1 Pertemuan 6 Points of Exposure Matakuliah:A0334/Pengendalian Lingkungan Online Tahun: 2005 Versi: 1/1

2 Learning Outcomes Pada akhir pertemuan ini, diharapkan mahasiswa akan mampu : Mahasiswa dapat menjelaskan Points of Exposure

3 Outline Materi Web Security –History –The Threat Infection Install A Spreading Mechanism –Optional: Install or Modify Other Services Search for New Systems –Optional: Attack Other Systems –Business Implications –The Solutions

4 Network Vulnerabilities –Better Ways to Resolve Network Vulnerabilities –Protecting The ‘Trusted’ Network Key Security Vocabulary Explained

5 Web Security History The Threat –Infection –Install A Spreading Mechanism Optional: Install or Modify Other Services –Search for New Systems Optional: Attack Other Systems Business Implications The Solutions

6 History Security holes in business-critical software are a significant threat to organisations. However, vulnerabilities in Internet-related software can be disastrous. Ironically, Internet software was generally designed with security as a afterthought. Networks were largely considered to be either private and therefore physically secure or public and therefore inherently open.

7 The amount of private information transmitted across the Internet increases daily. It is now an integral part of most people’s lives, ranging from buying books at Amazon on a credit card through to making money transfers and payments via an online bank.

8 Potentially there are numerous reasons for the growth in security attacks; but one trend that in undeniable is the growth in the number and sophistication of hacking tools. Historically attackers required detailed understanding of the systems that they were attempting to compromise and performing an attack could be a time-consuming operation. There also was no source code available to read to find security vulnerabilities.

9 The Threat Today security is a bigger problem than ever before. The most dangerous forms of Internet worm are those that attack web servers. Unlike the average Internet connection, these systems have network connections with large amounts of bandwidth. After an infection, a worm can use the bandwidth to spread itself to other web servers.

10 Equally, the organisations operating the web server may base a large percentage of its revenue on traffic from its website and the site outage could cause a large- scale financial impact – not to mention the impact on customer confidence.

11 Infection Infection involves the worm sending a malicious request to a web server, trying to exploit a known security vulnerability. If the web server is vulnerable, the worm infects the machine, executes its payload and then continues to spread to other machines.

12 Install A Spreading Mechanism Once a Microsoft IIS server has been infected with a worm, the worm’s code can make use of software available on the system and, furthermore, even download additional software from other systems.

13 Optional: Install or Modify Other Services Some worms install backdoor services to give hackers access to machines. They are then able to control the system remotely and use it for future exploits, such as distributed denial of service attacks.

14 Search for New Systems In order to able to infect other systems every worm needs some form of reproduction mechanism. It needs to find new servers to which it can spread by investigating the addresses of potential targets.

15 Optional: Attack Other Systems Many worms have built-in attack routines.

16 Business Implications The web is a vital components of an organisation’s infrastructure.

17 The Solutions As with the security for your business premises, an intruder will always look for the easiest way in; if you can make it sufficiently secure then they will go elsewhere. Internet security is not a matter of installing one system but of looking at all the components in hour systems to see if they offer any holes. Installing systems that are secure in the first place obviously means less work than installing insecure ones and then trying to secure them.

18 Network Vulnerabilities Basic security tenets have changed very little over the past decade. Protecting the confidentiality of corporate information, preventing unauthorised access and defending against malicious or fraudulent attacks from external sources: these continue to be the major concerns of IT professionals today. To compound the threat posed by these developments, networks are also operating at much higher speeds.

19 Better Ways to Resolve Network Vulnerabilities The fundamental key to an effective security solution is a properly deployed network security device that increases security without jeopardising performance. To meet the many and varied threats already outlined, multi-functionslity within a single platform can ease network design and maximise effectiveness. Solid inter- operability with other security products, such as user authentication and anti-virus applications, will also prove invaluable.

20 Protecting The ‘Trusted’ Network Once a network security solution that addresses the fundamentals of performance and reliability is identified, it then has to be evaluated for its ability to provide pervasive internal protection.

21 A ‘virtual’ approach to establishing security zones is required to efficiently enable segmentation. Selecting security devices with virtual system capabilities can reduce the overall number of devices in a network and thereby streamline security management, reducing the total cost of ownership. With certain virtual system-enabled devices, different policies can be applied to different zones, depending on each department’s need for access to sensitive information, the type and number of employees, etc.

22 Key Security Vocabulary Explained VPNs Denial of service Firewall Intrusion prevention Trojan Horse Backdoor or U-turn attacks WLANs Virus

23 The End