Websense ???????? Campus Internet Access Management

1
Websense ????????Campus Internet Access
Management
2
???????????

• ???8700?????????,???????80???,????20????????????
  ????,20????????????????,??10??????????????
• ?? ????
• ????
• 1.????????????
• ??
• 2.????????????

3
???????????

• ????????????????????,????????????,???????????
  ??????????,???????????,????????????,????????,
  ???????????????
• ????
• ?????????
• ??????????
• ?????????
• ????????

4
??????????

• 04?7?www.1enovo.com
• ????IE????????,????????????????QQ??????,????????
  ?????????
• 04?12?www.bank-off-china.com
• 12????????????????
• ??????????,??????????????,???2.5???????????
• ?????????????????
• www.lcbc.com.cn ( www.icbc.com.cn )
• www.965555.com ( www.95599.com )
• 05?1?www.chinacharity.cn.net
• ?????????????
• 05?2?
• ??????????
• www.banochi.net ?????????

5
?????????

• ?????

www.lcbc.com.cn
www.icbc.com.cn
?? ???
6
????????

• ?? URL
• www.lenovo.com vs. www.1enovo.com
• HTTP URL login ( RFC 1738/2396 )
• ltusergtltpasswordgt_at_lthostgtltportgt/lturl-pathgt
• http//www.trustedsite.com/.../_at_hacker.org
• Internet Explorer address bar URL spoofing flaw
• announced Dec. 10, 2003 by Sam Greenhalgh
• patch available Feb. 2, 2004 from Microsoft
• http//microsoft.comnull character_at_hacker.org?
  ??????
• http//microsoft.com

7
????????

• Use META to redirect the real web site at the
  back
• ltMETA HTTP-EQUIV"Refresh CONTENT"0urlhttp//w
  ww.citibank.comgt

8
????????

• Visual Spoofing Fake menu, status, or URL
  address bar

9
????????? ?

• ????????????--??QQ
• ??QQ????????
• ?????QQ????????
• ??QQ?????????,?????
• ??????
• ????????????
• ??QQ????
• QQ??(Troj.QQTail.a) (2005.9.10)
• QQ???(Troj.PSWQQ.v)???? (2005.9.16
• ????????msn,yahoo messenger)

10
???(P2P)??? ?

• ??????BT,eMule,PP???
• ????????????,????CS??????
• ?????????????
• ?????????
• ?????????????? viruses, worms, Trojan horses, ?
  spyware
• ???????????????????????

11
???????????
????????

• ??????? (Internet Access)
• ?????
• ????? (Streaming Media)
• ?????(Internet radio)

??????

• ???? (Instant Messaging)
• P2P?? (Peer-to-peer file sharing)

??????

• ???? (Spyware)
• ???? (Malicious Mobile Code)
• ???? (Phishing Attack)

????

• ??????(Employee Hacking)
• ???????

12
Websense ????????
13
Websense Enterprise v5.5

• ????????????????
• ????????????Internet??
• ??????,?????Internet?????
• ?? ????(Instant Messaging)?????
• ?? ???(peer-to-peer) ????
• ?????????????
• ???? Web-based Email ????
• ?? Spyware ?????????????????
• ??????????????
• ???????Zero Day????????
• ????? ????????????
• ???? 22,800 ????????

14
????????
?? ??????
?? ?????????
?? ????????
15
Websense ????
16
????????Websense????
17
Websense????????????
18
Websense Master URL Database?????????
??   ? ?????   ? ?????   ????   ????   ? ????   ?
???????   ? ??   ? ?   ? ???   ?????   ? ???????
  ??   ? ????   ? ??   ? ???   ? ??????
???? ????? !
??????? ? ?? ? ??????? ? ?? ? ???? ? ????? ?
?? ???? ???? ? ?????????? ?? ?? ???? ?? ??
??   ? ????   ? ????   ? ????   ? ????   ??   ?
MP3 ??   ??   ??   ? ??   ? ????   ??
  ????? ????   ? ?????   ? ????   ? ????   ?
???????   ? URL ????   ? Web ??    
?????   ? ????   ? ?? Web ?????   ??   ?????????
  ?????   ? ???? ???? ?? ? ?????? ??????? ?
???? ?? ? ???? ? ??? ???? ? ??????? ? ??????? ?
???????
19
???Internet????????????

• ???UserID?IP ? IP ???Group(??),??????
• ?????????????????????
• ???Limit by Quota???Continue????????????

20
?????? ??????????
Websense Enterprise??????????????????????
Websense Enterprise Real-Time Analyzer
Real-Time ?Websense????????????
Websense Enterprise Explorer
Forensics Analytics ????????????????????,
???????, ??HR?????
Websense Enterprise Reporter
Batch ??80?????????,???????????
21
??????
WEBSENSE ENTERPRISE EXPANDING EIM
22
???????
WEBSENSE ENTERPRISE EXPANDING EIM
23
Websense Enterprise Explorer
??????????????? ???????
24
?????????
25
Websense Reporter
26
???? BlockPage/??????(HTML)
27
Websense Security Labs ??

• Security Labs Alerts
• SiteWatcher ??????????MMC??,??????
• BrandWatcher ??????????????????????????????,?????
  ????

28
Client Policy Manager ?????????

• ?????(Zero Day)?????
• Application Lockdown
• Network Access Lockdown
• Outbreak Mode
• ?????????????????
• IM, P2P, Games, Hacking Tools, Spyware
• Viruses, worms and trojan horses
• ??????????????????
• ???
• Explorer for CPM
• CPM Reporter
• Inventory Manager

29
??CPM???????????
30
??CPM?????????????
?????????? Spyware ?
31
??????????????
32
CPM????????

• ????????????,? USB, FireWire, CD/DVD ???,
  ???????????
• ??????????????????????,????????????.

33
????????????????????
34
????
35
King George V School

• ?????100??KGV,???????????
• ????????????????,?????????????????????????????????
  ?(????????????)????????
• ???????????????????(MMC)?????????????????????

36
Websense ??????
????????????,???????????? ???Websense Master Database????????????????
?????????????BT???? 1.?? ?????????? ????,???????????????
?????? spyware, keylogging and MMC??? ???? Websense Security PG ???????????????
?????????? ?? Websense Reporter ????Top users, Top URL ?????,?????????????????? Websense Explorer ???????????????????Internet??????
37
????????

• Websense?????????????,?????????????????,????
  ????????????
• Daniel Cheong,KGV????

38
???????????
When youre ready to buy, we recommend
Websense ZDNet
No other product equals Websense Enterprise.
PC Magazine
39
??????
40

• ???www.websense.com???????????30????!