Cyber security

Goals of cyber security:

Confidentiality (only authorized access to files and data transfer)

Integrity (protection against unnoticed manipulation of files, traceability of changes = no share accounts)

Availability (minimal possible effects in the event of problems, redundant connections, clusters, load balancers, backups,)

Cyber security

Types of threat:

information theft, identity theft, data loss and manipulation, service disruption

Types of malware:

Virus, Worm, Trojan, Adware, Ransomware, Rootkit, Spyware

Types of Attacks:

Reconnaissance Attacks (Scout Attacks), Access Attacks,

Denial of Service Attacks (DoS/DDoS), Social Engineering Attacks

Consequences of attacks:

loss of image, loss of trust (customers/suppliers), blackmail/data encryption, service failure/inability to work,

Loss of income/loss of earnings, data espionage/competitive disadvantages

Created by Muhammad Sadiq Hassanzadah

LOREM IPSUM DOLOR SIT AMET...

Est ei erat mucius quaeque. Ei his quas phaedrum, efficiantur mediocritatem ne sed, hinc oratio blandit ei sed. Blandit gloriatur eam et. Brute noluisse per et, verear disputando neglegentur at quo. Sea quem legere ei, unum soluta ne duo. Ludus complectitur quo te, ut vide autem homero pro.

Expetenda tincidunt in sed, ex partem placerat sea, porro commodo ex eam. His putant aeterno interesset at. Usu ea mundi tincidunt, omnium virtute aliquando ius ex. Ea aperiri sententiae duo. Usu nullam dolorum quaestio ei, sit vidit facilisis ea. Per ne impedit iracundia neglegentur. Consetetur neglegentur eum ut, vis animal legimus.

At quaeque adversarium ius, sed at integre persius verterem. Sit summo tibique at, eam et fugit complectitur, vis te natum vivendum mandamus. Iudico quodsi cum ad, dicit everti sensibus in sea, ea eius paulo deterruisset pri. Pro id aliquam hendrerit definitiones. Per et legimus delectus...

LOREM IPSUM DOLOR SIT AMET...

What possibilities are there for malware to be smuggled into the network?

Malware

by email (e.g. phishing)

via data medium (e.g. USB stick)

via the Internet (e.g. website with malicious code)

for smartphones (e.g. untrustworthy apps)

Remote intrusion

via router interface/e.g. Remote desktop connection

Unsecured, open ports

Unsecured WLANs/configuration errors

Unsecured LAN access (to the network or direct connection to devices)

Measures to protect against attacks

!!! There is no ONE completely effective protection!!!

Rather, a multi-layered defense approach is used.

The network is secured on several levels and protected with a variety of tools, services and security policies

Measures to protect against attacks:

• Firewalls/ACLs (software or dedicated firewalls; host-based/network-based)

• Antivirus/Antimalware programs

• AAA Server (Authentication, Authorization, Accounting)

• Proxy server, possibly also to improve performance

• DMZ for publicly accessible servers

Created by Muhmmad Sadiq Hassanzadah

LOREM IPSUM DOLOR SIT AMET...

• IPS/IDS (Intruder Prevention System/Intruder Detection System)

• Data security/backup

• Configure network devices correctly (e.g. router/switch)

• WLAN security (WPA3, APs only temporarily On)

• Secure LAN access

• Redundant structure of the network

• Updates/Upgrade/Patch – software/firmware always up to date

• Segmentation of networks with different security policies

• Monitoring of incoming/outgoing network traffic

• Analyzing and eliminating vulnerabilities using various tools

o Use network sniffer e.g. Wireshark/tcpdump/winpcap/libpcap

o CLI commands, e.g. nmap/netstat/ping/tracert/nslookup

o Analysis programs, e.g. OpenVAS, Nessus, Metasploit, tools under Kali-Linux

End device security

• End device security (particularly consider the human factor)

o Well-documented security guidelines, e.g. strong passwords, change them regularly, do not write them down – ensure security guidelines are enforced/complied with in the company, hire IT security officers if necessary

o Employee training and awareness raising

o Ensure encryption in transit/disk encryption

o VPN for remote access

o Enable SSH only where necessary; Disable telnet completely

o Deactivation of unnecessary services and ports (e.g. ICMP)

o Anti-virus systems/anti-malware

o ESA/WSA (Email Security Appliance/Web Security Appliance

Detailed documentation of the security precautions Regular review of the security precautions Create an emergency plan in the event of a compromise Define clear responsibilities (e.g. for transactions) Contact persons in emergencies or in the event of ambiguities

Created by Muhammad Sadiq Hassanzadah

LOREM IPSUM DOLOR SIT AMET...

Cyber security

More creations to inspire you

TEN WAYS TO SAVE WATER

GRETA THUNBERG

FIRE FIGHTER

DEMOCRATIC CANDIDATES NOV DEBATE

STEVE JOBS

ONE MINUTE ON THE INTERNET

SITTING BULL

Transcript