7/23/2019 ICND110S01L02

1/11

2007 Cisco Systems, Inc. All rights reserved. ICND1 v1.01-1

Building a Simple Network

Secring theNet!or"

7/23/2019 ICND110S01L02

2/11

2007 Cisco Systems, Inc. All rights reserved. ICND1 v1.01-2

Closed Networks

Att#c"s $rom inside the net!or" rem#in # thre#t.

7/23/2019 ICND110S01L02

3/11

2007 Cisco Systems, Inc. All rights reserved. ICND1 v1.01-%

Open Networks

7/23/2019 ICND110S01L02

4/11

2007 Cisco Systems, Inc. All rights reserved. ICND1 v1.01-&

Threat CapabilitiesMore Dangerous and Easier to Use

7/23/2019 ICND110S01L02

5/11

2007 Cisco Systems, Inc. All rights reserved. ICND1 v1.01-'

E-Business Challenge

7/23/2019 ICND110S01L02

6/11

2007 Cisco Systems, Inc. All rights reserved. ICND1 v1.01-(

d!ersaries" d!ersar# Moti!ations" andClasses o$ tta%k

Advers#ries )otiv#tions Cl#sses o$ Att#c"

N#tion-st#tes

*errorists

Crimin#ls

+#c"ers

Cr#c"ers

Cometitors

Scrit "iddies

Disgrntledemloyees

/overnment

Intelligence

*he$t

DoS

m#rr#ssment

Ch#llenge

#ssive

Active

Close-in

Insider

Distrited

7/23/2019 ICND110S01L02

7/11 2007 Cisco Systems, Inc. All rights reserved. ICND1 v1.01-7

Common Threats

hysic#l inst#ll#tions

3 +#rd!#re thre#ts

3 nvironment#l thre#ts

3 lectric#l thre#ts

3 )#inten#nce thre#ts

4econn#iss#nce #tt#c"s5e#rning in$orm#tion #ot # t#rgetnet!or" y sing re#dily #v#il#le in$orm#tion #nd #lic#tions

Access #tt#c"sAtt#c"s on net!or"s or systems $or these re#sons6

3 4etrieve d#t#

3 /#in #ccess

3 sc#l#te their #ccess rivileges

#ss!ord #tt#c"s*ools sed y h#c"ers to comromise #ss!ords

7/23/2019 ICND110S01L02

8/11 2007 Cisco Systems, Inc. All rights reserved. ICND1 v1.01-

&assword tta%k Threat Mitigation

+ere #re #ss!ord #tt#c" thre#t-mitig#tion techni8es6

Do not #llo! sers to se the s#me #ss!ord on mltilesystems.

Dis#le #cconts #$ter # cert#in nmer o$ nsccess$l login#ttemts.

Do not se cle#rte9t #ss!ords.

:se strong #ss!ords; $or e9#mle, m

7/23/2019 ICND110S01L02

9/11 2007 Cisco Systems, Inc. All rights reserved. ICND1 v1.01->

Summar#

Sohistic#ted #tt#c" tools #nd oen net!or"s contine togener#te #n incre#sed need $or net!or" secrity olicies #ndin$r#strctre to rotect org#ni?#tions $rom intern#lly #nde9tern#lly #sed #tt#c"s.

@rg#ni?#tions mst #l#nce net!or" secrity needs #g#inste-siness rocesses, leg#l isses, #nd government olicies.st#lishing # net!or" secrity olicy is the $irst ste in ch#nging# net!or" over to # secre in$r#strctre.

Net!or" #dvers#ries come in m#ny sh#es #nd si?es #nd !ith

mltile motiv#tions.

7/23/2019 ICND110S01L02

10/11 2007 Cisco Systems, Inc. All rights reserved. ICND1 v1.01-10

Summar# 'Cont()

It is very imort#nt to rovide hysic#l inst#ll#tion secrity $orenterrise net!or" devices.

#ss!ord #tt#c" thre#ts c#n e mitig#ted.

3 4estrict #ss!ord se.

3 Dis#le #cconts #$ter nsccess$l logins.

3 Do not se cle#rte9t #ss!ords; se strong #ss!ords.

7/23/2019 ICND110S01L02

11/11 2007 Cisco Systems Inc All rights reserved ICND1 v1 0 1 11