Managing a Secure Network

Managing a Secure Network

1. Areas

   • Device hardening, Firewalls IPSs ,Operating system, Basic programming Networking protocols, such as TCP/IP Network vulnerabilities and risk mitigation

2. Testing and Evaluating Network Security

3. Types of Network Tests

   • Penetration testing
   • Network scanning
   • Vulnerability scanning
   • Password cracking
   • Log review
   • Integrity checkers
   • Virus detection

4. Network Testing Tools

   • Nmap/Zenmap
     • Classic TCP and UDP port scanning
     • Classic TCP and UDP port sweeping
     • Remote operating system identification
   • SuperScan
     • Microsoft Windows port scanning tool
   • SIEM (Security Information Event Management)
     • Security Information Event Management (SIEM) is a technology used in enterprise organizations to provide real time reporting and long-term analysis of security events.
       • SIEM combines the essential functions of SIM and SEM to provide:
         • Forensic analysis
         • Aggregation
         • Correlation
         • Retention
   • GFI LANguard
   • Tripwire
   • Nessus
   • L0phtCrack
   • L0phtCrack

5. security policy may include the secure network

   • 2. Password Policies
   • 4. Remote Access Policies
   • 3. Acceptable Use Policies
   • 6. Incident Handling Policies
   • 1. Identification and Authentication Policies
   • 5. Network Maintenance Policies

6. Security Policy Audience

   • Manager
   • Enginner
   • End User

7. Security Policy Hierarchy

   • Security Policy Hierarchy
   • Technical policy
   • End user policy