Security Systems and Technologies

Introduction

2005 Cisco Systems, Inc. All rights reserved. 1

Learning Objectives

The Need for Network Security

Information Security Objectives
Introduction to Vulnerabilities, Threats, and Attacks
Defense mechanisms

2005 Cisco Systems, Inc. All rights reserved. 2

The Closed Network

2005 Cisco Systems, Inc. All rights reserved. 3

The Network Today

2005 Cisco Systems, Inc. All rights reserved. 4

Network Security Models

2005 Cisco Systems, Inc. All rights reserved. 5

 Trends that Affect Security

Increase of network attacks

Increased sophistication of attacks
Increased dependence on the network
Lack of trained personnel
Lack of awareness
Lack of security policies
Wireless access
Legislation
Litigation

2005 Cisco Systems, Inc. All rights reserved. 6

Legal and Governmental
Policy Issues

Organizations that operate vulnerable networks

will face increasing and substantial liability.
US Federal legislation mandating security
includes the following:
GLB financial
services legislation
Government Information Security
Reform Act
HIPAA
CIPA

2005 Cisco Systems, Inc. All rights reserved. 7

Security Goals

Confidentiality

Integrity Avaliability

2005 Cisco Systems, Inc. All rights reserved. 8

Security Services
Confidentiality (privacy)

Authentication (who created or sent the data)

Integrity (has not been altered)

Non-repudiation (the order is final)

Access control (prevent misuse of resources)

Availability (permanence, non-erasure)

Denial of Service Attacks

Virus that deletes files

2005 Cisco Systems, Inc. All rights reserved. 9
Network Vulnerabilities

Technology
Configuration
Policy

2005 Cisco Systems, Inc. All rights reserved. 10

Threat CapabilitiesMore
Dangerous and Easier to Use

2005 Cisco Systems, Inc. All rights reserved. 11

 Network Threats

There are four general categories of security threats to the

network:
Unstructured threats
Internal
Structured threats
exploitation
Internet Dial-in
External threats exploitation
Internal threats

Compromised
host

2005 Cisco Systems, Inc. All rights reserved. 12

 2005 Cisco Systems, Inc. All rights reserved. 13
Security Attacks

2005 Cisco Systems, Inc. All rights reserved. 14

Security Attacks

Interruption: This is an attack on availability

Interception: This is an attack on confidentiality
Modification: This is an attack on integrity
Fabrication: This is an attack on authenticity

2005 Cisco Systems, Inc. All rights reserved. 15

Four Classes of Network Attacks

Reconnaissance attacks
Access attacks
Denial of service attacks
Worms, viruses, and Trojan horses

2005 Cisco Systems, Inc. All rights reserved. 16

 Specific Attack Types

All of the following can be used to compromise your system:

Packet sniffers
IP weaknesses
Password attacks
DoS or DDoS
Man-in-the-middle attacks
Application layer attacks
Trust exploitation
Port redirection
Malware

2005 Cisco Systems, Inc. All rights reserved. 17

Methods of Defense

Perimeter defenses: fw, nips, anti-x, apt, etc.

Encryption
Software Controls: hips, dlp, restriction policies,
vulnerability analysis, security monitoring.
Hardware Controls (smartcards, tokens)
Physical Controls
Information Security Policy & Information Security
Management Systems

2005 Cisco Systems, Inc. All rights reserved. 18