Managing a Secure Network

Managing a Secure Network

1. Operations Security

   • Device harding
   • Firewalls
   • IPSs
   • Operating systems
   • Basic programing
   • Networking protocols
   • Network vulnerabilities and risk mitigation

2. Security Test and Evaluation

   • Uncover design, implementation, and operational flaws that could lead to the violation of the security policy
   • Determine the adequacy of security mechanisms, assurances, and device properties to enforce the security policy
   • Assess the degree of consistency between the system documentation and its implementation

3. Network Test

   • Penetration testing
   • Network scanning
   • Vulnerability scanning
   • Password cracking
   • Log review
   • Integrity checkers
   • Virus detection
   • Applying results
     • To define mitigation activities to address identified vulnerabilities
     • As a benchmark to trace the progress of an organization in meeting security requirements
     • To assess the implementation status of system security requirements
     • To conduct cost and benefit analysis for improvements to network security
     • To enhance other activities, such as risk assessments, certification and authorization (C&A), and performance improvement efforts
     • As a reference point for corrective action

4. Network Testing Tools

   • Nmap/Zenmap
   • SuperScan
   • SIEM (Security Information Event Management)
   • GFI LANguard
   • Tripwire
   • Nessus
   • L0phtCrack
   • Metasploit

5. Security Policy

   • Governing policy
   • Technical policy
   • End user policy