Download - Network Security Overview
![Page 1: Network Security Overview](https://reader035.vdocument.in/reader035/viewer/2022062423/5681494f550346895db69daa/html5/thumbnails/1.jpg)
Network Security Overview
Ali Shayan2008.08.06
![Page 2: Network Security Overview](https://reader035.vdocument.in/reader035/viewer/2022062423/5681494f550346895db69daa/html5/thumbnails/2.jpg)
Network Security Management’s Perspective
• Dangers:– Negligence– Dereliction of duty– Liable for damaged– Misconduct– Sabotage– Aiding and abetting crime
![Page 3: Network Security Overview](https://reader035.vdocument.in/reader035/viewer/2022062423/5681494f550346895db69daa/html5/thumbnails/3.jpg)
Network Security Management’s Perspective
• Issues– Training– Continuity and crisis planning– Assume information security is YOUR responsibility
Lack of awareness can lead to negligence and liability!
![Page 4: Network Security Overview](https://reader035.vdocument.in/reader035/viewer/2022062423/5681494f550346895db69daa/html5/thumbnails/4.jpg)
Understanding Components of an IT Security Audit
![Page 5: Network Security Overview](https://reader035.vdocument.in/reader035/viewer/2022062423/5681494f550346895db69daa/html5/thumbnails/5.jpg)
Modern Technology Roadmap
• Early 1990s: Virus scanners• Mid 1990s: Firewalls• Late 1990s: Over-reliance on encryption (PKI)• Early 2000s: Over-reliance on intrusion
detection systems (IDS)• Late 2000s: Over-reliance on intrusion
prevention systems/artificial intelligence
![Page 6: Network Security Overview](https://reader035.vdocument.in/reader035/viewer/2022062423/5681494f550346895db69daa/html5/thumbnails/6.jpg)
![Page 7: Network Security Overview](https://reader035.vdocument.in/reader035/viewer/2022062423/5681494f550346895db69daa/html5/thumbnails/7.jpg)
Vulnerabilities• There was a total of 7,247 vulnerabilities in 2006, 39.5% more than
2005.• June was the busiest month of the year with 696 vulnerabilities.• Week 46 (the week before Thanksgiving) was the busiest week of
2006 for new vulnerabilities.• The most popular day for vulnerability discloser was Tuesday.• The top three vulnerable vendor in 2006 were Microsoft, Oracle
and Apple.• 88.4 percent of all 2006 vulnerabilities could be exploited remotely.• Over half (50.6%) of 2006 vulnerabilities would allow an attacker to
gain access to the host after successful exploitation.
![Page 8: Network Security Overview](https://reader035.vdocument.in/reader035/viewer/2022062423/5681494f550346895db69daa/html5/thumbnails/8.jpg)
VulnerabilitiesPer Annum Vulnerabilities Count
![Page 9: Network Security Overview](https://reader035.vdocument.in/reader035/viewer/2022062423/5681494f550346895db69daa/html5/thumbnails/9.jpg)
VulnerabilitiesPer Month
![Page 10: Network Security Overview](https://reader035.vdocument.in/reader035/viewer/2022062423/5681494f550346895db69daa/html5/thumbnails/10.jpg)
Vulnerabilities by Day of Week
![Page 11: Network Security Overview](https://reader035.vdocument.in/reader035/viewer/2022062423/5681494f550346895db69daa/html5/thumbnails/11.jpg)
Vulnerabilitiesby Day of Week
![Page 12: Network Security Overview](https://reader035.vdocument.in/reader035/viewer/2022062423/5681494f550346895db69daa/html5/thumbnails/12.jpg)
VulnerabilitiesWeekdays vs. Weekends
![Page 13: Network Security Overview](https://reader035.vdocument.in/reader035/viewer/2022062423/5681494f550346895db69daa/html5/thumbnails/13.jpg)
VulnerabilitiesTop Ten Vulnerable Vendors
![Page 14: Network Security Overview](https://reader035.vdocument.in/reader035/viewer/2022062423/5681494f550346895db69daa/html5/thumbnails/14.jpg)
From which countries does spam originate?
![Page 15: Network Security Overview](https://reader035.vdocument.in/reader035/viewer/2022062423/5681494f550346895db69daa/html5/thumbnails/15.jpg)
Incident and Events by Sector
![Page 16: Network Security Overview](https://reader035.vdocument.in/reader035/viewer/2022062423/5681494f550346895db69daa/html5/thumbnails/16.jpg)
Quantifying by Losses
• 9 out of 10 businesses affected by cybercrime (FBI 2005)
• $67.2 billion per year is lost to cybercrime in the USA (FBI 2005)
• 61% of US computers are compromised (Cyber Security Alliance 2006)
• Estimated 14,000 – 17,000 Botnet C&Cs (Shadowserver.org)
![Page 17: Network Security Overview](https://reader035.vdocument.in/reader035/viewer/2022062423/5681494f550346895db69daa/html5/thumbnails/17.jpg)
Notable Trends in Cyber Criminality
• Motivation: Financial motives are making attackers more sophisticated.
• Targeted attacks: Attacks are much more targeted than before.
• Targets: The user and the user workstation (desktop or laptop) becomes the easiest path into the network.
![Page 18: Network Security Overview](https://reader035.vdocument.in/reader035/viewer/2022062423/5681494f550346895db69daa/html5/thumbnails/18.jpg)
![Page 19: Network Security Overview](https://reader035.vdocument.in/reader035/viewer/2022062423/5681494f550346895db69daa/html5/thumbnails/19.jpg)
![Page 20: Network Security Overview](https://reader035.vdocument.in/reader035/viewer/2022062423/5681494f550346895db69daa/html5/thumbnails/20.jpg)
![Page 21: Network Security Overview](https://reader035.vdocument.in/reader035/viewer/2022062423/5681494f550346895db69daa/html5/thumbnails/21.jpg)
![Page 22: Network Security Overview](https://reader035.vdocument.in/reader035/viewer/2022062423/5681494f550346895db69daa/html5/thumbnails/22.jpg)
![Page 23: Network Security Overview](https://reader035.vdocument.in/reader035/viewer/2022062423/5681494f550346895db69daa/html5/thumbnails/23.jpg)
References
• http://www.coresecurity.com• http://www.cert.com• http://www.iss.com• http://www.alexa.com
![Page 24: Network Security Overview](https://reader035.vdocument.in/reader035/viewer/2022062423/5681494f550346895db69daa/html5/thumbnails/24.jpg)
Thanks