90 likes | 303 Views
Denise Sumikawa CIAC Program Leader LLNL-PRES-403246. DOE Computer Incident Advisory Capability (CIAC) May 7, 2008. Lawrence Livermore National Laboratory, P. O. Box 808, Livermore, CA 94551.
E N D
Denise Sumikawa CIAC Program Leader LLNL-PRES-403246 DOE Computer Incident Advisory Capability (CIAC) May 7, 2008 Lawrence Livermore National Laboratory, P. O. Box 808, Livermore, CA 94551 This work performed under the auspices of the U.S. Department of Energy by Lawrence Livermore National Laboratory under Contract DE-AC52-07NA27344
CIAC provides cyber security services to 96 DOE and NNSA Laboratories and Field Facilities
CIAC offers a full range of cyber security services to protect DOE DOE-Wide CIAC Services Watch and Warn Response Prevention Monitor security sites Network traffic analysis Security notifications 24x7 “on-call” incident response Response tools & scripts Malcode analysis DOE incident reporting Security architecture consulting White-hat assessments Technology watch Collaborating with Local Site Security Capabilities and Personnel
CIAC culls out actionable information from network traffic data ~ 250 Million Sessions per Day Site and Security Notifications Analysis Reports Analysis Query Results High Low Data Volume
CIAC’s web and application security service helps protect DOE against application layer attacks • Full or Self-serve (sites scan their own) • 190 Assessments completed • C&A Web Site Testing
CIAC collaborates with DOE, NNSA, Federal, and International cyber security teams Partnering for a secure DOE