Bảo mật hệ thống mạng part 11 potx
Bảo mật hệ thống mạng part 11 potx
... this part of the procedure is to identify the organiza
-
tion’s objectives before an incident occurs.
Event Identification
The identification of an incident is perhaps the most difficult part ... situation.
Authority
An important part of the IRP is defining who within the organization and the incident re
-
sponse team has the authority to take action. This part of the procedure should...
Bảo mật hệ thống mạng part 1 potx
... well as assur
-
ance requirements. Thus, in order for a system to meet the qualifications for a particular
level of certification it had to meet the functional and the assurance requirements.
The ... classification, access would be denied.
This concept of modeling eventually lead to United States Department of Defense
Standard 5200.28, The Trusted Computing System Evaluation Criteria (TCSEC,...
Bảo mật hệ thống mạng part 15 potx
... useful. However, we may not necessarily have
knowledge of a directed or specific threat against some part of the organization.
If we assume a generic threat (somebody probably has the access, knowledge, ... or replace systems
■
Cost of experts to assist
▲
Employee overtime
As you can see from just this partial list, the costs of a successful penetration can be
large. Some of these costs wil...
Bảo mật hệ thống mạng part 22 potx
... create interactive
sessions on remote systems
POP-3 (port 110 ) and IMAP (port 143) Allows employees to access remote
mail accounts
NNTP (port 119 ) Allows employees to access remote
network news servers
NOTE:
Even ... server itself.
The organization may choose to provide a File Transfer Protocol (FTP) server as part
of the Web server. An FTP server allows external individuals to get or s...
Bảo mật hệ thống mạng part 26 potx
... Service Action
1 Partner
network
Partner DMZ Appropriate for
partnership
Accept
2 Partner
network
Any Any Deny
3 Partner DMZ Partner network Appropriate for
partnership
Accept
4 Any Partner network ... to the partner DMZ and one to the partner network.
Additional rules must be added to the firewall to allow systems at the partner organi
-
zation as well as internal systems to access the partn...
Bảo mật hệ thống mạng part 27 potx
... must be loaded on
user computers. If the computers are owned by the organization, this becomes part of the
standard software load for the computer. If the organization allows employees to use
Bảo mật hệ thống mạng part 29 potx
... past but that may now be performed cheaper. A
182
Network Security: A Beginner’s Guide
CHAPTER
11
E-Commerce
Security Needs
181
Copyright 2001 The McGraw-Hill Companies, Inc. Click Here for Terms ... be
taken into account when e-commerce is discussed. That is availability. No longer is the
Chapter 11: E-Commerce Security Needs
183
184
Network Security: A Beginner’s Guide
Web site just for...
Bảo mật hệ thống mạng part 30 potx
... Chapter 11: E-Commerce Security Needs
189
CLIENT-SIDE SECURITY
Client-side security deals with the security from the customer’s desktop system to the
e-commerce server. This part of the system ... customer’s computer and
browser software and the communications link to the server (see Figure 11- 1).
Within this part of the system, we have several issues:
▼
The protection of information i...
Bảo mật hệ thống mạng part 50 potx
... analysis continues for some period of time after the information gathering is com
-
plete. During this part of the task, the team will attempt to assimilate all of the informa
-
346
Network Security: ... gathered and to rank the risks to the organization. Measuring the risk is
often the most difficult part of this task as the cost of a successful exploitation of a vulner
-
ability may be...
Bảo mật hệ thống mạng part 2 ppsx
... individuals.
Vulnerability Scanning
Scanning computer systems for vulnerabilities is an important part of a good security
program. Such scanning will help an organization to identify potential entry ... cannot be the all-encompassing solution.
Anti-Virus Software
Anti-virus software is a necessary part of a good security program. If properly imple
-
mented and configured, it can reduce an...