Managing Secure Networks

1. Managing Secure Networks Matthew G. Marsh Chief Scientist, NEbraskaCERT President, Paktronix Systems LLC Note: Use of this material is restricted to acceptable use as defined in the document titled "Acceptable Use of NEbraskaCERT Educational Materials"

2. Overview • Principle of Inviolability • PoI - Definitions • Integrated Security Network • Security Blueprint • Network Design • Logical & I/O Design • Management Techniques • Baseline • SNMP • Logging • Fail safes/overs • CIA • Example

3. Principle of Inviolability An object is considered Inviolate when all communication with that object is provably limited to the scope of service provided by that object.

4. PoI - Definitions • Object • The entire set of devices/networks/etc that can be encapsulated by a defined boundry. • Communication • Any Input/Output through the boundary • Provably Limited • Both theory AND practice confirm the Communication and Boundary scopes. • Scope of Service • What the object provides through the boundary

5. Integrated Security Network • Fulfills PoI as an Object • Internally PoI consistent • Each internal object fulfills PoI • Defined Scope of Interaction • Security Blueprint

6. Security Blueprint • Define System/Network Boundary • PoI vs. Connectivity • Structure • Physical and Logical • Verification • Audit, Responsibilities • Define Devices/Services • PoI Dis- & Con- crete

7. Network Design • Physical Design • Secured Access Methods • Consideration of OS needs • Logical Design • Protocols • Control • InBand • OutBand • I/O Access • Public • Private • Secured

8. Logical & I/O Design • Protocols • IP, IPX, NetB{ios,uei} • Tuesday... • Control • InBand • VPN, SSH, VNC, ... • OutBand • Serial, Tunnelled Console • I/O Access (PoI) • Public • Private • Secured

9. Management Techniques • Baselines • SNMP • Remote Console Access • Logging • FailSafes/FailOvers

10. Baseline • Part of the Security Blueprint • Proof of ISN certification • Each Dis/Con crete element • PreLive Environment • Saturation and Failure modes • PostLive Environment • Verification and external awareness • OnGoing • New Structures and Additions/Subtractions

11. SNMP • V 1,2,3,... • What version does what • What does it really tell you • OS Support • Failure modes • Notification • OnGoing • New Structures and Additions/Subtractions • Historical Data (Baselines...)

12. Logging • Part of the Security Blueprint • Proof of ISN certification • Each Dis/Con crete element • Access Modes • In Band / Out Band • OS Support • Verification and external awareness • Analysis • Structures, Storage, Sync

13. Fail safe/over • Part of the Security Blueprint • Proof of ISN certification • Each Dis/Con crete element • PreLive Environment • Saturation and Failure modes • PostLive Environment • Verification and awareness • OnGoing • New Structures and Additions/Subtractions

14. CIA • Confidentiality • Verify who saw the data • Integrity • Verify the data is not modified • Authenticity • Verify the data owner • Cranial Inspection Authority

15. Example

16. Protocol Usage Matthew G. Marsh Chief Scientist, NEbraskaCERT President, Paktronix Systems LLC chief.scientist@nebraskacert.org