70 likes | 214 Views
Desktop Security Strategy. Common Solutions Group September 19, 2006 Bill Clebsch. Agenda. Why Do Universities Need Firewalls? What are the Other Methods? What Is Stanford’s Firewall Design? How Does the R1 Community Proceed?. How are Universities Targeted?.
E N D
Desktop Security Strategy Common Solutions Group September 19, 2006 Bill Clebsch
Agenda • Why Do Universities Need Firewalls? • What are the Other Methods? • What Is Stanford’s Firewall Design? • How Does the R1 Community Proceed?
How are Universities Targeted? • www.privacyrights.org tracks data breaches reported since the ChoicePoint incident, February 2005 • Between 2/15/05 to 2/20/06 there were 125 incidents reported, 53 million records compromised • 46% of these incidents were at colleges/universities • The breach pattern at colleges/universities 65% hacking 21% stolen computers 10% exposed online/sent email 4% dishonest insider September 2006 Common Solutions Group Meeting
What Is The Cost of An Incident? The Cost of Incidents • Breach of medical privacy award against U of WV: $2.3M • Privacy settlement for Mental Health Provider: $3.5M • Fundraising at Ohio University drops in response to security breaches: 25% reduction in donations (May-June 2005 vs 2006) The Cost of Incidents at Stanford • Campus-wide [non-destructive] infection: ($2M) • Credit card data: Next incident (~1.6M) • Email shut down: missed grant deadline: (Much bigger) • Stolen laptop: 5 donors notified: (Priceless) What is the Experience at Your School ? September 2006 Common Solutions Group Meeting
Steps to Secure Stanford’s Network Are You Taking Similar Steps? September 2006 Common Solutions Group Meeting
INTERNET 2 INTERNET DORMS Modems DSL VPN DORMS MED DORMS JENKINS ACCESS FIREWALL FIREWALL FIREWALL FIREWALL FIREWALL FIREWALL FIREWALL FIREWALL FIREWALL FIREWALL SUNet 10G BACKBONE EAST WEST 10 Firewalls deployed across various ECHs around campus 1 Firewall for Lab 1 Firewall as Spare Capacity up to 30 Security Zones per physical firewall CS/EE RTF PRESS What Does the Firewall Solution Look Like? September 2006 Common Solutions Group Meeting
What are the Best Ways to ProtectUniversity and PersonalDesktops & Laptops? September 2006 Common Solutions Group Meeting