Upload File

networks and security a series of lectures, outlining: how networks affect security of a system...

  • Home
  • Documents
  • Networks and Security A Series of Lectures, Outlining: How Networks affect Security of a system Security of System Security of Network Security of Organisation
45
Networks and Security Networks and Security A Series of Lectures, Outlining: How Networks affect Security of a system Security of System Security of Network Security of Organisation Secure vs Trustworthy Attack Vulnerabilities Web references and Bibliography Eur Ing Brian C Tompsett University of Hull

Post on 21-Dec-2015

215 views

Category:

Documents


3 download

Report

Tags:

TRANSCRIPT

Page 1: Networks and Security A Series of Lectures, Outlining: How Networks affect Security of a system Security of System Security of Network Security of Organisation

Networks and SecurityNetworks and Security

A Series of Lectures, Outlining:How Networks affect Security of a system

Security of System

Security of Network

Security of Organisation

Secure vs Trustworthy

Attack Vulnerabilities

Web references and Bibliography

Eur Ing Brian C TompsettUniversity of Hull

Page 2: Networks and Security A Series of Lectures, Outlining: How Networks affect Security of a system Security of System Security of Network Security of Organisation

Networking PrinciplesNetworking PrinciplesRevisionRevision

•ISO 7 Layer Model•Names and function of layers•Layer interconnect terminology

Page 3: Networks and Security A Series of Lectures, Outlining: How Networks affect Security of a system Security of System Security of Network Security of Organisation

Internet BasicsInternet Basics RevisionRevision

IP Addresses (and registrars)150.237.92.11

192.168.0.1

Domain Names (and registrars)www.dcs.hull.ac.uk

on.to / i.am / name.is

Services/Socketshttp port 80

Page 4: Networks and Security A Series of Lectures, Outlining: How Networks affect Security of a system Security of System Security of Network Security of Organisation

ISO 7 Layer ModelISO 7 Layer Model

Network

Datalink

Physical

Application

Presentation

Session

TransportNetwork

Datalink

Physical

Application

Presentation

Session

Transport

Hub/Repeater

GatewayProxy/Relay

NAT/ICS/Proxy

Router

Switch/BridgePTU

FrameDatagram

PacketDatagram

Segment

Message

IP

TCP/UDP

HTTP/FTPSMTP

PPP/SLIPEthernet

10BaseT

ADSL

Page 5: Networks and Security A Series of Lectures, Outlining: How Networks affect Security of a system Security of System Security of Network Security of Organisation

Internet The MovieInternet The Movie

Animation covering salient points

It has some factual errorCan you spot them?

First Mention of FirewallsCovered later

Page 6: Networks and Security A Series of Lectures, Outlining: How Networks affect Security of a system Security of System Security of Network Security of Organisation
Page 7: Networks and Security A Series of Lectures, Outlining: How Networks affect Security of a system Security of System Security of Network Security of Organisation

SummarySummary

Overall Networking Architecture

Role of Layers & Layer Interface

Internet Protocols

Network Interconnections

Any further revision?

Page 8: Networks and Security A Series of Lectures, Outlining: How Networks affect Security of a system Security of System Security of Network Security of Organisation

22

Page 9: Networks and Security A Series of Lectures, Outlining: How Networks affect Security of a system Security of System Security of Network Security of Organisation

What is it for?What is it for?

What is the purpose ofTrustworthy Computing?

Computer Security?

Information Security?

Page 10: Networks and Security A Series of Lectures, Outlining: How Networks affect Security of a system Security of System Security of Network Security of Organisation

DataDataProceduresProceduresActivityActivityInfrastructureInfrastructureOrganisationOrganisationEnvironmentEnvironmentEntitiesEntities

Page 11: Networks and Security A Series of Lectures, Outlining: How Networks affect Security of a system Security of System Security of Network Security of Organisation

EntitiesEntitiesEnvironmentEnvironmentOrganisationOrganisationInfrastructureInfrastructureActivitiesActivitiesProceduresProceduresDataData

Page 12: Networks and Security A Series of Lectures, Outlining: How Networks affect Security of a system Security of System Security of Network Security of Organisation

EntitiesEntities

ProceduresProcedures

DataData

EnvironmentEnvironment

OrganisationOrganisation

InfrastructureInfrastructure

ActivitiesActivities

Page 13: Networks and Security A Series of Lectures, Outlining: How Networks affect Security of a system Security of System Security of Network Security of Organisation

Information Security ModelInformation Security Model

Entities Protection

Environment Protection

Organisation Protection

Infrastructure Protection

Activity Protection

Procedure level Protection

Data Protection

Page 14: Networks and Security A Series of Lectures, Outlining: How Networks affect Security of a system Security of System Security of Network Security of Organisation

Security 7 Layer ModelSecurity 7 Layer Model

Activity

Procedures

Data

Entities

Environment

Organisation

InfrastructureActivity

Procedures

Data

Entities

Environment

Organisation

Infrastructure

Translation

Relationship

Contract

Language

Protocol

Packet

Document

Business

Contact

Information

Connection

Exchange

Gateway

Exchange

Page 15: Networks and Security A Series of Lectures, Outlining: How Networks affect Security of a system Security of System Security of Network Security of Organisation

EntitiesEntities

Objects being manipulated by the systemEntities can be active or passiveData about entities is being protectedEntities can be People, Organisations or ObjectsEntities themselves encompass other entities – Collection or ContainmentSecurity involves:

Physical Changes – CommissioningOperational Procedure – What they doStructure – Interrelations

Page 16: Networks and Security A Series of Lectures, Outlining: How Networks affect Security of a system Security of System Security of Network Security of Organisation

EnvironmentEnvironment

The restrictions on entities

Can act to limit or constrain security or freedom of action

Legislation, Regulation, Ethics

Technical Capability, Resource Limitation

Compatibility, Standards, Procedures

Physical Limitation

Page 17: Networks and Security A Series of Lectures, Outlining: How Networks affect Security of a system Security of System Security of Network Security of Organisation

OrganisationOrganisation

The Mechanism by which operations a performed

The Organisation within the environment

Page 18: Networks and Security A Series of Lectures, Outlining: How Networks affect Security of a system Security of System Security of Network Security of Organisation

InfrastructureInfrastructure

That which enables activities

The physical components which may or may not be entities in their own right

Page 19: Networks and Security A Series of Lectures, Outlining: How Networks affect Security of a system Security of System Security of Network Security of Organisation

ActivityActivity

The tasks which process the data

Usually a business activity

Could be a software Application

Page 20: Networks and Security A Series of Lectures, Outlining: How Networks affect Security of a system Security of System Security of Network Security of Organisation

ProcedureProcedure

The component steps that enable an activity

Can be software components or human procedures

Page 21: Networks and Security A Series of Lectures, Outlining: How Networks affect Security of a system Security of System Security of Network Security of Organisation

DataData

The actual data about entities

The goal of a security breach

Protected byCryptography

Integrity

Page 22: Networks and Security A Series of Lectures, Outlining: How Networks affect Security of a system Security of System Security of Network Security of Organisation

Security ModelsSecurity Models

ISO 17799ISO 27001 – ISO 27000 series

SABSASherwood Applied Business Security Architecture

Based on Zachman IS Framework

Financial Security Model

http://www.induction.to/bs7799/
http://searchsecurity.techtarget.com/tip/0,289483,sid14_gci1210555,00.html
http://iang.org/papers/fc7.html
Page 23: Networks and Security A Series of Lectures, Outlining: How Networks affect Security of a system Security of System Security of Network Security of Organisation

SABSA ModelSABSA Model

Page 24: Networks and Security A Series of Lectures, Outlining: How Networks affect Security of a system Security of System Security of Network Security of Organisation

Financial Security ModelFinancial Security Model

FinanceApplications for financial users, issuers of digital value, trading and

market operationsValue

Instruments that carry monetary valueGovernance

Protection of the system from non-technical threatsAccounting

Value within defined placesRights

An authentication concept – moving value between identitiesSoftware Engineering

Tools to move instructions over the netCryptography

Sharing truths between parties

Page 25: Networks and Security A Series of Lectures, Outlining: How Networks affect Security of a system Security of System Security of Network Security of Organisation

ISO 17799ISO 17799

Security PolicyOrganisation of Information SecurityAsset ManagementHuman Resources SecurityPhysical and Environmental SecurityCommunications and Operational ManagementAccess ControlSystems Development, Acquisition, MaintenanceSecurity Incident ManagementBusiness Continuity ManagementCompliance

Page 26: Networks and Security A Series of Lectures, Outlining: How Networks affect Security of a system Security of System Security of Network Security of Organisation

ISO 17799ISO 17799

Page 27: Networks and Security A Series of Lectures, Outlining: How Networks affect Security of a system Security of System Security of Network Security of Organisation

Network Security ModelNetwork Security Model

Personal Protection

Organisation Protection

Network Protection

System Protection

Application Protection

Code level Protection

Data Protection

Page 28: Networks and Security A Series of Lectures, Outlining: How Networks affect Security of a system Security of System Security of Network Security of Organisation

DataDataCodeCodeApplicationApplicationSystemsSystemsInfrastructureInfrastructureOrganisationOrganisationPersonPerson

Page 29: Networks and Security A Series of Lectures, Outlining: How Networks affect Security of a system Security of System Security of Network Security of Organisation

PersonPersonOrganisationOrganisationInfrastructureInfrastructureSystemsSystemsApplicationApplicationProcedureProcedureDataData

Page 30: Networks and Security A Series of Lectures, Outlining: How Networks affect Security of a system Security of System Security of Network Security of Organisation

PersonPerson

ProceduresProcedures

DataData

OrganisationOrganisation

InfrastructureInfrastructure

SystemsSystems

ApplicationsApplications

Page 31: Networks and Security A Series of Lectures, Outlining: How Networks affect Security of a system Security of System Security of Network Security of Organisation

Security 7 Layer ModelSecurity 7 Layer Model

Application

Procedures

Data

Person

Organisation

Infrastructure

SystemsApplication

Procedures

Data

Person

Organisation

Infrastructure

Systems

Translation

Relationship

Contract

Language

Protocol

Packet

Document

Business

Contact

Information

Connection

Exchange

Gateway

Exchange

Page 32: Networks and Security A Series of Lectures, Outlining: How Networks affect Security of a system Security of System Security of Network Security of Organisation

StaticStatic

DynamicDynamic

ActivityActivityObjectObject

Page 33: Networks and Security A Series of Lectures, Outlining: How Networks affect Security of a system Security of System Security of Network Security of Organisation

Personal ProtectionPersonal Protection

Personal SecurityLocking Doors, Staying Safe

Personal Data ProtectionGiving out DOB, Credit Card, Family info

Securing Access to your Computer

Personal Security Policy for all

Protect others personal security

Page 34: Networks and Security A Series of Lectures, Outlining: How Networks affect Security of a system Security of System Security of Network Security of Organisation

Organisation ProtectionOrganisation Protection

Organisation / Institution / CompanyA Holistic View

Corporate Image

Make public only what required

Hide internal structure & information

Window & Door into Organisation

Manages Input & Output

Page 35: Networks and Security A Series of Lectures, Outlining: How Networks affect Security of a system Security of System Security of Network Security of Organisation

Doors and WindowsDoors and Windows

Decide What Services are availableWeb servers, ftp, email

Which hosts on which networks

Which domains used

On which IP nets

Hosted by whom

What registration informationNames, addresses phone numbers

Page 36: Networks and Security A Series of Lectures, Outlining: How Networks affect Security of a system Security of System Security of Network Security of Organisation

WWW

Internet

FTP

SMTP

Gateway

Inside

Outside

Page 37: Networks and Security A Series of Lectures, Outlining: How Networks affect Security of a system Security of System Security of Network Security of Organisation

Network ProtectionNetwork Protection

Protect Network as entity/resource

Manage permitted traffic flow

Manage authorised use

Architect the Network - zoning

Firewalling

Page 38: Networks and Security A Series of Lectures, Outlining: How Networks affect Security of a system Security of System Security of Network Security of Organisation

Network ArchitectureNetwork Architecture

Proper use of Subnets and domainsLimit traffic to local segments

Use Bridges/Switches/Routers/Proxies

Prevent data and authority leaks

Page 39: Networks and Security A Series of Lectures, Outlining: How Networks affect Security of a system Security of System Security of Network Security of Organisation

What to Firewall?What to Firewall?

Certain Protocols – netBios

Certain Responses – ping/traceroute

Certain Applications Real/IRC

Certain Systems/Networks

Control Port/Host combinationsEmail Port/25, HTTP Port/80, FTP Port/21

Rate LimitDenial of Service/Scanners

Page 40: Networks and Security A Series of Lectures, Outlining: How Networks affect Security of a system Security of System Security of Network Security of Organisation

System ProtectionSystem Protection

Protect each system from misuseIncoming & Outgoing!

Control Which Services Runhttp://support.microsoft.com/?kbid=832017

Virus checkers

http://support.microsoft.com/?kbid=832017
http://support.microsoft.com/?kbid=832017
http://support.microsoft.com/?kbid=832017
Page 41: Networks and Security A Series of Lectures, Outlining: How Networks affect Security of a system Security of System Security of Network Security of Organisation

Application ProtectionApplication Protection

Specific Application ConfigurationParental Controls of Web Browsers

Domain/IP blockers

Spam filters

Control file/device exports

Page 42: Networks and Security A Series of Lectures, Outlining: How Networks affect Security of a system Security of System Security of Network Security of Organisation

Code Level ProtectionCode Level Protection

Writing Secure CodeEven on secured system

Bad Code compromises security

Hence software updates

Page 43: Networks and Security A Series of Lectures, Outlining: How Networks affect Security of a system Security of System Security of Network Security of Organisation

Data ProtectionData Protection

Hiding the Data

Cryptography

Data Transience

Data Integrity

Page 44: Networks and Security A Series of Lectures, Outlining: How Networks affect Security of a system Security of System Security of Network Security of Organisation

33

Page 45: Networks and Security A Series of Lectures, Outlining: How Networks affect Security of a system Security of System Security of Network Security of Organisation

Forms of AttackForms of Attack

Denial of Service

Input Data Attack

Spoofing

Sniffing

Social Engineering


Networks and Security

Nuage Networks Security Solution by Hari Krishnan, Senior Director, PLM, Security at Nuage Networks - #NFD12

Wired Networks Security 0

Network Security Security in Wireless Ad Hoc Networks 1 Network Security Chapter 8. Security in Wireless Ad Hoc Networks

Security on Sensor Networks

SOCIAL NETWORKS SECURITY ASPECTS

Outlining Genome-Wide Carbon Source Specific Metabolic Networks In Burkholderia sp. nov. LB400

Security in Computing Chapter 7, Security in Networks

Security for Sensor Networks

| SPRING 2015 Cyber Security - NEEBC · an overview of cyber security by the U.S. Department of Homeland Security (4/15). ... infographic outlining our cutting-edge approach. THE

Computer Networks (CS 132/EECS148) Security in Computer Networks

TETRA Networks Security

SECURITY FOR WIDE AREA WIRELESS NETWORKS · SECURITY FOR WIDE AREA WIRELESS NETWORKS . ... devices and the network. VPN Security Measures. SECURIT FOR WIDE AREA WIRELESS NETWORKS

Security Appliances Security Target - Common Criteria · 2.2.2 ScreenOS ... ST Title – Juniper Networks Security Appliances Security Target ... 6.3.0r6 Juniper Networks NetScreen

Security in Pervasive Networks

Security for Wireless Networks - Territorial Supplies · Security for Wireless Networks ... uses of mobile devices over wireless networks. ... When using wireless networks, security

Mobile Security - Wireless Mesh Network Security · PDF fileOverview Introduction •Wireless Ad-hoc Networks •Wireless Mesh Networks Security in Wireless Networks Attacks on Wireless

Security for Wireless Networks - acsc.gov.au · January 2012 Security for Wireless Networks Defence Signals Directorate - Cyber Security Operations Centre

Physical Layer Security 1. Outline 2 Overview Physical Security in Wired Networks Physical Security in Wireless Networks

Security Electronics & Networks Magazine

Security of AdHoc networks

BSc Computer Networks and Security; BSc Computer Networks

Home Security Networks

Network Security Security in Traditional Wireless Networks 1 Network Security Chapter 6. Security in Traditional Wireless Networks

Computer Networks and Security

Networks for Security Applications

Juniper Networks Security Appliances Security Target

Social networks security

Juniper Networks Security Appliances Security …...Juniper Networks Security Appliances Security Target Revision L December 19, 2005 EAL4 5 • Juniper Networks NetScreen-204 (Part

security of networks (fr)

Juniper Networks IP Routers & Security Solutions - Cudi · Juniper Networks IP Routers & Security Solutions ... J unip erRout s. ... Juniper Networks IP Routers & Security Solutions

Telecommunication Networks Security Management 040112 · Telecommunication Networks: Security Management Telecommunication networks are today an inseparable part of social interaction

Social networks security threats

Managed Clinical Neuromuscular Networks NHS has also identified neurological conditions as a ... the development of patient passports outlining ... Managed Clinical Neuromuscular Networks

Storage Area Networks Security Protocols and …franjo/papers/SAN_Security_WP_v1.pdfStorage Area Networks Security Protocols and ... Storage Area Networks Security Protocols and Mechanisms