NETWORK SECURITY

NETWORK SECURITY

1. Importance

   • Major Business Concern
   • Prevent loss data

2. Goal

   • Confidential
   • Integrity
   • Availability

3. Network Control

   • Preventative Control
   • Detective Control
   • Corrective Control

4. RIsk Assesment

   • Framework
     • OCTAVE
     • COBIT
     • NIST Guide
   • Steps
     • Develop risk measurement criteria
     • Inventory IT Asset
     • Identify thread
     • Document Existing Control
     • Identify Improvement

5. Ensuring Business Continuity

   • Virus Protection
   • DoS Protection
   • Theft Protection
   • Device Failure Protection
   • Disaster Protection

6. Intrusion Prevention

   • Firewall
     • Packet level Firewall
     • NAT
     • Encryption
       • Asymmetric
         • CA
         • Public Key
       • Symmetric
       • Application
         • PGP
         • TLS
         • IPSec

7. Recommended Practice

   • Clear Disaster Recovery Plan
   • Strong Policy Control
   • Use of Security Control
   • Content Filtering

8. Implication for Management

   • Fast Growing Area of Networking
   • Cost of Security Increased
   • Become Mission Critical

9. Thread

   • Disruption
   • destruction of data
   • Disaster
   • Unauthorized access