IT Security Presentation
- 1. It Security
- 2. AttacksViruses, Worms, TrojansSpam, Adware, Malware, PhishingHacking is the intentional use of a computer resource without authorization or in excess of authorization.Denial-of-service (DoS) attacks overload victim servers so that they cannot serve users.
- 3. AttackersTraditional hackers were curiosity driven.Today’s hackers are criminals that dominate the attack world.On the horizon, cyberterror attacks by terrorist and cyberwar attacks by foreign governments could cause unprecedented levels of damage.
- 4. Security ManagementSecurity is primarily a management issue, not a technical issue.Risk Analysis – balancing cost and benefits of protectionComprehensive Security – Closing all avenues of attacks
- 5. Access ControlIdentify and list each assetRate the sensitivity of each asset in terms of security riskAccess Control Plan. Also called Triple AAA. Authentication, Authorization, and Auditing
- 6. Firewalls, IDSs, and IPSsFirewalls examine packets passing through the firewall.Intrusion Detection Systems (IDS) are designed to detect suspicious traffic.Intrusion Prevention Systems (IPS) are used to recognize complex attacks. It helps prevent false positives.
- 7. Host Hardening and Vulnerability TestingServers can be hardened by having vulnerabilities patchedVulnerability Test should be conducted by attacking the network (with permission) , in order to identify security weaknesses.http://www.youtube.com/watch?v=MJNJjh4jORY