Chap 10

Chapter Ten

NETWORK SECURITY

This chapter describes why networks need security and how to provide it. The first step in any security plan is risk assessment, understanding the key assets that need protection and assessing the risks to each. There are a variety of steps that can be taken to prevent, detect, and correct security problems due to disruptions, destruction, and disaster, and due to unauthorized access.

Objectives

• Be familiar the major threats to network security,

• Be familiar with how to conduct a risk assessment,

• Understand how to prevent, detect, and correct disruptions, destruction, and disaster,

• Understand how to prevent, detect, and correct unauthorized access.

Chapter Outline

INTRODUCTION

Why Networks Need Security

Types of Security Threats

Network Controls

RISK ASSESSMENT

Develop a Control Spreadsheet

Identify and Document the Controls

Evaluate the Network's Security

CONTROLLING DISRUPTION, DESTRUCTION, AND DISASTER

Preventing Disruption, Destruction, and Disaster

Detecting Disruption, Destruction, and Disaster

Correcting Disruption, Destruction, and Disaster

CONTROLLING UNAUTHORIZED ACCESS

Preventing Unauthorized Access

Detecting Unauthorized Access

Correcting Unauthorized Access

SUMMARY

INTRODUCTION

Both business and government were concerned with security long before the need for computer-related security was recognized. They always have been interested in the physical protection of assets through means such as locks, barriers, and guards, but the introduction of computer processing, large databases, and the Internet has increased the need for security . Approximately 90% of the respondents to the 2000 Computer Security Institute/FBI Computer Crime and Security Survey reported that they had detected security breaches in the last 12 months. Almost 75% reported they suffered a measurable financial loss due to the security problem, with the average loss being just under $1...