Managing a Secure Network

Managing a Secure Network

1. Network Security Testing

   • Network Security Testing Techniques
     • Operation Security
       • starts with the planning and implementation process of a network
       • security and networking knowledge in these areas:
         • Device hardening Firewalls IPSs Operating systems Basic programming Networking protocols, such as TCP/IP Network vulnerabilities and risk mitigation
     • Testing and Evaluating Network Security
       • conducted on specific parts of the network. After a network is fully integrated and operational, a Security Test and Evaluation (ST&E) is performed.
     • Types of Network Tests
       • Penetration testing
         • The goal is to determine the feasibility of an attack and possible consequences if one were to occur.
       • Network scanning
         • scan for listening TCP ports and display
       • Vulnerability scanning
       • Password cracking
         • Includes software that is used to test and detect weak passwords
     • Applying Network Test Results
       • Network Testing Tools
         • Nmap/Zenmap - Discovers computers and services on a computer network,
         • SuperScan - Port scanning software designed to detect open TCP and UDP ports,
   • Network Security Testing Tools
     • Nmap/Zenmap - Discovers computers and services on a computer network,
     • SuperScan - Port scanning software designed to detect open TCP and UDP ports,
     • SIEM (Security Information Event Management) - A technology used in enterprise organizations to provide real time reporting
     • GFI LANguard - Network and security scanner which detects vulnerabilities
     • Tripwire - Assesses and validates IT configurations against internal policies,
     • Nessus - Vulnerability scanning software, focusing on remote access, misconfigurations, and DoS against the TCP/IP stack
     • L0phtCrack - Password auditing and recovery application
     • Metasploit - Provides information about vulnerabilities and aids in penetration testing and IDS signature development

2. Developing a Comprehensive Security Policy

   • Security Policy Overview
     • Secure Network Life Cycle
       • What does the organization have that others want? What processes, data, or information systems are critical to the organization?
     • Security Policy
       • It demonstrates an organization’s commitment to security. It sets the rules for expected behavior.
   • Structure of a Security Policy
     • Security Policy Hierarchy
       • Governing policy - High-level treatment of the security guidelines that are important to the entire company.
       • echnical policy - Used by security staff members as they carry out security responsibilities for the system
       • End user policy - Covers all security topics that are important to end users.
   • Standards, Guidelines, and Procedures
     • Security Policy Documents
       • he security staff uses detailed documents to implement the security policies.
     • Guideline Documents
     • Standards Documents
     • Procedure Documents
   • Role and Responsabilities
     • Organizational Reporting Structure
       • Executive-level management must always be consulted during security policy creatio
     • Common Executive Titles
       • Chief Executive Officer (CEO) - Ultimately responsible for the success of an organization.
       • Chief Technology Officer (CTO) -
       • Chief Information Officer (CIO) -
   • Security Awareness and Training
     • Security Awareness Program
     • Awareness Campaigns
     • Security Training Course
     • Educational Program
   • Responding to a Security Breach
     • Motive, Opportunity, and Means
       • Motive answers the question of why a person committed the illegal act. As a crime is investigated,
       • Collecting Data
         • The process of collecting data must be done precisely and quickly. When a security breach occurs, it is necessary to isolate the infected system immediately.