ISSM535Q Week1 PDF

Firewall Fundamentals
ISSM 535Q
Week 1
Fundamentals of Network Security
© 2015 Jones and Bartlett Learning, LLC, an Ascend Learning Company

www.jblearning.com
All rights reserved.
Learning Objective
▪ Explain the fundamental concepts of network
security.
▪ Understand the basic elements of network
security.
▪ Define network security roles and
responsibilities and who within an IT
organization is accountable for security
implementation.

Network Security, Firewalls, and VPNs www.jblearning.com Page 2
Key Concepts
▪ Confidentiality, integrity, and availability (C-I-A)
▪ Network security and its value to the enterprise
▪ Roles and responsibilities in network security
▪ Impact of network infrastructure design on
security
▪ Features, uses, and benefits of network security
countermeasures

General Terms
▪ Confidentiality
▪ Integrity
▪ Availability
▪ Trust
▪ Privacy
▪ Authentication
▪ Authorization
▪ Nonrepudiation

Introduction
▪ Introduction
▪ Meeting time:
• Wednesday 5:20PM - 09:50PM
▪ Firewall Fundamentals <- TCP/IP
▪ General course expectations / outcomes
▪ Course Outline
▪ Lab assignments, GAs

Network Security
▪ What is Network Security?
A Network Security is the control of

unwanted intrusion from causing damage to
communications on your organization’s
computer network.

Network Security
This includes:
▪ Blocking non-approved transmission
▪ Looking for protocol errors
▪ Ensuring the integrity of the information
traversing the network
▪ Preventing unwanted activities while
supporting desirable activities.

Network Security
▪ Where does Network Security start from?
▪ It has to start with Trust.
▪ What is Trust?
▪ In Common Term: Trust is confiding in

your expectation that other will act in your
best interest.

Trust – Computers and Networks
▪ In Computer Term: Trust is the
confidence that other users will act in
accordance with your organization security
rules.
▪ Users will not attempt to violate your
organization’s privacy, integrity and
stability of the network and it resources.
▪ The belief that others are trustworthy.

Sometimes, people violate your Trust:
▪ Accidentally Deliberately
▪ Oversight Ignorance
▪ Hackers

Who is Trustworthy?
▪ You begin by realizing that trust is based on
past experience and behaviors.
▪ When people abide to rules you defined
and also meet expectation of conduct, you
can consider them trustworthy.
▪ Trust can also come from using a third-
party methods.
Example: Digital certificates that a public
certificate authority issues.
Example of 3rd Party Trust

▪ Ultimately, network security is based on
Trust.
▪ Not all trust is necessary the same.
▪ Those with higher level of trust can be
assigned with greater Privileges and
Permissions.
▪ If someone or something violate your
trust?
▪ Then you can remove the violator access
to the secure environment. © 2015 Jones and Bartlett Learning, LLC, an Ascend Learning Company
To have a secured network, you need to vet
every aspect of a network including:
▪ Software Hardware
▪ Configuration
▪ Communication Patterns
▪ Users
Otherwise, you will not be able to accomplish
the security objectives of your network.

Primary Objectives/Goals of Information
Security
Confidentiality
Security
Integrity Availability

Secondary Objectives/Goals of Information
Security
Authentication
Confidentiality
Privacy Integrity Authorization
Availability
Nonrepudiation

What are you trying to protect?
▪ To support security objectives, you need to
know clearly what you are trying to protect.
▪ Things you want to protect is generally
known as Assets.
▪ Assets is anything that is use to conduct a
business.
▪ Examples are:

Things that makes Asset Unavailable?
▪ Accidents
▪ Ignorance
▪ Oversight
▪ Hackers

Hackers
▪ The word “Hacking” originally meant
tinkering or modifying systems to learn and
explore.
▪ A malicious hackers can launch attack
and exploits the network, seeking to gain
access or just to cause damage.

Things to know about Hackers
How do Hackers think?
▪ Hackers think along the lines of
manipulation or change.
▪ Hackers look into rules to create new way
of bending, breaking or changing them.
▪ Hackers turn things over, inside out and in
wrong direction.

Things to know about Hackers (Cont.)
▪ Hackers attempt to perform tasks in
different orders with incorrect values,
outside the boundaries and with a purpose
to cause a reaction.
▪ Hackers look for easy targets or
overlooked vulnerabilities, exploit mistakes
of the network security professionals.

Best way to protect Malicious Hackers
According to Sun Tzu’s Art of War:
• “ If you know your enemy and know yourself,
you need not fear the result of hundred
battles”.
• “If you know yourself but not the enemy, for
every victory gained you will also suffer a
defeat”.
• “If you know neither the enemy nor yourself,
you will succumb in every battle”.

Best way to protect Malicious Hackers
▪ You must learn to think like a Hacker.
▪ Understand the techniques, methods and
motivation of hackers.
▪ Once you are able to know your assets
and also think like a hacker, then the better
you can create effective defense to protect
against them.

Seven Domains of a Typical IT
Infrastructure
What security controls can you implement in each

domain to protect the assets?

Seven Domains of a Typical IT
Infrastructure
▪ No aspect of an IT Infrastructure is without
Risk
▪ When thinking like a hacker, you have to

analyze every one of the seven domains of
a typical IT infrastructure.
▪ Hackers look for any and every opportunity

to exploit a target.
How can you measure the success of
Network Security?
▪ A perfect security component does not exist.
▪ Instead, good network security relies on an
interweaving of multiple effective security
components.
▪ Network security success is not about
preventing all possible attacks or
compromises.
▪ Instead, you work to continually improve the
state of security.
How can you measure the success of
Network Security?
▪ Successful network security is all about
constant vigilance.
▪ Security is an ongoing effort that constantly
changes to meet the challenge of new
threats.

Security Policy
▪ Establish goals
▪ Address risk
▪ Provide roadmap for security
▪ Set expectations
▪ Link to business objectives
▪ Map of laws and regulations
▪ Supported by standards,
procedures, and guidelines
Policy, Awareness, and Training
▪ Policy ~
− sets expectations
▪ Awareness ~
− promotes security
▪ Training ~
− defines roles and responsibilities

Examples of Network Infrastructures
▪ Workgroup
▪ SOHO
▪ Client/server
▪ LAN versus WAN
▪ Remote access and VPNs
▪ Boundary networks

A Typical Client/Server Network

A Typical VPN

Typical Boundary Networks

Wired Networks
▪ Lack of external connectivity creates physical
isolation
• Can rely on physical controls to protect
network
• External threats must breach physical barrier
▪ If external connectivity is required

• No control is the same as physical isolation
but security must enable the business
• Consider segmentation
• Rigorous front door screening
Benefits of Wireless Networking
▪ Can be inexpensive to deploy
• No need to run wires
• Quick connectivity for multiple users
▪ Convenience
▪ Mobility
▪ Ubiquity
• All laptops now come equipped with wireless

Wireless Concerns
▪ Introduces new attack surface
• Require additional design considerations to
mitigate attack
▪ Data is transmitted over the air and accessible
• Use of encryption technology
• Consider implementing segmented wireless
networks
▪ Network can be directly accessed from a distance
• Shielding

Consider Business Requirements
▪ Availability of the network and its components
• Redundancy
• High availability
• Single point of failure
• Denial of service
▪ Sensitivity of the data

• Encryption
• Access control

Common Network Security
Components Used to Mitigate
Threats
▪ Firewalls
▪ VPNs
▪ Proxy servers
▪ Network address translation
▪ Directory services
▪ Intrusion Detection Systems and Intrusion
Prevention Systems

Security Countermeasures
Common Uses Benefits Limitations
Countermeasures
Firewalls ▪ Filter traffic ▪ Hardware ▪ Perimeter defense

▪ Segmentation ▪ Software ▪ Not content oriented
▪ First defense ▪ Limited to yes or no
▪ Keep noise out
Virtual Private ▪ Remote access ▪ Private tunnel ▪ Man-in-the-middle

Network (VPN) ▪ Encrypted tunnel ▪ Extends Cover ▪ Not traffic oriented
Intrusion ▪ Monitor traffic ▪ Notification ▪ Relies on signatures

Detection/Prevention ▪ May block attacks ▪ Prevention ▪ False positives
System (IDS/IPS) ▪ Host or Network

Security Countermeasures (Continued)
Countermeasures
Data Loss Prevention ▪ Monitor data loss ▪ Sensitive config ▪ Signature reliant
▪ Block data loss ▪ Breach notification ▪ False positives
▪ Circumventable
Network Address ▪ Translates internal ▪ Thwarts hackers ▪ Requires IP

Translation (NAT) IP addresses into ▪ Extends use of forwarding
external public IPv4 addresses ▪ Can make some
addresses apps difficult to
▪ Reduces number of run
public IP addresses
needed
Security Incident and ▪ Aggregate sec logs ▪ Monitor and review ▪ False positives
Event Management ▪ Correlate sec logs ▪ Generate alerts ▪ Data heavy
▪ Limit to log info

Security Countermeasures (Continued)
Countermeasures
Continuous Control ▪ Checks config ▪ Automate monitors ▪ Emerging tech

Monitoring ▪ Standard compliant ▪ Self correction ▪ Policy dependent
▪ Real time monitor
Vulnerability ▪ Tests systems ▪ Proactive address ▪ Limited to known

Assessment ▪ Centralize tracking ▪ Create noise

Summary
▪ Confidentiality, integrity, and availability
mandates for network resource security
▪ Network security and its value to the enterprise
▪ Roles and responsibilities in network security
▪ Network infrastructure design on security
▪ Features, uses, and benefits of network security
countermeasures


ISSM535Q Week1 PDF

Hochgeladen von

Dokumentinformationen

Originaltitel

Copyright

Verfügbare Formate

Dieses Dokument teilen

Dokument teilen oder einbetten

Freigabeoptionen

Stufen Sie dieses Dokument als nützlich ein?

Sind diese Inhalte unangemessen?

Copyright:

Verfügbare Formate

ISSM535Q Week1 PDF

Hochgeladen von

Copyright:

Verfügbare Formate

Firewall Fundamentals

© 2015 Jones and Bartlett Learning, LLC, an Ascend Learning Company

© 2015 Jones and Bartlett Learning, LLC, an Ascend Learning Company

© 2015 Jones and Bartlett Learning, LLC, an Ascend Learning Company

© 2015 Jones and Bartlett Learning, LLC, an Ascend Learning Company

© 2015 Jones and Bartlett Learning, LLC, an Ascend Learning Company

▪ What is Network Security?

A Network Security is the control of

© 2015 Jones and Bartlett Learning, LLC, an Ascend Learning Company

© 2015 Jones and Bartlett Learning, LLC, an Ascend Learning Company

▪ It has to start with Trust.

▪ In Common Term: Trust is confiding in

© 2015 Jones and Bartlett Learning, LLC, an Ascend Learning Company

© 2015 Jones and Bartlett Learning, LLC, an Ascend Learning Company

Sometimes, people violate your Trust:

© 2015 Jones and Bartlett Learning, LLC, an Ascend Learning Company

© 2015 Jones and Bartlett Learning, LLC, an Ascend Learning Company

© 2015 Jones and Bartlett Learning, LLC, an Ascend Learning Company

© 2015 Jones and Bartlett Learning, LLC, an Ascend Learning Company

© 2015 Jones and Bartlett Learning, LLC, an Ascend Learning Company

© 2015 Jones and Bartlett Learning, LLC, an Ascend Learning Company

© 2015 Jones and Bartlett Learning, LLC, an Ascend Learning Company

© 2015 Jones and Bartlett Learning, LLC, an Ascend Learning Company

© 2015 Jones and Bartlett Learning, LLC, an Ascend Learning Company

© 2015 Jones and Bartlett Learning, LLC, an Ascend Learning Company

© 2015 Jones and Bartlett Learning, LLC, an Ascend Learning Company

© 2015 Jones and Bartlett Learning, LLC, an Ascend Learning Company

What security controls can you implement in each

© 2015 Jones and Bartlett Learning, LLC, an Ascend Learning Company

▪ When thinking like a hacker, you have to

▪ Hackers look for any and every opportunity

© 2015 Jones and Bartlett Learning, LLC, an Ascend Learning Company

© 2015 Jones and Bartlett Learning, LLC, an Ascend Learning Company

© 2015 Jones and Bartlett Learning, LLC, an Ascend Learning Company

© 2015 Jones and Bartlett Learning, LLC, an Ascend Learning Company

© 2015 Jones and Bartlett Learning, LLC, an Ascend Learning Company

© 2015 Jones and Bartlett Learning, LLC, an Ascend Learning Company

▪ If external connectivity is required

© 2015 Jones and Bartlett Learning, LLC, an Ascend Learning Company

© 2015 Jones and Bartlett Learning, LLC, an Ascend Learning Company

▪ Sensitivity of the data

© 2015 Jones and Bartlett Learning, LLC, an Ascend Learning Company

© 2015 Jones and Bartlett Learning, LLC, an Ascend Learning Company

Firewalls ▪ Filter traffic ▪ Hardware ▪ Perimeter defense

Virtual Private ▪ Remote access ▪ Private tunnel ▪ Man-in-the-middle

Intrusion ▪ Monitor traffic ▪ Notification ▪ Relies on signatures

© 2015 Jones and Bartlett Learning, LLC, an Ascend Learning Company

Network Address ▪ Translates internal ▪ Thwarts hackers ▪ Requires IP

© 2015 Jones and Bartlett Learning, LLC, an Ascend Learning Company

Continuous Control ▪ Checks config ▪ Automate monitors ▪ Emerging tech

Vulnerability ▪ Tests systems ▪ Proactive address ▪ Limited to known

© 2015 Jones and Bartlett Learning, LLC, an Ascend Learning Company

© 2015 Jones and Bartlett Learning, LLC, an Ascend Learning Company

Das könnte Ihnen auch gefallen