NETWORK SECURITY

By STEVEN JACKSON

CONTENTS PART MANAGING SECURITY SUMMARY KEY POINTS CONNECTING THE CHAPTERS INTRODUCTION TO MANAGING SECURITY SECURITY AND BUSINESS PROCESSES THE HARSH TRUTH THE SECURITY PHILOSOPHY THE SECURITY POLICY FINAL THOUGHTS 1 MANAGING SECURITY: THE SECURITY ASSESSMENT TECHNOLOGY OVERVIEW HOW THE SECURITY ASSESSMENT WORKS BEST PRACTICES 2 MANAGING SECURITY: SYSTEMS AND NETWORK MONITORING HOW SYSTEMS AND NETWORK MONITORING WORK SECURITY CONSIDERATIONS MAKING THE CONNECTION PART OUTSOURCING OPTIONS INTRODUCTION TO RESERVING RIGHTS THE ILLUSION OF OUTSOURCING OUTSOURCING AND DATA SECURITY OUTSOURCING BUSINESS TECHNOLOGY OUTSOURCING BUSINESS SERVICES OUTSOURCING SECURITY SERVICES 3 OUTSOURCING OPTIONS: OUTSOURCING NETWORK MONITORING OVERVIEW HOW OUTSOURCED MONITORING WORKS 4 OUTSOURCING OPTIONS: OUTSOURCING DISASTER PREVENTION PREVENTING MACHINE FAILURE PREVENTING NETWORK FAILURE PREVENTING DATA LOSS PREVENTING SOFTWARE FAILURE PREVENTING PEOPLE FAILURE PREVENTING REPEAT DISASTERS 5 OUTSOURCING OPTIONS: OUTSOURCING PROACTIVE SECURITY POLICY AUDITING DEFENSIVE FORENSICS PROTECTION VULNERABILITIES PENETRATION TESTING RESERVING RIGHTS PROTECTING YOUR DIGITAL RIGHTS THE OTHER SIDE OF THE COIN PUTTING IT ALL TOGETHER WHY TODAY’S INTELLECTUAL PROPERTY LAWS ARE CONFUSING 6 RESERVING RIGHTS: DIGITAL RIGHTS MANAGEMENT HOW DIGITAL RIGHTS MANAGEMENT WORKS 7 RESERVING RIGHTS: COPY PROTECTION HOW COPY PROTECTION WORKS DETERMINING IDENTITY INTRODUCTION TO DETERMINING IDENTITY YOUR DIGITAL IDENTITY IN GENERAL DIGITAL IDENTITY: THE SECURE WAY HOW MANY FACTORS? 8 DETERMINING IDENTITY: PASSWORDS HOW PASSWORDS WORK 9 DETERMINING IDENTITY: DIGITAL CERTIFICATES HOW DIGITAL CERTIFICATES WORK 10 DETERMINING IDENTITY: PORTABLE IDENTIFIERS HOW PORTABLE IDENTIFIERS WORK 11 DETERMINING IDENTITY: BIOMETRICS HOW BIOMETRICS WORK PRESERVING PRIVACY INTRODUCTION TO PRESERVING PRIVACY WHAT IS PRIVACY? HOW TO ACHIEVE PRIVACY PROTECTING DIGITAL PRIVACY PROTECTING THE DIGITAL PRIVACY OF OTHERS 12 PRESERVING PRIVACY: ANONYMITY HOW A MIX WORKS 13 PRESERVING PRIVACY: USER TRACKING HOW COOKIES AND SPYWARE WORK 14 PRESERVING PRIVACY: SPAM MANAGEMENT HOW SPAM MANAGEMENT WORKS CONNECTING NETWORKS INTRODUCTION TO CONNECTING NETWORKS ONE COMPUTER, TWO COMPUTER, RED COMPUTER SPECIALIZED NETWORKS NEED SPECIALIZED HARDWARE NETWORKS: POWER AND PERIL CONNECTING CORRECTLY 15 CONNECTING NETWORKS: NETWORKING HARDWARE HOW ROUTERS WORK 16 CONNECTING NETWORKS: WIRELESS CONNECTIONS HOW RADIO WORKS HOW SPREAD SPECTRUM WORKS 17 CONNECTING NETWORKS: NETWORK LINGO HARDENING NETWORKS INTRODUCTION TO HARDENING NETWORKS IDEAL VERSUS REALITY: THE NEED FOR HARDENING THERE’S NO POINT IN CLOSING THE BARN DOOR AFTER THE HORSE HAS LEFT OUT WITH THE BAD, IN WITH THE GOOD MORE HARM THAN GOOD? 18 HARDENING NETWORKS: FIREWALLS HOW PACKET FILTERS WORK 19 HARDENING NETWORKS: NETWORK ADDRESS TRANSLATION HOW NAT WORKS 20 HARDENING NETWORKS: VIRTUAL PRIVATE NETWORKS HOW VPNS WORK IPSEC PROTOCOLS 21 HARDENING NETWORKS: TRAFFIC SHAPING HOW TRAFFIC SHAPING WORKS STORING INFORMATION INTRODUCTION TO STORING INFORMATION DON’T LEAVE ME UNPROTECTED STORAGE CAVEATS STORING SECURELY 22 STORING INFORMATION: STORAGE MEDIA HOW STORAGE MEDIA WORKS 23 STORING INFORMATION: LOCAL FILE SYSTEMS HOW FILE SYSTEMS WORK 24 STORING INFORMATION: NETWORK FILE SYSTEMS HOW NFS AND SMB WORK 25 STORING INFORMATION: DATABASES HOW DATABASES WORK HIDING INFORMATION INTRODUCTION TO HIDING INFORMATION HOW THINGS CAN BE HIDDEN HOW HIDDEN THINGS ARE FOUND 26 HIDING INFORMATION: CRYPTOGRAPHY ASYMMETRICAL (PUBLIC KEY) CRYPTOGRAPHY HOW CRYPTOGRAPHY WORKS 27 HIDING INFORMATION: CRYPTANALYSIS HOW CRYPTANALYSIS WORKS 28 HIDING INFORMATION: STEGANOGRAPHY HOW STEGANOGRAPHY WORKS ACCESSING INFORMATION INTRODUCTION TO ACCESSING INFORMATION THE BURDEN OF CHOICE TEXTUAL VS VISUAL ACCESS: UNIX AND WINDOWS ACCESS BOLD AS LOVE 29 ACCESSING INFORMATION: CLIENT-SERVER ARCHITECTURE HOW CLIENT/SERVER APPLICATIONS WORK 30 ACCESSING INFORMATION: INTERNET SERVICES THE WEB EMAIL FTP AND TFTP NEWS 31 ACCESSING INFORMATION: REMOTE ACCESS HOW REMOTE ACCESS PROTOCOLS WORK 32 ACCESSING INFORMATION: PEER-TO-PEER NETWORKING HOW P2P WORKS ENSURING AVAILABILITY INTRODUCTION TO ENSURING AVAILABILITY PUTTING OFF THE INEVITABLE THE ANATOMY OF REDUNDANCY SIZE MATTERS 33 ENSURING AVAILABILITY: RAID HOW RAID WORKS 34 ENSURING AVAILABILITY: CLUSTERING HOW CLUSTERING WORKS 35 ENSURING AVAILABILITY: BACKUP SYSTEMS HOW BACKUP WORKS DETECTING INTRUSIONS INTRODUCTION TO DETECTING INTRUSIONS INTRUSION DETECTION IS AN ART AND A SCIENCE WHAT’S A HACKER? NEEDLESS COMPLEXITY THE VICIOUS CYCLE 36 DETECTING INTRUSIONS: FILE INTEGRITY HOW FILE INTEGRITY WORKS 37 DETECTING INTRUSIONS: VIRUSES AND TROJANS HOW ANTIVIRUS SOFTWARE WORKS 38 DETECTING INTRUSIONS: NETWORK SCANNERS HOW NETWORK SCANNERS WORK 39 DETECTING INTRUSIONS: NETWORK SNIFFERS HOW SNIFFERS WORK 40 DETECTING INTRUSIONS: LOGGING AND ANALYSIS HOW LOGS WORK