Security Overview: Addressing Threats and Weaknesses in Network Security, Slides of Network security

An overview of the need for security in distributed networks, intranets, extranets, and global access to the internet. It outlines various security threats, weaknesses, and solutions, including authentication, integrity, non-repudiation, network availability, wireless access, technology, configuration, policy, and human error aspects. The document also includes scenarios to solve, such as storing large volumes of secure data and complying with legal obligations after a security breach.

Typology: Slides

2012/2013

Uploaded on 04/22/2013

sathaye
sathaye 🇮🇳

4.8

(8)

102 documents

1 / 7

Toggle sidebar

This page cannot be seen from the preview

Don't miss anything!

bg1
Security Overview
Docsity.com
pf3
pf4
pf5

Partial preview of the text

Download Security Overview: Addressing Threats and Weaknesses in Network Security and more Slides Network security in PDF only on Docsity!

Security Overview

Need for Security

  • Distributed Networks
  • Intranets
  • Extranets
  • Global access to Internet

Weaknesses

  • Technology aspect
    • TCP/IP, UDP, Operating Systems, Routers, Firewalls, Switches
  • Configuration aspect
    • User accounts, weak passwords, Java enabled without firewall, unchanged default settings, physical security
  • Policy aspect
    • Lack of written policies, turf wars, high turnover, nonexistent disaster recovery policy, lack of monitoring and auditing

Weaknesses

  • Human error aspect
    • Accidental loss of data
    • Naïve
    • Dishonesty
    • Disgruntled employee

Security Scenarios to Solve

  1. Recommend policies and procedures to store large volumes of secure data and retrieve data periodically from remote sites. Develop a full scenario based on these two requirements.
  2. You are the CTO and your system has been attacked and secure data compromised. Assuming that you live (a) in California or (b) in New York, what legal obligations are there for you to meet? Develop your response in the form of a report to the CEO.