A Network Security Overview

1
A Network Security Overview

• Thomas Kernes
• November 1, 2000

2
Abstract

• With the advent and mass utilization of computers
  and networks in today's business world, network
  security has become a very large and important
  topic of discussion. Whether it is firewalls to
  keep people out of your network, cryptography to
  scramble important data or user education to
  minimize the risk of an accidental security
  breach, security takes many forms. This
  presentation will cover some of the important
  aspects of network security and highlight some of
  the unseen problems that affect nearly all
  businesses.

3
What is Network Security?

• The Network includes hardware, the
  interconnections and the information.
• Physical security vs network security
• Identification of threats

4
So how do we protect?

• Security models
• Protection prioritization
• Administrative policy
• Education
• Vigilance

5
How do we accomplish that?

• Available Tools
• Education
• Awareness
• Salesmanship

6
Tools - Cryptography

• VPN
• -remote access
• PGP
• -email
• Dedicated Circuits
• -tunnels
• -IPSec

7
Tools - Web Security

• Firewalls
• -denial of services vs threats
• Remote Access
• Human Element
• -keeping info in is harder than keeping people
  out

8
Tools - Virus Protection

• Email
• Intruders
• Human Element

9
So Now What?

• All of the tools may not be the answer

10
Education

• Only one person has to talk
• Social Engineering
• Kevin Mitnick
• Microsoft

11
Conclusion

• Security is a black art

12
References

• Network Security Essentials
• William Stallings, Prentice Hall, 2000
• US Department of Defense
• Jim Christy, Special Investigator, USAF
• http//www.cs.virginia.edu/survive/PAPERS/Christ
  y.html
• Cuckoos Egg - Clifford Stoll