1. Network Security and Personally Managed Computers Jordan K. Wiens Copyright Jordan K. Wiens 2004

2. Introduction Who am I? Who are you? What are your biggest security concerns? Why are we here?

3. Today’s Tasks We will be designing a virtual network in phases –Review – discuss impact of each security component –Design – Choose a specific implementation for your virtual network Once the network is complete, we will attack and defend it.

4. Security Components Policies Physical Design/Infrastructure Required Services Security Services

5. Policies AUP Physical Host security Network security Incident Response Risk assessment Awareness Data security, etc…

6. AUP Strong passwords and good password management Current patches Current malware protection Safe email Safe browsing

7. Host/Network Security Users implementing infrastructure Professional management Minimum services Minimum access Vulnerability Assessment

8. Physical Design/Infrastructure

9. Required Services DHCP DNS Mail Web

10. Security Services IDS Firewall Authentication Gateways Patch/AV management

11. Security Services contd. Secure proxies Security management platforms Flow monitoring/analysis Vulnerability Assessment

12. Put it all Together Take some time to fill in the gaps if necessary

13. Hacking the Matrix Now we’ll attack and defend our simulated networks to better understand them.

14. Notes

15. Debriefing What changes could you have made to better protect your network? Are those changes worth implementing? Can all attacks be prevented?

16. Questions/Comments? Jordan Wiens numatrix@ufl.edu