第1章网络安全威胁.pptx

第1章 网络安全威胁;To protect assets! Historically done through physical security and closed networks. ;With the advent of personal computers, LANs, and the wide-open world of the Internet, the networks of today are more open.;There are four primary classes of threats to network security: Unstructured threats Structured threats External threats Internal threats;Network Security Models;Open Security Model;Restrictive Security Model;Closed Security Model;Evolution of Network Security;Sophistication of Tools vs. Technical Knowledge ;The Morris worm or Internet worm was the first computer worm distributed via the Internet. It was written by a student at Cornell University, Robert Tappan Morris, and launched on November 2, 1988 from MIT. It is considered the first worm and was certainly the first to gain significant mainstream media attention. It also resulted in the first conviction in the US under the 1986 Computer Fraud and Abuse Act. ;Morris Worm;Good Thing?;The Code Red worm was a DoS attack and was released on July 19, 2001 and attacked web servers globally, infecting over 350,000 hosts and in turn affected millions of users.;Code Red: Defaced web pages. Disrupted access to the infected servers and local networks hosting the servers, making them very slow or unusable. Network professionals responded slowly to system patches which only exacerbated the problem. ;What Did It Do?;What Did It Do?;How is it stopped?;Code Red – A good thing?; /advisories/CA-2001-19.html ;New Threats;New Cisco Tool!;Drivers for Network Security;Phreaker An individual that manipulates the phone network in order to cause it to perform a function that is normally not allowed such as to make free long distance calls. Captain Crunch (John Drapper) Spammer Individual that sends large quantities of unsolicited email messages. Spammers often use viruses to take control of home computers to send out their bulk messages. Phisher Individual uses email or other means in an attempt to trick others into