More Related Content
Similar to Building a Hacker Resistant Network
![CODE BLUE 2014 : Physical [In]Security: It’s not ALL about Cyber by Inbar Raz](https://cdn.slidesharecdn.com/ss_thumbnails/cb14inbarrazen-150622045458-lva1-app6892-thumbnail.jpg?width=640&height=640&fit=bounds)
Building a Hacker Resistant Network
- 1. SENTRYGT.COM BUILDING A HACKER-RESISTANT NETWORK Protecting YourConfidential Information and Your Business
- 2. SENTRYGT.COM Agenda • A real-worldcase study • The impact • Protecting yourself, your people and your livelihood
- 3.
- 4. SENTRYGT.COM Hackers Got… Sony’s entirenetwork: • ALL users’ email accounts • ALL data files: Salaries, SSNs • ALL promotional materials • ALL contracts and agreements on their network • ALL schedules and project plans
- 5.
- 6. SENTRYGT.COM What damage hasbeen done so far? Release Cancelled Private communication now public Confidential Information now public Executive humiliation
- 7. SENTRYGT.COM What did itcost? $40 million to produce $35 million to promote $$$$$ million for PR $$$$$ million for Network Security At least $100 million
- 8.
- 9. SENTRYGT.COM Is your technologyplatform: •Monitored? •Protected? •Secure? •Redundant? •Backed up locally and remotely?
- 10. SENTRYGT.COM Threats Viruses SPAM Worms KeyloggersTrojan Horses DDoS attacks SPAM bots Man-in-the Middle attacks Port Scans Packet Sniffers Password Crackers And MORE!
- 11. SENTRYGT.COM Solutions The Foundation: • Location(s) •Connectivity • Equipment • Operating system(s) • Applications • Security policies • Safeguards
- 12. SENTRYGT.COM Location(s) • On-premises • Localdata center • Remote data center • Cloud computing provider • Hybrid environment
- 13. SENTRYGT.COM Connectivity • T1 • Business-class cable/fiber •DS3, OC3 • GigE, MetroE • AirBand, AboveNet
- 14. SENTRYGT.COM Equipment • Server(s) • Router(s) •Switches • Firewall/VPN appliances • IDS/IPS devices
- 15. SENTRYGT.COM Operating System(s) • WindowsServer • Standard or Essentials • Enterprise • System Center, Data Center • Linux • Mac (OSX, OS 11) • Unix/AIX
- 16. SENTRYGT.COM Applications • CRM, ERP,MRP, OE • Accounting • Office suites (Word, WordPerfect) • AV-AS-AM software • Back-up software • Network management software
- 17. SENTRYGT.COM Security Policies • Administratoraccess • User access settings • Event and Error Log reviews • Password policy • Acceptable-use policy • WSUS and automatic updates • 24x7x365 monitoring • Penetration testing, vulnerability analyses
- 18. SENTRYGT.COM Esssential Safeguards • Regular randomtest file restores • Staged attacks and drills • Quarterly Technology Reviews • Ongoing new-threat analyses • Regular user training sessions
- 19. SENTRYGT.COM Network Access • Doyou have the administrator password to your own network? • When was the last time you tested it? • When was the last time you changed it? • Who else has it? • Is it stored in a secure location?
- 20. SENTRYGT.COM The cost ofhaving a hacker-resistant network will be far less than the cost of not having one.
- 21.
- 22.
- 23. SENTRYGT.COM Thank you foryour time! Brad Wohlander, CEO SENTRY GLOBAL TECHNOLOGIES, LLC 5700 Granite Parkway Suite 200 Plano, Texas 75024 972.491.0300 bww@sentrygt.com
Editor's Notes
- #4 In December 2014 a breach of Sony’s technology infrastructure made world-wide headlines. What happened?
- #6 The hackers succeeded by capturing or using the administrator password or user name of a network administrator who had access to everything on the internal Sony network.
- #7 Release of a major film has been all but cancelled Private and embarrassing intercompany communications have been made public Confidential company information has become public Executives’ personal comments and anecdotes have been taken out of context and created consternation and humiliation
- #8 “The Interview” movie cost over $40 million to produce SONY spent another $35 million or so on promotion and materials for the film The public-relations and additional network security expenditures haven’t even been calculated yet, but are estimated to be at least $100 million
- #11 Viruses Spam Worms Keyloggers Trojan horses DDoS attacks Spam bots Man-in-the-middle attacks Port scans Packet sniffers Password crackers . . . and more!
- #12 You don’t build a house and start with the roof. You start with the foundation. These items are the foundation. I’ll address each one.