- 1、本文档共87页,可阅读全部内容。
- 2、原创力文档(book118)网站文档一经付费(服务费),不意味着购买了该文档的版权,仅供个人/单位学习、研究之用,不得用于商业用途,未经授权,严禁复制、发行、汇编、翻译或者网络传播等,侵权必究。
- 3、本站所有内容均由合作方或网友上传,本站不对文档的完整性、权威性及其观点立场正确性做任何保证或承诺!文档内容仅供研究参考,付费前请自行鉴别。如您付费,意味着您自己接受本站规则且自行承担风险,本站不退款、不进行额外附加服务;查看《如何避免下载的几个坑》。如果您已付费下载过本站文档,您可以点击 这里二次下载。
- 4、如文档侵犯商业秘密、侵犯著作权、侵犯人身权等,请点击“版权申诉”(推荐),也可以打举报电话:400-050-0827(电话支持时间:9:00-18:30)。
查看更多
Deploying Secure Networks Session 2502 What You Can Expect to Learn “Network security is a system” Detailed network attack methodology Threat mitigation options Network security design components Specific optimizations to existing infrastructure Deploying Secure Networks Security Threat Components Security Design—an Example Design Under Fire Threat Mitigation Design Optimizations Security Design—a Better Example Design Under Fire (2) Distributed Denial of Service (DDoS) Smurf Attack DDoS, How Does It Work? Stacheldraht Attack Stacheldraht Attack Stacheldraht Transport Details Root Kits Application Layer Attacks Port Redirection Attack Deploying Secure Networks Security Threat Components Security Design—an Example Design Under Fire Threat Mitigation Design Optimizations Security Design—a Better Example Design Under Fire (2) How Is Enterprise Security Deployed Today? Access Router ACL (no State Inbound s0) Firewall Rules Design Considerations Dual “firewall” configuration Inbound traffic limited to relevant services on DMZ SSH allowed for encrypted remote administration Open internal network Full outbound access allowed (no traditional FTP) Deploying Secure Networks Security Threat Components Security Design—an Example Design Under Fire Threat Mitigation Design Optimizations Security Design—a Better Example Design Under Fire (2) Bring on the Hackers! Network Recon “Own” a System Exploit Trust Get the Goods! “Own” the Network “Own” the Network Past the firewall No more security More recon Vulnerability exploits Hacker has a new playground! Crunchy on the Outside…Soft in the Middle Distributed Denial of Service Attack Phase 1: Setup Distribution Network Phase 2: Pick a Target and Attack Setup a Distribution Net Attack! Client coordinates attack Victim bandwidth is quickly eliminated Attack Review Network compromise was completely successful Firewall acted as configured Vulnerabilities started at the host level via an out of date system Network DDoS was completely
您可能关注的文档
- 新思境设计之3D的研究概论.ppt
- 常熟地区水稻土饱和导水率间接方法的研究.doc
- 普查二期工作技术的设计2.ppt
- 进一步加强火电工程汽轮机质量的管理要求.ppt
- 第五篇 X射线衍射分析应用.ppt
- 安全评价和风险分析(定量风险评价版)产品白皮书.pdf
- 每日一题在线考试系统教材.doc
- 第三讲 细胞生物膜系统(完整).ppt
- 用有结构科学究活动帮助学生建构科学概念总论.ppt
- 干式排渣机(克莱德贝尔格曼干渣输送系统)课程.ppt
- 第六单元名著导读《钢铁是怎样炼成的》导学导练课件-2023-2024学年统编版语文八年级下册.pptx
- 第十二单元核心素养测评课件-2023-2024学年九年级化学人教版下册.pptx
- 电流与电压和电阻的关系说课(1) --2023-2024学年人教版 九年级物理上学期.pptx
- 第4单元 世界音乐之窗——拉丁美洲音乐 《玛丽安》 课件 2023—2024学年粤教版初中音乐八年级下册 -.pptx
- 第12课 智能预测出行方式 课件 -2023-—2024学年浙教版(2023)初中信息技术九年级全册 .pptx
- 鲁教版初中信息科技《计数循环我在行 》课件.pptx
- 复习-Python初中信息技术.pptx
- 山西省大同市2023-2024学年八年级下学期期中语文试题(含解析).pdf
- 2024届四川省成都市实验外国语学校高三下学期三模物理试题(含答案).pdf
- 2024年广东省广州市第六中学中考一模语文试题(解析版).pdf
文档评论(0)