计算机网络安全技术与实施（旧） Symantec赛门铁克产品与PPTV1 医院信息安全解决方案（统方问题）.ppt

* SSIM/Compliance * SSIM/Management 进程管理－新增未知进程报告 * 产品:SIM+SCSP 应对：利用非法/恶意进程进行违规操作；及时发现攻击迹象 * 网络端口管理－周期检查 产品:SIM+SCSP 应对：结合进程管理，及时发现攻击迹象 关键配置文件监控 * 配置文件变更监控 监控配置文件创建、修改、删除 配置文件差异比对（内容、owner、group、权限） 增加内容 删除内容 产品:SIM+SCSP 应对：及时发现更为隐蔽的恶意行为 * Symantec Proprietary Confidential - This information is not a commitment, promise or legal obligation to deliver any material, code or functionality 立体化从终端到服务器，从事前防范到事后审计 实现安全和管理的有效结合 终端 系虚拟化 应用程序虚拟化 桌面虚拟化 网络 准入控制 Lan Enforcer GW Enforcer DHCP Enforcer P2P Enforcement 数据丢失防护 监控 预防 发现 保护 Symantec解决方案 总结 终端 保护 Anti-malware Firewall HIPS App. Ctrl. Device Ctrl 服务器 安全加固 零日攻击 违规操作 入侵防护 … 安全审计 事件收集 关联分析 及时报警 事后审计 谢谢收看！ 请多指教！ * * * * * * * * * * * Objectives ------------ Communicate that we are now doing discovery and real-time prevention on the endpoint. Show that we have the remediation requirements thought out and beginning to meet them Explain how we do detection on the endpoint and why it is the right way. Script -------- Vontu delivers a single agent for discover and monitoring and prevention on the endpoint. Vontu’s endpoint solution extends all of the goodness of our platform including our universal DLP policy, TrueMatch detection including data identifiers to the endpoint. Vontu TrueMatch goes beyond content awareness and delivers deep content inspection. Our endpoint solution was designed to meet the scalability and manageability requirements of global enterprises. Let’s talk about our Discovery capability first. Do you know... Which laptops and desktops contain intellectual property? What workstations contain credit card data in violation of PCI policy? What laptops should be encrypted? With Vontu Endpoint Discover, you can Scan laptops for PII data such as social security numbers and prioritize full disk encryption efforts Discover source code inappropriately stored on outsourced engineers workstations Find product design documents on contractors laptops Use automated notific