Developing Network Security Strategies Network Security D ESIGN Network Security M ECHANISMS

SECURITY: DESIGN

Identify network assets.Analyze security risks.Analyze security requirements and tradeoffs.

Develop a security plan.Define a security policy.Develop procedures for applying security policies.Develop a technical implementation strategy.Achieve buy-in from users, managers, and technical staff.Train users, managers, and technical staff.Implement the technical strategy and security procedures.Test the security and update it if any problems are found.Maintain security.

Page 12: Developing Network Security Strategies Network Security D ESIGN Network Security M ECHANISMS

Develop a security plan

•Resources(time/people)

How will users/managers be involved?

Is there a need for specialized Administrators?

Will you be training on Security Policies and Procedures?

Page 13: Developing Network Security Strategies Network Security D ESIGN Network Security M ECHANISMS

SECURITY: DESIGN

Identify network assets.Analyze security risks.Analyze security requirements and tradeoffs.Develop a security plan.

Define a security policy.Develop procedures for applying security policies.Develop a technical implementation strategy.Achieve buy-in from users, managers, and technical staff.Train users, managers, and technical staff.Implement the technical strategy and security procedures.Test the security and update it if any problems are found.Maintain security.

Page 14: Developing Network Security Strategies Network Security D ESIGN Network Security M ECHANISMS

Define a security policy

According to RFC 2196, "Site Security Handbook:"

“A security policy is a formal statement of the rules by which people who are given access to an organization's technology and information assets must abide.”

•Personnel

•ComponentsAccessAccountabilityAuthenticationComputer-technology guidelines

Page 15: Developing Network Security Strategies Network Security D ESIGN Network Security M ECHANISMS

SECURITY: DESIGN

Identify network assets.Analyze security risks.Analyze security requirements and tradeoffs.Develop a security plan.Define a security policy.

Develop procedures for applying security policies.Develop a technical implementation strategy.Achieve buy-in from users, managers, and technical staff.Train users, managers, and technical staff.Implement the technical strategy and security procedures.Test the security and update it if any problems are found.Maintain security.

Page 16: Developing Network Security Strategies Network Security D ESIGN Network Security M ECHANISMS

Develop procedures for applying security policies

There’s been an attack… OMG!!!!!

•Separate ProceduresUsersNetwork AdminSecurity Admin

•Training?

Page 17: Developing Network Security Strategies Network Security D ESIGN Network Security M ECHANISMS

SECURITY: DESIGN

Identify network assets.Analyze security risks.Analyze security requirements and tradeoffs.Develop a security plan.Define a security policy.Develop procedures for applying security policies.

Develop a technical implementation strategy.Achieve buy-in from users, managers, and technical staff.Train users, managers, and technical staff.Implement the technical strategy and security procedures.Test the security and update it if any problems are found.Maintain security.

Page 18: Developing Network Security Strategies Network Security D ESIGN Network Security M ECHANISMS

SECURITY: DESIGN

Identify network assets.Analyze security risks.Analyze security requirements and tradeoffs.Develop a security plan.Define a security policy.Develop procedures for applying security policies.Develop a technical implementation strategy.

Achieve buy-in from users, managers, and technical staff.Train users, managers, and technical staff.Implement the technical strategy and security procedures.Test the security and update it if any problems are found.Maintain security.

Page 19: Developing Network Security Strategies Network Security D ESIGN Network Security M ECHANISMS

SECURITY: DESIGN

Identify network assets.Analyze security risks.Analyze security requirements and tradeoffs.Develop a security plan.Define a security policy.Develop procedures for applying security policies.Develop a technical implementation strategy.Achieve buy-in from users, managers, and technical staff.

Train users, managers, and technical staff.Implement the technical strategy and security procedures.Test the security and update it if any problems are found.Maintain security.

Page 20: Developing Network Security Strategies Network Security D ESIGN Network Security M ECHANISMS

SECURITY: DESIGN

Identify network assets.Analyze security risks.Analyze security requirements and tradeoffs.Develop a security plan.Define a security policy.Develop procedures for applying security policies.Develop a technical implementation strategy.Achieve buy-in from users, managers, and technical staff.Train users, managers, and technical staff.

Implement the technical strategy and security procedures.Test the security and update it if any problems are found.Maintain security.

Page 21: Developing Network Security Strategies Network Security D ESIGN Network Security M ECHANISMS

SECURITY: DESIGN

Identify network assets.Analyze security risks.Analyze security requirements and tradeoffs.Develop a security plan.Define a security policy.Develop procedures for applying security policies.Develop a technical implementation strategy.Achieve buy-in from users, managers, and technical staff.Train users, managers, and technical staff.Implement the technical strategy and security procedures.

Test the security and update it if any problems are found.Maintain security.

Page 22: Developing Network Security Strategies Network Security D ESIGN Network Security M ECHANISMS

SECURITY: DESIGN

Identify network assets.Analyze security risks.Analyze security requirements and tradeoffs.Develop a security plan.Define a security policy.Develop procedures for applying security policies.Develop a technical implementation strategy.Achieve buy-in from users, managers, and technical staff.Train users, managers, and technical staff.Implement the technical strategy and security procedures.Test the security and update it if any problems are found.

Maintain security.

Page 23: Developing Network Security Strategies Network Security D ESIGN Network Security M ECHANISMS

Maintain security

•Reading Logs

•Responding to incidents

•Staying current with security standards (hardware/software)

•Updating the plan and policy

Page 24: Developing Network Security Strategies Network Security D ESIGN Network Security M ECHANISMS

SECURITY: MECHANISMS

Physical SecurityAuthenticationAuthorization

Accounting/AuditingData Encryption

Packet FiltersFirewalls

Intrusion DetectionIntrusion Prevention

Page 25: Developing Network Security Strategies Network Security D ESIGN Network Security M ECHANISMS

SECURITY: MECHANISMS

Physical SecurityAuthenticationAuthorization

Accounting/AuditingData Encryption

Packet FiltersFirewalls

Intrusion DetectionIntrusion Prevention

Equipment

Natural Disasters

Page 26: Developing Network Security Strategies Network Security D ESIGN Network Security M ECHANISMS

SECURITY: MECHANISMS

Physical SecurityAuthenticationAuthorization

Accounting/AuditingData Encryption

Packet FiltersFirewalls

Intrusion DetectionIntrusion Prevention

Something the user knows

Something the user has

Something the user is

Page 27: Developing Network Security Strategies Network Security D ESIGN Network Security M ECHANISMS

SECURITY: MECHANISMS

Physical SecurityAuthenticationAuthorization

Accounting/AuditingData Encryption

Packet FiltersFirewalls

Intrusion DetectionIntrusion Prevention

Privileges

Page 28: Developing Network Security Strategies Network Security D ESIGN Network Security M ECHANISMS

SECURITY: MECHANISMS

Physical SecurityAuthenticationAuthorization

Accounting/AuditingData Encryption

Packet FiltersFirewalls

Intrusion DetectionIntrusion Prevention

Logging tasks

Page 29: Developing Network Security Strategies Network Security D ESIGN Network Security M ECHANISMS

SECURITY: MECHANISMS

Physical SecurityAuthenticationAuthorization

Accounting/AuditingData Encryption

Packet FiltersFirewalls

Intrusion DetectionIntrusion Prevention

Yeah yeah yeah…

Page 30: Developing Network Security Strategies Network Security D ESIGN Network Security M ECHANISMS

SECURITY: MECHANISMS

Physical SecurityAuthenticationAuthorization

Accounting/AuditingData Encryption

Packet FiltersFirewalls

Intrusion DetectionIntrusion Prevention

Uses Authentication and Authorization

methods

Page 31: Developing Network Security Strategies Network Security D ESIGN Network Security M ECHANISMS

SECURITY: MECHANISMS

Physical SecurityAuthenticationAuthorization

Accounting/AuditingData Encryption

Packet FiltersFirewalls

Intrusion DetectionIntrusion Prevention

Enforce

Enterprise to Internet

Page 32: Developing Network Security Strategies Network Security D ESIGN Network Security M ECHANISMS

SECURITY: MECHANISMS

Physical SecurityAuthenticationAuthorization

Accounting/AuditingData Encryption

Packet FiltersFirewalls

Intrusion DetectionIntrusion Prevention

(IDS)Notification

(IPS)Traffic Blocker

Page 33: Developing Network Security Strategies Network Security D ESIGN Network Security M ECHANISMS

SWEET ACTING

http://www.youtube.com/watch?v=YyvpS44B_YQ

Information Security, Network Security, And Network Access Control

Module 12 Network Security 12.1 - Developing a Network Security Policy 12.2 - Threats to Network Security 12.3 - Implementing Security Measures 12.4 -

Internet and Network Security Introduction to Network Security

QualNet 4.5.1 Network Security Model Librarybosco/grupo/TCC-Daniel/CD-2/... · QualNet 4.5.1 Network Security Model Library 1 Network Security - Overview Network Security - Overview

Network Security: WLAN Security

Network Security, network attacks and Possible Security ... · Network security for internet access . 1. Network security . System and the Network Technology is a key technology for

Chapter 5 Network Security - WordPress.com · Chapter 5 Network Security. 2 What is network security? Network Security means providing CIA. ... details about a cryptosystem except

Wireless security survey Wireless network security ... · Wireless network security landscape of India 1 Wireless security survey Wireless network security landscape of India December

Chapter 8 Chapter 8: Network Security Network Security · PDF file · 2017-08-28understand principles of network security: cryptography and its manyuses beyond ... Network Security

Network Security - INL: IP Networking Labinl.info.ucl.ac.be/system/files/Internet-security.pdf · Transport-layer security Network-layer security 3. ... Network Security : Private

Network Security Application Security Security Management

CHAPTER 5 WIRELESS NETWORK SECURITY Network Security

Kizza - Guide to Computer Network Security 1 Chapter 2: Understanding Network Security Guide to Computer Network Security

Network Security - College of Engineeringweb.engr.oregonstate.edu/.../network_security.pdf · 8: Network Security 8-1 Network Security Goals: understand principles of network security:

IUT– Network Security Course 1 Network Security Firewalls

Network Security Network Security Protocol 1 Network Security Chapter 3. Security and Layered Architecture

Security+ Guide to Network Security Fundamentals, Fourth Edition Chapter 6 Network Security

Network Security Network Security Protocol 1 Network Security Chapter 2. Network Security Protocols

Chapter 13 Network Security. Contents Definition of information security Role of network security Vulnerabilities, threats and controls Network security

Network Security: WLAN Security

ECE579S: Computer and Network Security 4: Network Security Issues

Chapter 11 Security Protocols Network Security Threats Security and Cryptography Network Security Protocols Cryptographic Algorithms

Network Security Professor Adeel Akram. Network Security Architecture

Www. engineersportal.in. OUTLINES Network & Network Security Need of Network Security Methods of Network Security Firewall Firewall’s Works Firewall’s

Network Security Reference Architecture - fortinet.com · 2 Security Intelligence Networking Flexibility Network & Security Operations & Analytics Network Security Critical Capabilities

Network Layer Security Network Systems Security Mort Anvari

Fortinet Certified Network Security Administrator (FCNSA ... · Fortinet Certified Network Security Administrator (FCNSA) ... Network Security Administrator (FCNSA) - Version

doc.: IEEE 802.11-19/0247r8€¦  · Web view+robust security network. robust security network association--robust security network association key management-robust security network

1 ITC358 ICT Management and Information Security Chapter 10 P ROTECTION M ECHANISMS People are the missing link to improving Information Security. Technology

Research on Network Security Situation Awareness ... on Network Security Situati… · network security, there is main. ly network security situation awareness frame based on . intrusion

Network Security - Norbert Pohlmann · Security Infrastructure Mobile/Desktop Security Network Security E-Commerce Enabler Internet Security Network Security Secure Communication

network security / information security

Network Security in “Wireless/Cellular” Data … Cellular Network Security...Arsitektur Cellular Network ... Network Security Investigation Teknologi Keamanan Jaringan ... » 4G,

ISY994 Series Network Security Configuration Guide ... Series Network... · 1 -devices.com Network Security Configuration ISY994 Series – Network Security Configuration Guide Requires

Network Security Framework - infrastructure.it.ubc.cainfrastructure.it.ubc.ca/files/2012/07/Network-Security-Frameworks.pdf · New network security framework The new security framework