Domains of network security
- 1. Cyber Security Chapter One Network Security 1
- 2. Outline 1. Describe the network security 2. Describe the three goals of network security 3. Differentiate between security policies, standards, guidelines and procedures 2
- 3. Learning Outcome 1. Discuss the three goals of network security 2. Discuss the difference between security policies, standards, guidelines and procedures 3
- 4. What is Security? • Security Security is about protection of assets • Prevention Take measures that prevent your assets from being damaged (or stolen) • Detection Take measures so that you can detect when, how, and whom an asset has been damaged • Reaction Take measures so that you can recover your assets 4
- 6. What is Network Security? Network security are set of rules and configurations designed to protect the integrity, confidentiality and availability of computer networks and data using both software and hardware technologies. 6
- 7. Goals of Network Security • Confidentiality – Prevent the disclosure of sensitive information from unauthorized people, resources, and processes • Integrity – The protection of system information or processes from intentional or accidental modification • Availability – The assurance that systems and data are accessible by authorized users when needed 7
- 8. Tools • Administrative • Physical • Technical 8
- 9. Security Administration • Policies • Standards • Guidelines • Procedures 1. Risk Assessment 2. Security Policy 3. Organization of Information Security 4. Asset Management 5. Human Resources Security 6. Physical and Environmental Security 7. Communications and Operations Management 8. Access Control 9. Information Systems Acquisition, Development and Maintenance 10. Information Security Incident Management 11. Business Continuity Management 12. Compliance Domains of Network Security 9
- 10. Documents Supporting Policies • Standards – dictate specific minimum requirements in our policies • Guidelines – suggest the best way to accomplish certain tasks • Procedures – provide a method by which a policy is accomplished (the instructions) 10
- 11. Example: The Policy • All users must have a unique user ID and password that conforms to the company password standard • Users must not share their password with anyone regardless of title or position • Passwords must not be stored in written or any readable form 11
- 12. Example: The Standards • Minimum of 8 upper- and lowercase alphanumeric characters • Must include a special character • Must be changed every 30 days 12
- 13. Example: The Guideline • Take a phrase Up and At ‘em at 7 • Convert to a strong password Up&atm@7 • To create other passwords from this phrase, change the number, move the symbol, or change the punctuation mark
- 14. Example: The Procedure Procedure for changing a password 1. Press Control + Alt+ Delete to bring up the log in dialog box 2. Click the “change password” button 3. Enter your current password in the top box 4. … 14
- 15. References • Omar Santos & John Stuppi (2015). CCNA Security 210-260 Official Cert Guide. Pearson Education. • Kevin Wallace (2012). CompTIA Network+ Authorized Cert Guide. Pearson Education. 15