Trey Shaffer

1
Trey Shaffer

• TreyS _at_ PostNet.com
• Trey.Shaffer _at_ OneCo.net

2
Intros, Background

• Trey
• Class

3
Security, broadly speaking

• Threat assessment
• Approach
• Solution

4
Risk Assessment

• Mission Critical Data
• Mission Critical Transactions
• Public Image
• Lost Productivity
• Data recovery
• Virus

5
Security Overview

• 80/20 rule
• 95/5 rule
• Send attackers to your neighbor

6
Corporate Data Loss

• Sneaker Net
• Laptops
• PDAs
• RAS/VPN
• Hacker

7
Methods of Protection

• Unplug
• Restrict Access
• Control Access

8
Restrict Access Who

• User/Password
• Certificates
• Random Generator
• Biometric

9
Certificates

• You Are Who You (say you) Are
• Three Parties
• User
• Host
• Cert Authority

10
Restrict Access Where

• Certificates
• Telephone Number
• IP Address
• DNS Reverse

11
Methodology

• Choose one
• Thorough
• Repeatable

12
Break?
13
Techie Stuff

• TCP/IP Protocol
• How it works
• Barrier Solutions
• Address translation
• Proxy
• Firewall

14
TCP/IP

• Postal Mail Analogy
• Unique address
• Network
• Host
• Gateway
• Ports

15
Control Access

• Naked Isolation
• DMZ
• Internal

16
Solutions

• Meet Various Needs
• Features
• Ease of use
• Performance
• Cost
• Hybrid Feature Sets

17
Address Translation

• Mask Addresses
• Many internal
• Single/few external
• Inexpensive
• Universal
• Limited Flexibility

18
Proxy

• Address Translation
• Caching
• Performance
• Utilization
• Management
• Control
• Reporting

19
Firewall

• Hardware/Software
• Extended Features
• Complex/Flexible Policy
• Multi-Point Implementation
• Complementary Services
• VPN
• Web filtering