Cisco 网络安全部署 PPT 内部员工培训材料说课材料.ppt

*;Deploying Secure Networks;What You Can Expect to Learn;Distributed Denial of Service (DDoS);Smurf Attack;HandlerSystems;Stacheldraht Attack;Stacheldraht Attack;Stacheldraht Transport Details;Root Kits;Application Layer Attacks;Port Redirection Attack;Deploying Secure Networks;How Is Enterprise Security Deployed Today?;Access Router ACL (no State Inbound s0);Firewall Rules;Design Considerations;Deploying Secure Networks;Bring on the Hackers!;Network Recon;HTTP/SSL;Exploit Trust;01;“Own” the Network;“Own” the Network;Crunchy on the Outside…Soft in the Middle;Distributed Denial of Service Attack;Setup a Distribution Net;Attack!;Attack Review;Deploying Secure Networks;Threat Mitigation;Threat Mitigation (Cont.);A new study by Cisco Secure Consulting Services offers some insight into where many common vulnerabilities exist in IT network systems. The study, which analyzed 33 midsize and large customer sites over a period of six months, found vulnerabilities in all the customer sites, but almost all the vulnerabilities could be traced to outdated software or lax system administration maintenance, not to inherent flaws in the systems. While the need for careful system administration and continual system security analysis has been well-understood, Cisco's study indicates that most businesses, especially those that are conducting E-commerce activities over the Internet, aren't being careful enough.;Good System Administration;Intrusion Detection Systems;Proper Trust Model;Committed Access Rate;CAR Rate Limiting;RFC 1918 Filtering;RFC 2827 Filtering ;Verify Unicast Reverse-Path;Service Provider Filtering;Private VLANs;VMPS VLANs;Network Audit Fundamentals;Optional Network Audit Tools;Specific Filtering;Deploying Secure Networks;Design Optimizations;Design Optimizations;WAN Module;Design Optimizations;Design Optimizations;Design Optimizations;Internet Module;Firewall the Access Routers;Add a Third Firewall Interface;Internet Module;Internet Module;Host Security Visibili