Securing the enterprise network

목차 (Table of Contents)

• CONTENTS
• Introduction = 1
• 1. Executive Summary = 5
• Survey of Systems Managers = 7
• Security Threats Growing = 7
• Key Survey Findings = 10
• Security Techniques = 13
• Steps to Securing Your Network = 15
• Importance of Information = 15
• Conclusion = 21
• 2. The Changing Nature of Network Security = 23
• Securing the New Environment = 24
• Security Strategies for Telecommuters = 25
• Multiple Platform Tools = 26
• Network Operating System Deficiencies = 27
• Network Security Failure Points = 29
• Key Features of Network Security Software = 30
• End-to-End Security Function = 31
• Local Area Network Security = 31
• A Complicated Environment = 32
• Centralized Control = 34
• Tighter Security = 37
• Toward a Trusted Network = 38
• Security Steps = 39
• An Audit Trail = 39
• Encrypting Local Area Networks = 42
• 3. New Security Threats = 45
• Client ／ Server Security = 45
• Securing Remote Access = 47
• Open Network Security = 52
• Defending Against Threats = 55
• Authentication = 56
• Authorization = 58
• Auditing : Defense by Deterrence = 59
• Nonrepudiation = 59
• Data Privacy = 60
• The People Side of Security = 60
• Security Trade-offs = 61
• UNIX Security = 61
• Laptop Protection = 63
• 4. Internet and Web Security = 65
• Internet Vulnerabilities = 68
• Under Attack = 70
• Computer Viruses = 72
• U.S. Government Problems and Solutions = 73
• Internet Protocol Hijacking = 76
• The Need for Firewalls = 79
• Dangerous Services = 81
• TP Applications and the Internet = 82
• Security Layers = 84
• Hewlett-Packard's Internet Strategy = 84
• Security Attarcts Hackers = 85
• Paradox of Internet Security = 88
• Inviting Strangers to Your Site = 93
• Standards = 95
• Standards Boards = 95
• Securing Internet Transmissions = 102
• 5. Intranet Security = 105
• Intranet Exposure = 107
• Room for Security Improvement = 110
• Problems with Emerging Technologies = 113
• Hand-in-Hand = 115
• Technology Options = 116
• Microsoft and Its Intranet Security = 117
• 6. The Quest for Comprehensive Security = 119
• Extending Mainframe Security = 120
• Client ／ Server Security = 123
• The Administration Issue = 124
• Single Sign-on = 125
• Integrity and Authorization = 126
• Business Resumption Planning = 126
• Virus Infections = 127
• Remote Access = 128
• The Local Area Network Menace = 129
• 7. Network Security Challenges = 131
• The LAN Connection = 131
• Five Security Domains = 133
• Domain 1 : Internet Security = 135
• Domain 2 : Workgroup Security = 136
• Domain 3 : Mobile User Security = 138
• Domain 4 : Remote Office Security = 138
• Domain 5 : Integrated Enterprisewide Security = 139
• 8. Network Security Solutions = 141
• Encryption = 142
• The Data Encryption Standard = 147
• Private or Public Key = 147
• Packet or Payload Encryption = 152
• Authentication = 153
• Web Encryption = 157
• Local Area Network Encryption = 158
• Data Encryption Standard Protection Threatened = 161
• Encryption Politics = 163
• Auditing = 165
• Types of Attack = 165
• Tiger Teams = 168
• Knowledge Is Power = 169
• The Missing Link = 174
• Auditing NT and NetWare Networks = 179
• Firewalls = 180
• Definition = 185
• Open to Attack = 187
• Firewall Approaches = 188
• Routers and Packet Filters = 189
• Only a First-line Defense = 192
• Application-layer Firewalls = 192
• Three Types of Firewalls = 194
• Host-based Firewalls = 194
• Isolation Networks = 195
• Options = 196
• Firewall Features and Marketplace = 196
• Security Practices = 200
• Security Policies = 202
• Security Best Practices = 206
• Four Types of Security = 208
• Fire wall Implementation Mistakes = 209
• Outsourcing Firewalls = 211
• Firewall Information on the Internet = 212
• SWAT Teams = 213
• 9. Developing Security Issues = 219
• Integrating NT and OpenVMS Security = 219
• Scalability = 223
• AS ／ 400 Security = 226
• Securing Relational Databases = 229
• 10. The Future of Network Security = 237
• Security Servers = 237
• New Security Challenges = 240
• Likely Victims = 242
• The Internet : The Greatest Security Challenge = 245
• Electronic Commerce and Securty = 248
• Conclusion = 250
• LIST OF FIGURES
• 1.1 Security : A Growing Priority = 5
• 1.2 Importance of Security = 9
• 1.3 Security Changes = 10
• 1.4 Number of Employees Assigned to Security = 10
• 1.5 Key Obstacles to Implementing Security = 12
• 1.6 Costly Security Problems = 13
• 1.7 Asset Security Priorities = 16
• 1.8 Key Security Concerns = 16
• 1.9 UNIX Operational Dependency = 17
• 1.10 Importance of Security = 18
• 1.11 Organizations with UNIX-related Security Policies = 18
• 1.12 Organization with Formal UNIX Security Training = 19
• 1.13 UNIX Security Knowledge = 19
• 1.14 UNIX Security Resources = 20
• 1.15 Tools Used to Manage UNIX Security = 20
• 2.1 How Kerberos Works = 36
• 4.1 Security Breaches by Hackers = 66
• 4.2 Internet Intimidation = 67
• 4.3 Internet Security Breaches = 68
• 4.4 Preferred Internet Service Provider Features = 77
• 4.5 How Companies Protect Themselves on the Internet = 80
• 5.1 Time Reference for Corporate Intranet Strategy Implementation = 106
• 6.1 Local Area Network Security : Importance and Implementation = 130
• 7.1 The Vulnerability Index for Centralized Data Centers = 132
• 7.2 The Five Domains of Network Security : An Integrated Approach to Protecting the Enterprise = 134
• 7.3 Application-level Firewalls = 135
• 7.4 Virtual Private Networking = 137
• 8.1 Future Direction of Hardware-based Security Systems = 144
• 8.2 Keying-in to Security = 148
• 8.3 A Kerberos Secure Enterprise Network = 149
• 8.4 Overview of a Kerberos Secure Transaction = 150
• 8.5 Interrealm Requests = 150
• 8.6 "No Trespassing" Signs for the Enterprise = 153
• 8.7 Time Synchronous Authentication = 154
• 8.8 The Challenge Response Scheme = 154
• 8.9 Security Dynamics' Web Authentication = 156
• 8.10 Firewall Perspectives = 181
• 8.11 Worldwide Firewall Shipments = 185
• 8.12 Firewalls-All Shapes and Sizes = 186
• 8.13 How to Keep Internet Bandits at Bay = 187
• 8.14 Programmable Router = 189
• 8.15 Ethernet Firewalls = 191
• 8.16 Packet-versus Application-layer Firewalls = 193
• 8.17 Sidewinder's Type Enforcement = 197
• 8.18 Digital's Three-way Isolation = 198
• 8.19 Security Preparation = 200
• 9.1 Windows NT Computers in a Domain = 221
• 9.2 Windows NT Workgroup without a Server = 222
• 9.3 Windows NT Domains Can Share Security = 223
• 9.4 Access Control Entry Assigns Privileges for a Document = 225
• LIST OF TABLES
• 1.1 What Is Wrong with Your Security? = 6
• 1.2 Top Five Technologies = 7
• 1.3 Security Suggestions for Distributed Networks = 14
• 2.1 Comparative Specifications = 41
• 3.1 Performing an Effective Risk Assessment = 49
• 3.2 Suppliers of Remote Access Protection = 51
• 4.1 A Guide to Application = 83
• 8.1 Simple Security Steps = 141
• 8.2 Encryption Terminology = 142
• 8.3 Various Authentication Technique Weak Points = 153
• 8.4 Cleaning Web Messes = 158
• 8.5 Well-known TCP／UDP Port Numbers = 190
• 8.6 Firewall Protection = 194
• 8.7 NCSA Firewall Certification Applicants = 196
• 9.1 OpenVMS and Windows NT Use Many Similar Security Concepts = 220
• 9.2 Availability of Security Toolkit for AS／400 = 227
• 9.3 Security Program Temporary Fixes = 228
• 9.4 Basic Relational Database Management System Products = 230
• 10.1 The New Security Challenge = 240
• 10.2 Security Checklist = 249