network security

network security

1. assets

2. vulnerability

   • "internal factors"

3. threat

   • adversarial
     • PEOBLE BASED :competitors, business partner
   • accidental
     • SOMEONE MAKE MISTAKES: system administrators
   • structural
     • WHEN SOFTWARE EQUIPMENT FAIL: server hard drive fail
   • environmental
     • NATURAL DISASTER : fire, floodind

4. likelihood

   • impact
     • low
     • medium
     • high
   • ALE =annual loss expentancy
     • ALE= COST x OCCURANCES

5. HANDLE RISK

   • acceptance
     • when risk is low enought to not apply countermisures
   • avoidance
     • changed to avoid risk
   • mitigation
     • minimize risk to an accetable level
   • transference
     • transfer risk to a better capable company

6. RISK CONTROL

   • technical
     • firewall, IDS, IPS, antivirus
   • operational
     • penetration testing, operating procedures

7. FIREWALLS

   • DMZ
   • ACL - Acces Control List
   • firewall types
     • PACKET FILTERING
       • rule for IP / port
     • STATEFUL INSPECTION
       • MOST USED TODAY -mantains information about state of connection
     • NEXT GENERATIONS - NGFW
       • LAYER 7 -contextual informations ( users, app, processes)
     • WEB APPLICATION - WAF
       • SQL INJECTION / XSS SCRIPTING

8. NETWORK SEGMENTATIONS

   • break large network in a more secure enironment

9. NETWORK ACCESS CONTROL

   • limit network access only authorized system
     • agent-based
       • 802.1x
         • wired
         • wireless
     • agentless
       • wireless
     • band
       • inband
       • out of band
     • NAC approval criteria
       • role of user
       • location of user
       • system health status

10. defense deception

    • Honeypot
      • simulate succesful attacks and monitor attackers
    • DNS sinkholes
      • provide false DNS informations