今企業が取るべきセキュリティ対策とは策

Size: px

Start display at page:

Download "今企業が取るべきセキュリティ対策とは策"

うきえかいて
4 years ago
Views:

2 AGENDA Symantec Corporation.

3 70,000 (Code Red, Nimda) Number of Known Threats 60,000 50,000 40,000 30,000 20,000 DOS (Yahoo!, ebay) (Love Letter/Melissa) 10,000 (Tequila) Symantec Corporation. Source: Symantec

4 Symantec Corporation BP

5 Disappearing Perimeter IDC Symantec Corporation.

6 6 IT Symantec Corporation.

7 7 CSI/FBI 2001 Computer Crime and Security Survey Source: Computer Security Institute Symantec Corporation. Internet 2001: 384 /72% 2000: 443 /68% 1999: 324 /62% 1998: 279 /54% 1997: 391 /69% 1996: 174 /40%

8 Symantec Corporation. LAN LAN LAN V Web Web Web

9 Symantec Corporation. DoS

10 CERT 10 CERT Symantec Corporation.

11 DoS DDoS Symantec Corporation.

12 CodeRed 26.2US Symantec Corporation.

13 Port Symantec Corporation.

14 CodeRed Symantec Corporation.

15 (Cyber Space) THE NATIONAL STRATEGY TO SECURER CYBER SPACE Symantec Corporation.

16 OS 99% CERT Symantec Corporation. OS CERT/CC

17 Web OpenSSH Apache Web IIS rl=/japan/technet/security/bulletin/fq asp l=/technet/security/bulletin/ms asp Symantec Corporation.

18 Apache SecurityFocus DB Symantec Corporation. SecurityFocus DB

19 IIS SecurityFocus DB Symantec Corporation. SecurityFocus DB

20 JNSA TOP5 Ver % Symantec Corporation.

21 Symantec Corporation.

22 OS Symantec Corporation.

23 Symantec Corporation.

24 1. 2. Symantec AntiVirus Family 3. Symantec Enterprise Security Architecture Symantec Corporation.

25 Symantec Enterprise Security Manager Security Focus DeepSight Symantec Corporation.

26 Symantec Enterprise Security Manager (ESM) Security Focus DeepSight Symantec Corporation.

27 ESM Symantec Enterprise Security Manager Symantec Corporation.

28 ESM ESM XX 28, etc & Symantec Corporation. ESM

29 ESM Phase1Phase3 ISO Symantec Security Response team CERT Coordination Center SANS Institute Computer Incident Advisory Center (CIAC) Center for Internet Security (CIS) National Infrastructure Protection Center (NIPC) National Security Agency (NSA) Information Systems Audit and Control Association (ISACA) Application and operating system vendors Symantec Corporation.

30 Symantec Corporation.

31 Windows / Unix Symantec Corporation.

32 Symantec Corporation.

33 3 Everyone Everyone RRAS RAS TCP TCP Symantec Corporation.

34 4 OS OS OS OS OS Symantec Corporation.

35 Symantec Corporation. ESM3 InternetWAN ESM ESM

36 HTML Symantec Corporation.

37 Case Study 1 ESM Symantec Corporation.

38 Case Study ESM Windows Unix rc Symantec Corporation.

39 Case Study CodeRed OS ESM OS OS Symantec Corporation.

40 Case Study ESM MD Symantec Corporation.

41 41 ISO OS Symantec Corporation. WindowsNT,2000,XP,Solaris,HP-UX,AIX Web Server IIS,Apache,iPlanet Database Oracle,DB2 Firewall Checkpoint FireWall-1,Symantec Enterprise Firewall AntiVirus Norton AntiVirus Corporate Edition

42 DeepSight Symantec Corporation.

43 NEW - DeepSight Symantec Corporation.

44 170 14, Symantec Corporation.

45 IDS Attack Correlation Engine Vulnerability & Event Databases Threat Analysts IDS Analyzer DB Threat Management Local System Global Symantec Corporation.

46 DB IP IDS Symantec Corporation.

47 ThreatCon Level 1 Level 2 Level 3 Level Symantec Corporation.

48 ISP IP Symantec Corporation.

49 Symantec Corporation. IDS

50 ,000 DB Symantec Corporation.

51 / Symantec Corporation.

52 Symantec Corporation.

1. 2

1. 2 2004 1. 2. 1. 2 Web 3 4 5 6 PDA 7 USB CD DVD 8 9 10 11 LAN 12 13 14 P2P Web USB CD,DVD PDA 15 CD,DVD USB 16 17 18 19 VPN 20 PC 21 LAN 22 23 24 ISO/IEC17799 25 26 27 28 29 DDoS DoS DoS DDoS DoS ( ) ( )