Chapter_23_Slides

Chapter_23_Slides - 11/15/2010 Chapter 23: Network Security...

Info iconThis preview shows pages 1–6. Sign up to view the full content.

View Full Document Right Arrow Icon
11/15/2010 1 Chapter 23: Network Security Introduction to the Drib • Introduction to the Drib • Policy Development • Network Organization • Availability At ii t i A t t k Slide #23-1 • Anticipating Attacks Introduction Goal: apply concepts principles • Goal: apply concepts, principles, mechanisms discussed earlier to a particular situation – Focus here is on securing network – Begin with description of company Slide #23-2 – Proceed to define policy – Show how policy drives organization
Background image of page 1

Info iconThis preview has intentionally blurred sections. Sign up to view the full version.

View Full DocumentRight Arrow Icon
11/15/2010 2 The Drib Builds and sells dribble • Builds and sells dribbles • Developing network infrastructure allowing it to connect to Internet to provide mail, web presence for consumers, suppliers, other partners Slide #23-3 Specific Problems Internet presence required • Internet presence required – E-commerce, suppliers, partners – Drib developers need access – External users cannot access development sites • Hostile takeover by competitor in progress – Lawyers corporate officers need access to development Slide #23-4 – Lawyers, corporate officers need access to development data – Developers cannot have access to some corporate data
Background image of page 2
11/15/2010 3 Goals of Security Policy Data related to company plans to be kept secre • Data related to company plans to be kept secret – Corporate data such as what new products are being developed is known on a need-to-know basis only • When customer supplies data to buy a dribble, only folks who fill the order can access that information Slide #23-5 – Company analysts may obtain statistics for planning • Lawyers, company officials must approve release of any sensitive data Policy Development • Policy: minimize threat of data being leaked to Policy: minimize threat of data being leaked to unauthorized entities • Environment: 3 internal organizations – Customer Service Group (CSG) • Maintains customer data • Interface between clients, other internal organizations Development Group (DG Slide #23-6 – Development Group (DG) • Develops, modifies, maintains products • Relies on CSG for customer feedback – Corporate Group (CG) • Handles patents, lawsuits, etc.
Background image of page 3

Info iconThis preview has intentionally blurred sections. Sign up to view the full version.

View Full DocumentRight Arrow Icon
11/15/2010 4 Nature of Information Flow Publi • Public – Specs of current products, marketing literature • CG, DG share info for planning purposes – Problems, patent applications, budgets, etc. • Private CSG t i f lik dit d b Slide #23-7 – CSG: customer info like credit card numbers – CG: corporate info protected by attorney privilege – DG: plans, prototypes for new products to determine if production is feasible before proposing them to CG Data Classes Public data (PD): available to al • Public data (PD): available to all • Development data for existing products (DDEP): available to CG, DG only • Development data for future products (DDFP): available to DG only Slide #23-8 • Corporate data (CpD): available to CG only • Customer data (CuD): available to CSG only
Background image of page 4
11/15/2010 5 Data Class Changes DDFP DDEP: as products implemented • DDFP • DDEP PD: when deemed advantageous to
Background image of page 5

Info iconThis preview has intentionally blurred sections. Sign up to view the full version.

View Full DocumentRight Arrow Icon
Image of page 6
This is the end of the preview. Sign up to access the rest of the document.

This note was uploaded on 02/08/2012 for the course ITT 650 taught by Professor Dewey during the Spring '11 term at UNC Asheville.

Page1 / 35

Chapter_23_Slides - 11/15/2010 Chapter 23: Network Security...

This preview shows document pages 1 - 6. Sign up to view the full document.

View Full Document Right Arrow Icon
Ask a homework question - tutors are online