Morris Bennett Altman Director of Network Services Internet Security Officer Queens College, CUNY

1. Are You Exposed?Network Security Threats Inside The Perimeter Morris Bennett AltmanDirector of Network ServicesInternet Security OfficerQueens College, CUNY Morris.Altman@qc.cuny.edu

2. 18,000 full time equivalent students located in suburban New York City 76 acre campus with 33 buildings 5,000 computers on the campus network Wireless network covering 98% of the campus

3. Security Challenge - Hackers The Effect of Hackers • System down time • Network down time • Outbound DOS attacks swamped Internet Link and/or edge routers • Loss of productivity • Loss of confidence • Data Loss • Information disclosure

4. Security Challenge - Hackers Preventing Hackers • Firewall & Security Zones • System Updates • Account Policies • One user per account • Strong passwords • Deactivate on departure • IDS/IPS • Application Firewall • Data Encryption

5. Security Challenge – Virus/Worm Preventing Infections • Keep systems up to date onall application/OS patches • Personal firewall enabled on every connected computer • Require antivirus on every connected computer • Make antivirus free for home use • Scan all e-mail for viruses

6. Staff Security Answer – Security Policy Policies & Enforcement • Strong computer use policy • Conduct regular penetration test for all systems • Servers • Desktops • Deploy intrusion prevention technology • Stop dangerous activity before damage is done • Deploy Network Access Control

7. ForeScout’s CounterACT Intrusion Prevention • Identifies dangerous traffic before it damages our network • Works without signatures Network Access Control • Create and enforce network security policies • Does not require endpoint agent to interrogate and enforce policies

8. Questions? Morris Bennett AltmanDirector of Network ServicesInternet Security OfficerQueens College, CUNY Morris.Altman@qc.cuny.edu