Managing a Secure Network

Managing a Secure Network

1. Operations Security

   • Day-to-day practices ensure a secure system
     • Testing
       • manualy
       • automatically
     • Device hardening, firewalls, IPSs, IOS, Basic programming, Networking protocols, such as TCP/IP, Network vulnerabilities and risk mitigation

2. Effectiveness security solution

   • Don't wait for real threats
     • Security Test and Evaluation (ST&E)
       • Protective measures

3. Network Test

   • Penetration testing
   • Network scanning
   • Vulnerability scanning
   • Passwordcracking
   • Log review
   • Integrity checkers
   • Virus detection

4. Testing result

   • To define mitigation activities
   • Meeting security requirements
   • Status security requirements
   • To conduct cost and benefit
   • Corrective action

5. Testing tools

   • Open source
   • Commercial tools
   • Nmap/Zenmp
   • SuperScan
   • SIEM
   • GFI LANguard
   • Tripwire
   • Nessus
   • L0phtCrack

6. Network security systems help protect these assets

   • Security Policy
     • Governing policy
     • Technical policy
     • End user policy
   • Documents
     • Detailed documents to implement the security policies
     • Security Policy
     • Standards
     • Guideline
     • Procedure
     • Organizational Reporting Structure

7. Common Executive Titles

   • CEO
   • CTO
   • CIO
   • CSO
   • CISO

8. Security awareness

   • To ensure all employees within an organization are aware of and adhere to the security policies.