www.more.net | University of Missouri
•Download as PPS, PDF•
0 likes•234 views
MOREnet provides several free and cheap security services to K-12 schools, higher education institutions, and state government in Missouri. These include incident response, blackhole DNS, network monitoring tools, single machine nmap scans, and monthly webinars. MOREnet also offers some paid security services at low cost such as email virus and spam filtering, remote vulnerability assessments, and security symposiums. The organization aims to expand its security offerings and outreach through initiatives like a SANS mentoring program and workshops.
Report
Share
Report
Share
![Statenet Security on the cheap and easy Beth Young MOREnet Security [email_address]](https://image.slidesharecdn.com/wwwmorenet-university-of-missouri1440/85/www-more-net-University-of-Missouri-1-320.jpg)
![Objectives ,[object Object],[object Object],[object Object],[object Object]](data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7)
Recommended
Security Implications of the Cloud
The document discusses security implications of cloud computing and web application attacks. It notes that web application attacks are now the leading cause of data breaches, but less than 5% of security budgets are spent on application security. There is a wide range of attacks targeting different layers of the application stack. Defending applications and workloads in the cloud is complex due to rapidly changing code, vulnerabilities in third-party tools, and a shortage of cloud security expertise. Perimeter security tools are insufficient for protecting the diverse cloud attack surface. The document also provides an example of a textile company that suffered a data exfiltration attack through vulnerabilities in their PHP login system, costing them $1.8 million.
The Intersection of Security & DevOps
1. As developers have become the driving force behind cloud adoption, there is a need to realign security practices with DevOps workflows and priorities.
2. A blueprint approach to cloud security involves enumerating cloud assets, threat modeling for common workloads, and integrating controls across the full technology stack.
3. With a blueprint model and automated security tools integrated into the development pipeline, security can provide coverage throughout the software development lifecycle without slowing innovation or agility.
Reducing Your Attack Surface
The document discusses reducing attack surfaces in cloud environments. It notes that understanding your attack surface is critical for deploying proper security controls as attack surfaces differ between cloud and on-premises environments. It also states that web application attacks are now the leading cause of data breaches but less than 5% of security budgets are spent on application security. Common cloud misconfigurations are also discussed as a major risk factor.
Reality Check: Security in the Cloud
This document discusses security in the cloud and recommends best practices. It notes that while AWS provides many security tools, customers are still responsible for 95% of security failures due to human error. It then outlines various attack types like SQL injection and remote code execution that target web applications. The document recommends leveraging machine learning and multiple detection techniques to identify multi-stage attacks. It emphasizes the need to secure the entire attack surface, including on-premises environments, and highlights services like Alert Logic that provide 24/7 monitoring, analytics, and security experts to help detect and respond to threats.
Incident Response: Validation, Containment & Forensics
Kill Chain Model for Use Cases Assist in Incident Response
1- Situational Awareness
Outbound Protocols
Outbound protocols by size
Top destination Countries
Top destination Countries by size
2- Reconnaissance
Port scan activity
ICMP query
3- Weaponization and Delivery
Injection
Cross Site Scripting
Cross Site Request Forgery
Failure to Restrict URL
Downloaded binaries
Top email subjects
Domains mismatching
Malicious or anomalous Office/Java/Adobe files
Suspicious Web pages (iframe + [pdf|html|js])
Security Implications of the Cloud - CSS Dallas Azure
The document summarizes the security implications of cloud computing. It notes that web application attacks are now the number one source of data breaches, but less than 5% of security budgets are spent on application security. It discusses how risks are moving up the application stack as vulnerabilities can be introduced through code changes and dependencies. Defending web applications and workloads in the cloud is complex due to a wide range of attacks at every layer of the stack and a shortage of security expertise. It then provides an example of a data exfiltration attack against a retail company where an attacker exploited known PHP flaws to access critical systems and steal data over 4 months without detection.
Wfh security risks - Ed Adams, President, Security Innovation
This document discusses strategies for improving security awareness and practices among employees and organizations. It addresses issues like uninformed employees falling for phishing scams, securing home networks and devices, and ensuring new applications developed during business pivots are secure. The key recommendations are to educate employees and software teams, implement defense in depth with tools like two-factor authentication and encryption, and address security throughout the software development lifecycle when creating new applications and integrating third-party software.
Pentesting Your Own Wireless Networks, June 2011 Issue
This document discusses wireless network security. It begins with an introduction to IEEE 802.11 wireless LAN standards and the different wireless architectures used in home, small office/home office, and enterprise networks. It then covers wireless encryption and authentication methods like WEP, WPA, WPA2, and WPA2 Enterprise. The document also describes vulnerabilities in wireless networks and methods for penetration testing networks, including reconnaissance, exploiting authentication protocols, attacking guest networks, and specific attacks against WEP encryption. It provides examples of capturing packets to crack WEP keys and discusses rogue access points and tools to create them like Airsnarf.
Recommended
Security Implications of the Cloud
The document discusses security implications of cloud computing and web application attacks. It notes that web application attacks are now the leading cause of data breaches, but less than 5% of security budgets are spent on application security. There is a wide range of attacks targeting different layers of the application stack. Defending applications and workloads in the cloud is complex due to rapidly changing code, vulnerabilities in third-party tools, and a shortage of cloud security expertise. Perimeter security tools are insufficient for protecting the diverse cloud attack surface. The document also provides an example of a textile company that suffered a data exfiltration attack through vulnerabilities in their PHP login system, costing them $1.8 million.
The Intersection of Security & DevOps
1. As developers have become the driving force behind cloud adoption, there is a need to realign security practices with DevOps workflows and priorities.
2. A blueprint approach to cloud security involves enumerating cloud assets, threat modeling for common workloads, and integrating controls across the full technology stack.
3. With a blueprint model and automated security tools integrated into the development pipeline, security can provide coverage throughout the software development lifecycle without slowing innovation or agility.
Reducing Your Attack Surface
The document discusses reducing attack surfaces in cloud environments. It notes that understanding your attack surface is critical for deploying proper security controls as attack surfaces differ between cloud and on-premises environments. It also states that web application attacks are now the leading cause of data breaches but less than 5% of security budgets are spent on application security. Common cloud misconfigurations are also discussed as a major risk factor.
Reality Check: Security in the Cloud
This document discusses security in the cloud and recommends best practices. It notes that while AWS provides many security tools, customers are still responsible for 95% of security failures due to human error. It then outlines various attack types like SQL injection and remote code execution that target web applications. The document recommends leveraging machine learning and multiple detection techniques to identify multi-stage attacks. It emphasizes the need to secure the entire attack surface, including on-premises environments, and highlights services like Alert Logic that provide 24/7 monitoring, analytics, and security experts to help detect and respond to threats.
Incident Response: Validation, Containment & Forensics
Kill Chain Model for Use Cases Assist in Incident Response
1- Situational Awareness
Outbound Protocols
Outbound protocols by size
Top destination Countries
Top destination Countries by size
2- Reconnaissance
Port scan activity
ICMP query
3- Weaponization and Delivery
Injection
Cross Site Scripting
Cross Site Request Forgery
Failure to Restrict URL
Downloaded binaries
Top email subjects
Domains mismatching
Malicious or anomalous Office/Java/Adobe files
Suspicious Web pages (iframe + [pdf|html|js])
Security Implications of the Cloud - CSS Dallas Azure
The document summarizes the security implications of cloud computing. It notes that web application attacks are now the number one source of data breaches, but less than 5% of security budgets are spent on application security. It discusses how risks are moving up the application stack as vulnerabilities can be introduced through code changes and dependencies. Defending web applications and workloads in the cloud is complex due to a wide range of attacks at every layer of the stack and a shortage of security expertise. It then provides an example of a data exfiltration attack against a retail company where an attacker exploited known PHP flaws to access critical systems and steal data over 4 months without detection.
Wfh security risks - Ed Adams, President, Security Innovation
This document discusses strategies for improving security awareness and practices among employees and organizations. It addresses issues like uninformed employees falling for phishing scams, securing home networks and devices, and ensuring new applications developed during business pivots are secure. The key recommendations are to educate employees and software teams, implement defense in depth with tools like two-factor authentication and encryption, and address security throughout the software development lifecycle when creating new applications and integrating third-party software.
Pentesting Your Own Wireless Networks, June 2011 Issue
This document discusses wireless network security. It begins with an introduction to IEEE 802.11 wireless LAN standards and the different wireless architectures used in home, small office/home office, and enterprise networks. It then covers wireless encryption and authentication methods like WEP, WPA, WPA2, and WPA2 Enterprise. The document also describes vulnerabilities in wireless networks and methods for penetration testing networks, including reconnaissance, exploiting authentication protocols, attacking guest networks, and specific attacks against WEP encryption. It provides examples of capturing packets to crack WEP keys and discusses rogue access points and tools to create them like Airsnarf.
Infrastructure as (Secure) Code
Software-defined networking is the latest technology in a move to abstract a variety of data center resources. As more and more of the data center is defined in code, some unique security challenges come to the fore.
In this session, we'll explore both sides of the security challenge. What types of controls and implementations are required to define security as part of your infrastructure code? What challenges does maintaining an infrastructure codebase present?
You'll learn not only how to integrate security into your infrastructure code but also how to properly and securely manage that codebase.
TALK Cybersecurity Summit 2017 Slides: Chris Goggans on Vulnerability Assessment
"Case Studies in Network Vulnerability Assessments" was presented by Chris Goggans, PatchAdvisor at the TALK Cybersecurity Summit 2017.
Network Security - Real and Present Dangers
Peter Wood is the CEO of First Base Technologies, an ethical hacking firm. He gave a presentation on the results of penetration tests his company conducted on various organizations in the past year. The most common vulnerabilities found included weak passwords, unpatched systems, misconfigured firewalls and services exposing sensitive information. He emphasized that many of these issues have persisted for years and can be easily exploited to gain full access to systems and data. He provided recommendations for organizations to improve security such as enforcing stronger passwords, regular patching, limiting access to sensitive systems and data, and monitoring networks.
Security Implications of the Cloud
This document discusses the security implications of cloud computing and summarizes a presentation by Ben Masino of Alert Logic. It notes that web application attacks are now the number one source of data breaches, but less than 5% of security budgets are spent on application security. It also outlines some of the challenges in defending applications and workloads in the cloud, including a wide range of attacks at every layer of the stack and vulnerabilities introduced through rapidly changing code and third party tools. The document then provides an example of a data exfiltration attack against a textile company, where the attacker was able to access critical systems and steal financial and design data by exploiting known PHP flaws and leveraging captured credentials.
Industry Best Practice against DDoS Attacks
The university network was compromised after password sniffers captured an administrator's password, allowing bots to be installed on internal hosts from which a DDoS attack originated. To protect the network using industry best practices, the university should: 1) implement patch management to fix vulnerabilities, 2) deploy internal firewalls and IDS to segment networks and filter traffic, and 3) install antivirus software on all workstations and improve security policies.
Endpoint Security Evasion
This document summarizes a presentation given by Jason Shupp of Invincea, Inc. on the topic of endpoint security evasion. It discusses current challenges with antivirus software, including its reliance on known threats and the hundreds of thousands of new malware variants seen daily. The presentation then outlines how Invincea's FreeSpace product works to contain applications in an isolated environment to prevent compromise, using behavioral detection rather than signatures. It concludes with a demonstration of FreeSpace protecting against weaponized documents while traditional defenses are bypassed.
Thinking Differently About Security Protection and Prevention
In this presentation, Peter Starceski discussed artificial intelligence and machine learning and how they have been applied to the cybersecurity industry. He highlighted how leveraging artificial intelligence and machine learning provides defenders with an advantage they have never possessed till now. Peter shared examples of how machine learning have proven successful at stopping zero days and preventing ransomware prior to any other legacy solution. He examined the shifting nature of the threat landscape and to how to move beyond signature-based threat detection to rely on a mathematical, algorithmic, and scientific approach to disarm a threat.
Fortifying Network Security with a Defense In Depth Strategy - IDC Romania preso
Fortifying Network Security with a Defense In Depth Strategy - IDC Romania presoNetwork Performance Channel GmbH
This document discusses strategies for fortifying network security using a defense in depth approach. It notes that 2164 data breach incidents in 2013 resulted in over 822 million records being stolen. The costs of cybercrime in 2012 included $388 billion in direct costs and $274 billion in indirect costs. It advocates using network taps and packet brokers along with inline deployment protection to provide full network visibility while avoiding performance issues and ensuring continuous network uptime.Security Implications of the Cloud - CSS ATX 2017
The document discusses the security implications of cloud computing. It notes that web application attacks are now the number one source of data breaches, but less than 5% of data center security budgets are spent on application security. It also summarizes that the risks are moving up the application stack as attacks can happen at every layer. Defending applications and workloads in the cloud is complex due to a wide range of attacks, rapidly changing code introducing vulnerabilities, and a shortage of cloud security expertise. Perimeter security tools also fail to protect the larger cloud attack surface that now includes web and mobile applications.
Creating Correlation Rules in AlienVault
This document discusses correlation in security monitoring. Correlation involves relating different security-related events together to produce more useful information and detect threats. It works by applying correlation rules to incoming events to increase their priority and risk level if they match specified criteria. This helps reduce noise and manual monitoring while automating security. Complex correlation allows matching events across multiple levels and timeframes. Correlation directives can be used to detect common attacks and map events to compliance objectives.
Port of seattle security presentation david morris
This document discusses cyber security threats and recommendations for addressing them. It begins with an overview of the history of threats like Melissa in 1999 and Slammer in 2003. Today's threats are described as persistent, sophisticated, and targeted. The document then outlines the anatomy of a common attack involving phishing emails, drive-by downloads, gaining access to internal networks, and exfiltrating data. It recommends building a strong security foundation with controls and guidelines, developing an incident response plan, and establishing partnerships for assistance in responding to incidents.
Esteban Próspero
1) The complexity of corporate IT is growing daily, with an 81% increase in mobile data traffic in 2013 and only 50% of data needing protection currently protected. Advanced attacks have a high material impact, costing companies billions annually.
2) McAfee's Connected Security Platform allows threat intelligence to be shared in milliseconds between endpoints, gateways and other security products to immediately protect organizations as threats are revealed.
3) The platform includes the Threat Intelligence Exchange, Enterprise Security Manager, and Data Exchange Layer to provide real-time visibility, adaptive security, and integrated protection and response across an organization.
Zlatibor asseco-fire eye
FireEye offers advanced threat protection solutions that can detect multi-stage cyber attacks more effectively than traditional security solutions like IPS, secure web gateways, desktop AV, and firewalls. FireEye's technology correlates events across endpoints, networks, email, files and exploits to analyze 500,000 objects per hour and detect threats earlier. It detonates files to identify exploits and callbacks that traditional signature-based tools miss. FireEye detected the first compromise in many customer environments, showing it can identify advanced threats before other vendors.
Advanced Threat Protection – ultimátní bezpečnostní řešení
This document discusses Symantec Advanced Threat Protection (ATP), which provides tools to protect against advanced persistent threats (APTs). It begins with an overview of the evolving threat landscape and APT techniques. It then summarizes the key modules of ATP, including network monitoring, email security, endpoint protection, and cloud-based sandboxing. The document concludes with a demo of ATP's detection and response capabilities.
Anatomy of an Attack - Sophos Day Belux 2014
Anatomy of an Attack - Next Generation Endpoint, presentation given by Vincent Vanbiervliet at Sophos Day Belux on November 25th, 2014.
DC970 Presents: Defense in Depth
This document summarizes a presentation given by the DC970 group on defense-in-depth strategies to secure organizations. It discusses the components of defense-in-depth including perimeter firewalls, IPS, antivirus, patching, authentication, sandboxing, and physical security. It also summarizes trends from security reports about the continued exploitation of outdated vulnerabilities, the effectiveness of phishing attacks, and the role of human error in data breaches. The document recommends educating users, prioritizing patching, and implementing account security best practices.
Advanced Threat Defense Intel Security
McAfee Advanced Threat Defense is a comprehensive solution that uses dynamic analysis, static code analysis, and machine learning to detect advanced malware. It analyzes malware behavior in real-time using emulation and deploys centrally to provide high detection accuracy and lower costs compared to other solutions. The solution integrates with other McAfee products to form a coordinated defense that rapidly shares threat intelligence across the enterprise to immediately block threats.
Make Every Spin Count: Putting the Security Odds in Your Favor
Cerdant’s Director of Engineering, Joshua Skeens, presented the best ‘bets’ to increase your security odds. Josh warned customers to stop gambling with their data, and cautioned against weak, guessable passwords stating, “Use 2-Factor Authentication everywhere!” The first step in creating the best security posture possible for your business will always be just getting started, and to keep momentum Josh suggests implementing 1 new security practice each week.
Networking and penetration testing
This document discusses network security and penetration testing. It provides an overview of creating a networking lab and the tools used, including Cisco Packet Tracer, Backtrack, Metasploit, and Wireshark. The document then covers network security topics like common network threats, router security, switch security, and port security. It defines penetration testing and explains its goals of finding vulnerabilities and recommending improvements. The phases of penetration testing are outlined as profiling, enumeration, vulnerability analysis, exploitation, and reporting. Different styles of penetration testing like blue team and red team are also summarized.
Seven Ways to Reduce Your 2009 IT Burden
This document outlines 7 ways that email hosting can reduce an organization's IT burden in 2009. The ways include: 1) Gaining reliable messaging of large enterprises through secure data centers. 2) Establishing low and predictable monthly costs of $10-30 per user. 3) Extending IT functions and reducing strain by outsourcing to a dedicated support team. 4) Meeting end user needs through full mobility and functionality. 5) Protecting from security risks like spam, viruses and data loss. 6) Preparing for future messaging trends like integration with other apps and unified communications.
Seven Ways to Reduce Your 2009 IT Burden
This document outlines 7 ways that email hosting can reduce an organization's IT burden in 2009. The ways include: 1) Gaining reliable messaging of large enterprises through secure data centers. 2) Establishing low and predictable monthly costs of $10-30 per user. 3) Extending IT functions and reducing strain by outsourcing to a dedicated support team. 4) Meeting end user needs through full mobility and functionality. 5) Protecting from security risks like spam, viruses and data loss. 6) Preparing for future messaging trends like integration with other apps and unified communications.
More Related Content
What's hot
Infrastructure as (Secure) Code
Software-defined networking is the latest technology in a move to abstract a variety of data center resources. As more and more of the data center is defined in code, some unique security challenges come to the fore.
In this session, we'll explore both sides of the security challenge. What types of controls and implementations are required to define security as part of your infrastructure code? What challenges does maintaining an infrastructure codebase present?
You'll learn not only how to integrate security into your infrastructure code but also how to properly and securely manage that codebase.
TALK Cybersecurity Summit 2017 Slides: Chris Goggans on Vulnerability Assessment
"Case Studies in Network Vulnerability Assessments" was presented by Chris Goggans, PatchAdvisor at the TALK Cybersecurity Summit 2017.
Network Security - Real and Present Dangers
Peter Wood is the CEO of First Base Technologies, an ethical hacking firm. He gave a presentation on the results of penetration tests his company conducted on various organizations in the past year. The most common vulnerabilities found included weak passwords, unpatched systems, misconfigured firewalls and services exposing sensitive information. He emphasized that many of these issues have persisted for years and can be easily exploited to gain full access to systems and data. He provided recommendations for organizations to improve security such as enforcing stronger passwords, regular patching, limiting access to sensitive systems and data, and monitoring networks.
Security Implications of the Cloud
This document discusses the security implications of cloud computing and summarizes a presentation by Ben Masino of Alert Logic. It notes that web application attacks are now the number one source of data breaches, but less than 5% of security budgets are spent on application security. It also outlines some of the challenges in defending applications and workloads in the cloud, including a wide range of attacks at every layer of the stack and vulnerabilities introduced through rapidly changing code and third party tools. The document then provides an example of a data exfiltration attack against a textile company, where the attacker was able to access critical systems and steal financial and design data by exploiting known PHP flaws and leveraging captured credentials.
Industry Best Practice against DDoS Attacks
The university network was compromised after password sniffers captured an administrator's password, allowing bots to be installed on internal hosts from which a DDoS attack originated. To protect the network using industry best practices, the university should: 1) implement patch management to fix vulnerabilities, 2) deploy internal firewalls and IDS to segment networks and filter traffic, and 3) install antivirus software on all workstations and improve security policies.
Endpoint Security Evasion
This document summarizes a presentation given by Jason Shupp of Invincea, Inc. on the topic of endpoint security evasion. It discusses current challenges with antivirus software, including its reliance on known threats and the hundreds of thousands of new malware variants seen daily. The presentation then outlines how Invincea's FreeSpace product works to contain applications in an isolated environment to prevent compromise, using behavioral detection rather than signatures. It concludes with a demonstration of FreeSpace protecting against weaponized documents while traditional defenses are bypassed.
Thinking Differently About Security Protection and Prevention
In this presentation, Peter Starceski discussed artificial intelligence and machine learning and how they have been applied to the cybersecurity industry. He highlighted how leveraging artificial intelligence and machine learning provides defenders with an advantage they have never possessed till now. Peter shared examples of how machine learning have proven successful at stopping zero days and preventing ransomware prior to any other legacy solution. He examined the shifting nature of the threat landscape and to how to move beyond signature-based threat detection to rely on a mathematical, algorithmic, and scientific approach to disarm a threat.
Fortifying Network Security with a Defense In Depth Strategy - IDC Romania preso
Fortifying Network Security with a Defense In Depth Strategy - IDC Romania presoNetwork Performance Channel GmbH
This document discusses strategies for fortifying network security using a defense in depth approach. It notes that 2164 data breach incidents in 2013 resulted in over 822 million records being stolen. The costs of cybercrime in 2012 included $388 billion in direct costs and $274 billion in indirect costs. It advocates using network taps and packet brokers along with inline deployment protection to provide full network visibility while avoiding performance issues and ensuring continuous network uptime.Security Implications of the Cloud - CSS ATX 2017
The document discusses the security implications of cloud computing. It notes that web application attacks are now the number one source of data breaches, but less than 5% of data center security budgets are spent on application security. It also summarizes that the risks are moving up the application stack as attacks can happen at every layer. Defending applications and workloads in the cloud is complex due to a wide range of attacks, rapidly changing code introducing vulnerabilities, and a shortage of cloud security expertise. Perimeter security tools also fail to protect the larger cloud attack surface that now includes web and mobile applications.
Creating Correlation Rules in AlienVault
This document discusses correlation in security monitoring. Correlation involves relating different security-related events together to produce more useful information and detect threats. It works by applying correlation rules to incoming events to increase their priority and risk level if they match specified criteria. This helps reduce noise and manual monitoring while automating security. Complex correlation allows matching events across multiple levels and timeframes. Correlation directives can be used to detect common attacks and map events to compliance objectives.
Port of seattle security presentation david morris
This document discusses cyber security threats and recommendations for addressing them. It begins with an overview of the history of threats like Melissa in 1999 and Slammer in 2003. Today's threats are described as persistent, sophisticated, and targeted. The document then outlines the anatomy of a common attack involving phishing emails, drive-by downloads, gaining access to internal networks, and exfiltrating data. It recommends building a strong security foundation with controls and guidelines, developing an incident response plan, and establishing partnerships for assistance in responding to incidents.
Esteban Próspero
1) The complexity of corporate IT is growing daily, with an 81% increase in mobile data traffic in 2013 and only 50% of data needing protection currently protected. Advanced attacks have a high material impact, costing companies billions annually.
2) McAfee's Connected Security Platform allows threat intelligence to be shared in milliseconds between endpoints, gateways and other security products to immediately protect organizations as threats are revealed.
3) The platform includes the Threat Intelligence Exchange, Enterprise Security Manager, and Data Exchange Layer to provide real-time visibility, adaptive security, and integrated protection and response across an organization.
Zlatibor asseco-fire eye
FireEye offers advanced threat protection solutions that can detect multi-stage cyber attacks more effectively than traditional security solutions like IPS, secure web gateways, desktop AV, and firewalls. FireEye's technology correlates events across endpoints, networks, email, files and exploits to analyze 500,000 objects per hour and detect threats earlier. It detonates files to identify exploits and callbacks that traditional signature-based tools miss. FireEye detected the first compromise in many customer environments, showing it can identify advanced threats before other vendors.
Advanced Threat Protection – ultimátní bezpečnostní řešení
This document discusses Symantec Advanced Threat Protection (ATP), which provides tools to protect against advanced persistent threats (APTs). It begins with an overview of the evolving threat landscape and APT techniques. It then summarizes the key modules of ATP, including network monitoring, email security, endpoint protection, and cloud-based sandboxing. The document concludes with a demo of ATP's detection and response capabilities.
Anatomy of an Attack - Sophos Day Belux 2014
Anatomy of an Attack - Next Generation Endpoint, presentation given by Vincent Vanbiervliet at Sophos Day Belux on November 25th, 2014.
DC970 Presents: Defense in Depth
This document summarizes a presentation given by the DC970 group on defense-in-depth strategies to secure organizations. It discusses the components of defense-in-depth including perimeter firewalls, IPS, antivirus, patching, authentication, sandboxing, and physical security. It also summarizes trends from security reports about the continued exploitation of outdated vulnerabilities, the effectiveness of phishing attacks, and the role of human error in data breaches. The document recommends educating users, prioritizing patching, and implementing account security best practices.
Advanced Threat Defense Intel Security
McAfee Advanced Threat Defense is a comprehensive solution that uses dynamic analysis, static code analysis, and machine learning to detect advanced malware. It analyzes malware behavior in real-time using emulation and deploys centrally to provide high detection accuracy and lower costs compared to other solutions. The solution integrates with other McAfee products to form a coordinated defense that rapidly shares threat intelligence across the enterprise to immediately block threats.
Make Every Spin Count: Putting the Security Odds in Your Favor
Cerdant’s Director of Engineering, Joshua Skeens, presented the best ‘bets’ to increase your security odds. Josh warned customers to stop gambling with their data, and cautioned against weak, guessable passwords stating, “Use 2-Factor Authentication everywhere!” The first step in creating the best security posture possible for your business will always be just getting started, and to keep momentum Josh suggests implementing 1 new security practice each week.
Networking and penetration testing
This document discusses network security and penetration testing. It provides an overview of creating a networking lab and the tools used, including Cisco Packet Tracer, Backtrack, Metasploit, and Wireshark. The document then covers network security topics like common network threats, router security, switch security, and port security. It defines penetration testing and explains its goals of finding vulnerabilities and recommending improvements. The phases of penetration testing are outlined as profiling, enumeration, vulnerability analysis, exploitation, and reporting. Different styles of penetration testing like blue team and red team are also summarized.
What's hot (20)
TALK Cybersecurity Summit 2017 Slides: Chris Goggans on Vulnerability Assessment
TALK Cybersecurity Summit 2017 Slides: Chris Goggans on Vulnerability Assessment
Thinking Differently About Security Protection and Prevention
Thinking Differently About Security Protection and Prevention
Fortifying Network Security with a Defense In Depth Strategy - IDC Romania preso
Fortifying Network Security with a Defense In Depth Strategy - IDC Romania preso
Port of seattle security presentation david morris
Port of seattle security presentation david morris
Advanced Threat Protection – ultimátní bezpečnostní řešení
Advanced Threat Protection – ultimátní bezpečnostní řešení
Make Every Spin Count: Putting the Security Odds in Your Favor
Make Every Spin Count: Putting the Security Odds in Your Favor
Similar to www.more.net | University of Missouri
Seven Ways to Reduce Your 2009 IT Burden
This document outlines 7 ways that email hosting can reduce an organization's IT burden in 2009. The ways include: 1) Gaining reliable messaging of large enterprises through secure data centers. 2) Establishing low and predictable monthly costs of $10-30 per user. 3) Extending IT functions and reducing strain by outsourcing to a dedicated support team. 4) Meeting end user needs through full mobility and functionality. 5) Protecting from security risks like spam, viruses and data loss. 6) Preparing for future messaging trends like integration with other apps and unified communications.
Seven Ways to Reduce Your 2009 IT Burden
This document outlines 7 ways that email hosting can reduce an organization's IT burden in 2009. The ways include: 1) Gaining reliable messaging of large enterprises through secure data centers. 2) Establishing low and predictable monthly costs of $10-30 per user. 3) Extending IT functions and reducing strain by outsourcing to a dedicated support team. 4) Meeting end user needs through full mobility and functionality. 5) Protecting from security risks like spam, viruses and data loss. 6) Preparing for future messaging trends like integration with other apps and unified communications.
Seven Ways to Reduce Your 2009 IT Burden
This document outlines 7 ways that email hosting can reduce an organization's IT burden in 2009. The 7 ways are: 1) Gain reliable messaging similar to large enterprises, 2) Establish low and predictable costs around $10-30 per month, 3) Extend IT functions and resources with a dedicated support team, 4) Meet end user needs with full functionality and mobility, 5) Protect against increasing security risks and meet compliance, 6) Be prepared for future messaging trends and integration, 7) Have a future-proof messaging system with reliability, support, security and integration.
The EDUCAUSE Security Professionals Experience [ppt]
1. The document summarizes the activities of MOREnet, a non-profit organization that provides internet connectivity and security services to educational institutions in Missouri.
2. MOREnet has changed its approach to security from reactive to proactive by regularly communicating with members, providing training, and establishing goals to reduce security incidents.
3. MOREnet shares security information and best practices with members through various means such as mailing lists, web seminars, an annual security symposium, and advanced training courses to help members strengthen their network security.
Microsoft Platform Security Briefing
You are attending a workshop on security threats and how to address them, not a training. The presenters introduce themselves and their backgrounds. They discuss how security threats have evolved from viruses in the early internet era to today's more sophisticated targeted attacks. Microsoft's approach to security focuses on technology, processes, and people to manage complexity, protect information, and advance the business with IT solutions. Specific solutions discussed include Windows Firewall, BitLocker, and Network Access Protection.
1 - HKT Reporting.pdf
This document summarizes the results of a vulnerability assessment performed on the networks of 6 schools by HKT. It found that around 25% of systems had web services, with an average risk score of 54 and scores ranging from 20 to 78. Manual review found that 33% of vulnerabilities were high or critical risks. Common high risk issues included SQL injection, cross-site scripting, and outdated software with known vulnerabilities. The document discusses ongoing challenges in security management like complexity, recruitment, and funding. It proposes a security-centric approach with centralized monitoring, automation, and remote support provided by a managed security service partner.
Information Security
The document discusses information security solutions provided by Taarak India Private Limited. It covers their team size and certifications, solutions addressing confidentiality, integrity and availability, and agenda items around risk to information, information security management, technology challenges of bandwidth availability/optimization, data security, log management and system management.
MT17_Building Integrated and Secure Networks with limited IT Support
Many businesses need a secure and flexible network but are not networking experts. With Dell Networking and SonicWALL, you can enjoy an easy-to-manage high performance network for wired and wireless connectivity, secured by the award-winning SonicWALL Nextgen Firewall.
Endpoint Protection as a Service (EPaaS)
Slide presentasi Pak Samuel H. Winata dari McAfee dalam seminar "Accelerating Cloud Computing Adoption".
Cloud expo cloud-enabled testing services (wide)_v1.0
The document discusses challenges in software testing such as rising costs and inflexibility. It proposes using cloud-enabled testing services to address these challenges by reducing costs, improving flexibility, and ensuring compliance. Some benefits of cloud-enabled testing include being able to quickly deploy test services with a few mouse clicks and always having the latest test tool versions. However, security and data privacy are important concerns to consider with cloud-enabled testing.
A Closer Look at Isolation: Hype or Next Gen Security?
This webinar looks at Isolation from different viewpoints. Learn from a Menlo Security customer, along with John Pescatore, Director of Emerging Technologies at SANS Institute, and Kowsik Guruswamy, Menlo Security CTO, as they explore why organizations around the globe are looking at isolation as the means to protect their users from ever-present web and email dangers.
Info Sec2007 End Point Final
Endpoint security involves securing devices like laptops and ensuring they comply with security policies before being granted network access. Major endpoint security solutions include Cisco NAC, Microsoft NAP, and TCG's Trusted Network Connect standard, but all take the approach of evaluating devices and enforcing admission control policies using tools like 802.1x and RADIUS. While endpoint security is important, it also requires significant resources to deploy and its solutions are still evolving.
David Patterson IT Security Resumes 2016
Senior cyber security engineer with over 30 years of experience in technical management, hardware engineering, system and network engineering. Experience monitoring, analyzing, migrating, designing, consulting, deploying, troubleshooting and project/technical management of large network systems. Skilled in evaluating system vulnerabilities, compiling analysis, reporting threats, and recommending security improvements.
GDI Product Presentation
The document introduces the Panda GateDefender Integra unified business protection product. It discusses security concerns such as malware, information destruction, and intrusions that affect organizations. It then describes how the Panda GateDefender Integra appliance combines firewall, IPS, antivirus, antispam, content filtering and web filtering protections in an easy-to-use centralized solution to address these network and content-based threats. The document also provides details on how it works, its features, models, and competitive analysis compared to other solutions. Finally, it addresses some frequently asked questions about perimeter security and the role of the appliance.
Trellix ATD pr-advanced-threat-defense.pptx
Advanced endpoint protection protects systems from file, fileless, script-based and zero-day threats by using machine-learning or behavioral analysis. Traditional, reactive endpoint security tools such as firewalls and anti-virus software generally depend upon known threat information to detect attacks.
Top Tactics For Endpoint Security
The document discusses the importance of endpoint security and provides an overview of various endpoint security solutions. It notes that with increased mobility and remote access, the network perimeter is no longer well-defined, making endpoint security crucial. It summarizes some key endpoint security vendors and technologies, including Cisco NAC, Microsoft NAP, and Trusted Network Connect. The document emphasizes that effective endpoint security requires a strategic approach to balance connectivity and protection.
"Evolving Cybersecurity Strategies" - Threat protection and incident managment
As the volume and sophistication of attacks has increased, it has become even more critical for organizations to be able to rapidly and accurately identify malicious attack vectors and payloads at time of delivery. This session will explore Microsoft’s unique approach to dealing with this problem and also how we approach tracing and deconstructing a successful attack in order to prevent its’ next iteration.
Ramnish Singh Platform Security Briefing
This document provides a high-level overview of platform security and the evolving security landscape. It discusses increasing demands for access and escalating security threats. It outlines the evolution of threats from local area networks to the internet era to today. It also discusses different types of attackers and their motivations. The document proposes addressing security threats by focusing on technology, processes, and people. It promotes an infrastructure optimization approach to security and discusses Microsoft's security strategy and development lifecycle.
AKS IT Corporate Presentation
AKS IT Services was established in 2006 and provides information security services including consultancy, compliance, network security, application security, cyber forensics, and IT security training. They have qualified consultants and have conducted over 1250 web application security audits. Their services include security consulting, auditing, compliance, forensics, and training. They have experience working with government and private organizations.
Aksit profile final
AKS IT Services was established in 2006 and provides information security services including consultancy, compliance, network security, application security, cyber forensics, and IT security training. They have qualified consultants and have conducted over 1250 web application security audits. Their services include security consulting, auditing, compliance, forensics, and training. They work with organizations across industries to assess vulnerabilities, perform testing and audits, investigate cyber crimes and security incidents, and provide security awareness training.
Similar to www.more.net | University of Missouri (20)
The EDUCAUSE Security Professionals Experience [ppt]
The EDUCAUSE Security Professionals Experience [ppt]
MT17_Building Integrated and Secure Networks with limited IT Support
MT17_Building Integrated and Secure Networks with limited IT Support
Cloud expo cloud-enabled testing services (wide)_v1.0
Cloud expo cloud-enabled testing services (wide)_v1.0
A Closer Look at Isolation: Hype or Next Gen Security?
A Closer Look at Isolation: Hype or Next Gen Security?
"Evolving Cybersecurity Strategies" - Threat protection and incident managment
"Evolving Cybersecurity Strategies" - Threat protection and incident managment
More from webhostingguy
File Upload
1) File uploads in PHP require configuring php.ini settings like enabling file uploads and setting temporary storage directories with correct permissions.
2) Forms for file uploads need to use POST with multipart/form-data encoding and include file input fields and hidden fields.
3) PHP stores uploaded files in the $_FILES array, including the temporary filename, size, type, and original name, which can then be processed and moved to a permanent location.
Running and Developing Tests with the Apache::Test Framework
The Apache::Test framework allows running and developing tests for Apache modules and products. Key features include:
- Running existing tests through the t/TEST program
- Setting up a new testing environment by installing Apache::Test and generating a Makefile
- Developing new tests by writing Perl scripts that use Apache::Test functions and assert results
- Options for running tests individually, repeatedly without restarts, or in parallel on different ports
MySQL and memcached Guide
This document provides instructions on installing and configuring memcached to improve the performance and scalability of MySQL. Memcached is installed using package managers or by compiling from source. It is configured to listen on ports and interfaces, allocate memory, and set thread counts. The typical usage involves applications loading data from MySQL into memcached for faster retrieval, with MySQL as the backing store if data is not found in the cache.
Novell® iChain® 2.3
The document discusses Novell iChain, a solution for securing web applications and servers. It provides single sign-on, encrypts data as it passes through proxies, and removes direct access to web servers. It authenticates users through LDAP or certificates and authorizes access through rules stored in eDirectory. This simplifies management and security across multiple web server platforms and applications.
Load-balancing web servers Load-balancing web servers
The document discusses different approaches to load balancing web servers to address issues like scaling performance, tolerating failures, and rolling upgrades. It describes three common solutions: redirecting requests through a front-end server; using round-robin DNS to distribute requests; and employing an intelligent load balancer switch that can distribute requests based on server load and detect failures. Each approach has advantages and disadvantages related to ease of implementation, visibility to users, and ability to handle session state. The document also discusses network designs and protocols involved in load balancing, including TCP connection setup and teardown.
SQL Server 2008 Consolidation
The document compares three methods for consolidating SQL Server databases: 1) multiple databases on a single SQL Server instance, 2) a single database on multiple SQL Server instances, and 3) hypervisor-based virtualization. It finds that consolidating multiple databases onto a single instance has the lowest direct costs but reduces security and manageability. Using multiple instances improves security but has higher resource needs. Hypervisor-based virtualization maintains security while enabling features like high availability, but has higher licensing costs. The document aims to help decide which approach best balances these technical and business factors for a given environment.
What is mod_perl?
Mod_perl brings together the Apache web server and Perl programming language. It allows Apache to be configured and extended using Perl, and significantly accelerates dynamic Perl content. Mod_perl supports Apache versions 1.3 and 2.x and integrates Perl at every stage of the request process to provide great flexibility and control over Apache functionality. The mod_perl community provides extensive documentation and quick support responses.
What is mod_perl?
Mod_perl brings together the Apache web server and Perl programming language. It allows Apache to be configured and extended using Perl, and significantly accelerates dynamic Perl content. Mod_perl supports Apache versions 1.3 and 2.x and integrates Perl at every stage of the request process to provide great flexibility and control over Apache functionality. The mod_perl community provides extensive documentation and quick support responses.
Notes8
The document discusses various aspects of designing an effective website, including analyzing content and target audiences, organizing site structure and navigation, and implementing design elements. The key steps outlined are to analyze content and audience needs, organize the site structure into main sections and subsections, and implement an intuitive navigation system to help users easily find relevant information. Maintaining and optimizing the site over time are also emphasized.
Dell Reference Architecture Guide Deploying Microsoft® SQL ...
This white paper provides an architectural overview and configuration guidelines for deploying Microsoft SQL Server 2005 with Microsoft Windows Server 2008 on Dell PowerEdge servers and Dell storage systems. It documents best practices for implementing SQL Server 2005 solutions using Dell hardware and software components that have been tested and validated to help ensure successful deployment and optimal performance. The white paper covers storage configuration, network configuration, operating system configuration, and SQL Server configuration recommendations.
Managing Diverse IT Infrastructure
1. The document discusses the evolution of business models for IT infrastructure from proprietary systems within individual companies to more open standards and shared infrastructure leveraging the internet.
2. It describes new service models like client-server computing, web services, and on-demand/utility computing which allow flexible provisioning of computing resources on a needs basis.
3. Managing diverse IT infrastructures requires considerations around outsourcing non-core functions, developing service level agreements, managing legacy systems, and aligning infrastructure capabilities to business strategy through appropriate investment.
Web design for business.ppt
The document discusses different types of websites that can be created for business purposes including traditional, blog-based, and group/network sites. It provides information on setting up each type of site for free or at low cost using online tools or designers, and how to add features like domains, payment systems, and linking domains to sites. Options for free and cheap site creation using tools like Google Sites are demonstrated.
IT Power Management Strategy
This document outlines Saint Louis University's strategy for improving power management of IT equipment to reduce costs and environmental impact. Key points include:
1) SLU aims to standardize power-optimized default settings on all managed PCs and laptops through automated software and establish policies around exceptions and existing devices.
2) Potential savings are estimated from generational improvements in computer hardware and adopting lower-power modes like sleep versus screensavers.
3) The strategy also involves consolidating servers, enabling energy-efficient settings on printers and other electronics, and establishing institutional goals around student computer energy use.
Excel and SQL Quick Tricks for Merchandisers
This document provides instructions for using Microsoft SQL and Excel to extract data from a SmartSite SQL database, manipulate it in Excel using functions, and update the SQL tables with the modified data to streamline content work. It covers connecting to and querying SQL databases, common Excel functions for editing data, and steps for importing an Excel file into a SQL table to update information. Examples of specific SQL queries and Excel functions are provided along with a scenario walking through the full process.
OLUG_xen.ppt
The document discusses various topics related to virtualization including drivers for virtualization, practical applications, definitions of terms like virtualization and paravirtualization, and tools like Xen, VMWare, and Microsoft virtualization products. It provides information on installing and configuring Xen on SuSE Linux, discusses security and auditing considerations for Xen, and demonstrates Xen functionality.
Parallels Hosting Products
The document discusses strategies for converting low-value hosting clients into high-value customers by marketing additional services. It recommends continuously marketing to clients through email, forums, blogs and surveys to promote add-on services like collaboration tools, applications, and infrastructure-as-a-service offerings which can significantly increase revenue per client. Measuring marketing campaigns and conversions is key to optimizing efforts to up-sell existing clients.
Microsoft PowerPoint presentation 2.175 Mb
The document discusses WebMapping Solutions and their products and services. It summarizes their middleware and mapping tools like MapBroker, Generic GUI Builder, and MapOrganiser. MapBroker powers many of their applications. Their products allow users to build custom web mapping applications and manage both geographic and non-geographic data in a single view. Their services include publishing data online, application development, and strategic consulting. Some examples of government and organization clients are listed.
Reseller's Guide
This document provides an overview and guide for using HSPcomplete, a hosting automation solution that allows hosting service providers to manage infrastructure, billing, sales channels, and e-commerce through a single system. It describes HSPcomplete's advantages like integrated billing and credit card processing, virtual private server management, and domain registration. Hardware, software, and user requirements for HSPcomplete deployment are also outlined.
More from webhostingguy (20)
Running and Developing Tests with the Apache::Test Framework
Running and Developing Tests with the Apache::Test Framework
Load-balancing web servers Load-balancing web servers
Load-balancing web servers Load-balancing web servers
PHP and MySQL PHP Written as a set of CGI binaries in C in ...
PHP and MySQL PHP Written as a set of CGI binaries in C in ...
Dell Reference Architecture Guide Deploying Microsoft® SQL ...
Dell Reference Architecture Guide Deploying Microsoft® SQL ...
www.more.net | University of Missouri
- 1. Statenet Security on the cheap and easy Beth Young MOREnet Security [email_address]
- 7. It isn’t all about the technology
Editor's Notes
- The Missouri Research and Education Network (MOREnet) provides Internet connectivity, access to Internet2, technical support, videoconferencing services and training to Missouri's K-12 schools, colleges and universities, public libraries, health care, state government and other affiliated organizations. Established in 1991, MOREnet operates as a unit within the University of Missouri , and is based in Columbia, Mo. The MOREnet network is the foundation infrastructure. Members of the education community interact with each other via data and video services; public sector business applications are built and conducted on it; and Missouri citizens interact with their state government through it. Significant number of tech people are lone ranger.
- We have a Cisco 10000-series router at each hub to aggregate customer circuits and a Cisco 12000-series router to provide backbone routing. Each hub also has a Dell 2850 server for DNS services. MOREnet currently has two Internet providers: Qwest and Sprint. We have two OC12s (622Mbps) from each provider, one in St. Louis and one in Kansas City. (Ordering OC48 agg circuits CBR of 900MB) MOREnet also has an OC12 (622Mbps) to the Great Plains Network through which we get our Internet2 access. 9 GigE Agg circuits 25 OC3 Agg Circuits (155Mbps) 7 in KC/9 in St. L 1100 end point connections MPLS Inter-campus network for UM System entities with QOS for PeopleSoft QOS on backbone for video services and MOBIUS
- The things that I am going to talk about are not all technology solutions. We work very hard on education of our members because in the end, that is what lessens out work load. I am going to talk about the technology we use as well as the education we do for our user community.
- abuse@ and security@ for multiple class B networks. phone support for districts that don’t have a lot of technical knowledge. Netflow reports that watch for certain ports for sort of an advance notification. For ethereal captures - relate story of Hermann. Spammer using their firewall box. sniffer on inside didn’t see anything, sniffer on outside did. hours of pouring thru ethereal captures to find out how they were using a hole inside the firewall to send out spam.
- members don’t control their own routers so we do things they would do if they could. started 2 years ago. Mostly voluntary if lots of problem, we will sign them up for the service. need numbers of sites that have signed up.
- Average attendance of about 50 people each month (125 highest attendance) Average of 10-15 playback
- Sgt Joe Laramie – Internet Crimes Against Children Task Force Det Andy Anderson – Boone County Internet Crimes Task Force Chief Investigator Public Safety Chris Pickering – MO Attorney General Office
- Security Community – being used to discuss disaster recovery efforts within Boone County. People know who to call and are comfortable asking for help. Relate story of Maryville and Columbia College being used as hot sites for each other.
- Per e-mail domain (MX record): 1-999 e-mail addresses: $595 1,000 or more e-mail addresses: $1095 Organizations that subscribe to this service after the beginning of the fiscal year will be billed on a prorated by month basis. Postfix is the central feature. First, it checks a DNS-based blacklist that we maintain. Then, it checks policyd. Policyd keeps its information in MySQL. When an email clears those hurdles, the email is sent on to Amavisd-new for some of its checks and attachment parsing. Amavisd-new then has ClamAV scan attachments, if any, for viruses. That is it in a nutshell. 120 EVSF alone – 158 kinetic alone – 278 combining both – most of which are K-12s 83% effective spam removal 2-3 Million messages per day filtered
- 143 – 2006 133 – 2005 Keynote – John Mallery – 2006 Marty Roesch - 2005
- usually have a Security Track with average 60 attendees Typically do 10-12 presentations, some hands on
- Everyone wants firewall management but no one wants to pay for it We filed to be CALEA complaint, but no members filed. TTPs want us to be a TTP for members, but members believe they are private networks. Even though some of these didn’t work, we got some volume purchase agreements in place that gave members better pricing.