1 / 19

Implementing Network Security

Implementing Network Security. SCCS SECURITY INC. Prepared for FRANKLIN MEDICAL SUPPLIES. ITEC495 – TEAM D. Introduction. NETWORK SECURITY OVERVIEW “ The protection of networking components, connections, and content ” (Whitman & Mattord, 2005).

chaela
Download Presentation

Implementing Network Security

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. Implementing Network Security SCCS SECURITY INC. Prepared for FRANKLIN MEDICAL SUPPLIES ITEC495 – TEAM D

  2. Introduction NETWORK SECURITY OVERVIEW “The protection of networking components, connections, and content”(Whitman & Mattord, 2005). • Small piece of the overall information security pie. • Management, computer and data, policy, and network security. • Focus on network security. • Provide tools for a proactive approachto information security overall. IMPLEMENTING NETWORK SECURITY | SCCS SECURITY INC.

  3. Scenario | Franklin Medical Supplies Needs PROBLEM IDENTIFICATION Franklin Medical Supplies is looking for a solution to secure their outdated network. CURRENT OPERATING ENVIRONMENT • Franklin Medical Supplies has one three-floor building with one leased cable broadband connection entering the building. • The broadband connection connects the Franklin Medical Supplies local area network (LAN) to the metropolitan area network (MAN) hosted by their internet service provider. • The broadband connection is connected to a centrally located 24-port 10-BaseT hub that networks four 24-port 10-BaseT bridges on each floor of the building. IMPLEMENTING NETWORK SECURITY | SCCS SECURITY INC.

  4. Scenario | Franklin Medical Supplies Needs CURRENT OPERATING ENVIRONMENT (Continued) • The current 10-BaseT hub is using outdated software with no firewall protection. • Of the 120 networked nodes, there are 85 workstations running Windows XP—each with outdated virus protection, security software patches, an no firewall protection. • The protocols used are a mesh of IPX/SPX (printers) and TCP/IP (servers, workstations, laptops). • During normal business operating hours, system uptime is considered critical and any amount of considerable downtime can cause severe revenue loss for Franklin Medical Supplies. IMPLEMENTING NETWORK SECURITY | SCCS SECURITY INC.

  5. Scenario | SCCS Security Inc. Solutions SOLUTION RECOMMENDATION SCCS Security Inc. to provide a complete network security solution for Franklin Medical Supplies. DELIVERABLES • A detailed threat analysis will be performed on the Franklin Medical Supplies Network. • A Cisco Catalyst Express 500 10/100/1000Base-t switch will replace the centrally located 24-port hub. • Each floor’s bridge will also be replaced with a Cisco Catalyst Express 500 switch. IMPLEMENTING NETWORK SECURITY | SCCS SECURITY INC.

  6. Scenario | SCCS Security Inc. Solutions DELIVERABLES (Continued) • All unused ports on the switch will be disabled through the switches management interface, protecting from unauthorized device plug-ins. • The main internet connection will have a Cisco Catalyst 6500 firewall that can control and block unnecessary traffic. • A corporate version of Symantec Antivirus will be used that will allow symmetrical deployment of antivirus updates that will protect all computers from the latest virus threats, and periodically update with zero administration. • Microsoft’s Windows Server Update Service (WSUS) will be configured, allowing control over deployment of Windows security updates. IMPLEMENTING NETWORK SECURITY | SCCS SECURITY INC.

  7. Scenario | SCCS Security Inc. Solutions DELIVERABLES (Continued) • TCP/IP protocol will be the only network protocol used on the network, eliminating any open communicating devices. • Active Directory accounts will be set to allow scheduled work time access only. Any access needs that fall out of the normal business day needs approval from the CIO. • End user training material will be disseminated to all employees, empowering the users to make wise use of information resources. • Training will occur for all Franklin Medical Supplies personnel impacted by the project. • A security handbook will be developed and will encompass all aspects of network security. IMPLEMENTING NETWORK SECURITY | SCCS SECURITY INC.

  8. Scenario | SCCS Security Inc. Solutions DELIVERABLES (Continued) IMPLEMENTING NETWORK SECURITY | SCCS SECURITY INC.

  9. Scenario | Solution Explanation A NOVEL APPROACH Our solution approaches the problem of network security as a process, not a goal. THE PROCESS • After hardware and software are installed, management begins. • Management of policies and procedures. • Overall system management and maintenance. • Ensure the process is constantly evolving with the trends in information technology. IMPLEMENTING NETWORK SECURITY | SCCS SECURITY INC.

  10. Scenario | Solution Explanation MANAGEMENT OF POLICIES & PROCEDURES • Instituting an effective policy and procedure management scheme should not only encompass network security; but, software, hardware, data, people, and the actual policies and procedures themselves (Whitman & Mattord, 2005). • It is impossible to obtain a perfect information security scheme, the process of implementing policies and procedures of how to act and react to malicious attempts is crucial.. • Training on the policies and procedures must begin at the user level and move up to the executive levels. • Policies and procedures must be reviewed and adapted to meet the organizational goals while maintaining security. IMPLEMENTING NETWORK SECURITY | SCCS SECURITY INC.

  11. Scenario | Solution Explanation MANAGEMENT OF NETWORK SECURITY • The ISO Network Management Model can be adjusted to fit the needs of network security and includes five areas of focus (Whitman & Mattord, 2005): • Fault management • Configuration and change management • Accounting and auditing management • Performance management • Security program management • Fault management in an information security management model involves identifying faults in the applied information security profile and then addressing them through remediation (Whitman & Mattord, 2005). IMPLEMENTING NETWORK SECURITY | SCCS SECURITY INC.

  12. Scenario | Solution Explanation MANAGEMENT OF NETWORK SECURITY (Continued) • Configuration and change management in regards to network security entails the continued administration of system and policy configuration and the changes involved with strategy, operation, or components of the network security program (Whitman & Mattord, 2005). • Accounting and auditing within the network security model involves the management of monitoring internal and external system usage and reviewing (auditing) the usage reports to identify any potential malicious attempts or network misuse (Whitman & Mattord, 2005). • Performance management requires information technology personnel to continually monitor the performance of all network security hardware and software and ensure that everything is working effectively. IMPLEMENTING NETWORK SECURITY | SCCS SECURITY INC.

  13. Scenario | Solution Explanation MANAGEMENT OF NETWORK SECURITY (Continued) • Security program management is closely related to the management of policies and procedures. Once the network security infrastructure has been implemented, the devised policies and procedures should be designed to assist security program management (Whitman & Mattord, 2005): “Plan-Do-Check-Act” Process • Plan: Planning of the risks and vulnerabilities. • Do: Application of internal controls to manage the risks. • Check: Periodic and frequent review of all policies and procedures. • Act: Incident response and escalation. IMPLEMENTING NETWORK SECURITY | SCCS SECURITY INC.

  14. Scenario | Solution Explanation MAINTENANCE OF NETWORK SECURITY • An effective maintenance model includes external monitoring, internal monitoring, planning and risk assessment, vulnerability assessment and remediation, and readiness review (Whitman & Mattord, 2005). • The implementation of each of these domains will ensure that the network security model is effectively maintained. IMPLEMENTING NETWORK SECURITY | SCCS SECURITY INC.

  15. Class Project | Major Challenge COMMUNICATION • One major challenge we encountered during this project was communication amongst our team. At times, it was difficult to get everyone on the same page or to meet at the same times. This proved to be difficult in the beginning and left many members wondering what the other was doing. LESSON LEARNED • We learned that collaborative communication—whether through e-mail or Franklin Live—proved to be the major lesson learned during this project. Understanding from each of the team members that not everyone had the same schedules or could participate in the chosen capacity was crucial for the success of this project IMPLEMENTING NETWORK SECURITY | SCCS SECURITY INC.

  16. Class Project | Working Prototype SECURITY HANDBOOK • The major limit to our project, in regards to a working prototype, is the scope of our project—installing a scenario-based network for a scenario-based company. • Although we did not install actual equipment, we devised a project timeline and worked as though we were meeting actual deadlines. • Because we did not have anything tangible to use for the project deliverable (like a website, code, or database), we developed a network security handbook that encompasses theproject as a whole from a management perspective for our scenario-based client. IMPLEMENTING NETWORK SECURITY | SCCS SECURITY INC.

  17. Class Project | Q & A QUESTIONS & ANSWERS SESSION IMPLEMENTING NETWORK SECURITY | SCCS SECURITY INC.

  18. Class Project | Presentation References Whitman, M. E., & Mattord, H. J. (2005). Principles of Information Security (2nd Edition ed.). Boston: Thomson Course Technology. IMPLEMENTING NETWORK SECURITY | SCCS SECURITY INC.

  19. Implementing Network Security SCCS SECURITY INC. Prepared for FRANKLIN MEDICAL SUPPLIES ITEC495 – TEAM D | SCOTT BOYD| CHRISTOPHER CARUSO| CHAZ MINTON| SHAWN NUNNALLY

More Related