审计网络安全1.pdfVIP

Auditing Network Security Securing A Network © 2005 Protiviti Inc. EOE Why should we review our network security? “Exelon Valdez of privacy” “Scammers access data on 35,000 Californians” “Bank of America loses a million customer records” “ID-theft alert follows break-in at federal contractor” “Payroll site closes on security worries” “Paris Hiltons cell phone hacked?” /2100-1009_22-5593225.html Securing A Network 2 What are the goals of network security audits? • Quickly validate the effectiveness of security processes • Verify that security policies and standards are being followed • Subject systems to real-world attacks • Obtain a “snapshot in time” of an organization’s computer network • Identify vulnerabilities and risks in the environment Securing A Network 3 Security Objectives CONFIDENTIALITYCONFIDENTIALITY CONFIDENTIALITYCONFIDENTIALITY Sealed LetterSealed Letter Data completely hiData completely hidden to all but thedden to all but the