Managed%20Security%20Process

1
Managed Security Vikas Khanduri
CCIE13516,CCSP,CCDP,CCNP,MCSE
2
Security

• Security Challenges
• Security Failure
• Verizon Managed Security Offering
• Why Verizon

3
State of the Internet

• Today 18 of the Internet bandwidth is attack
  traffic
• 30,000 hi-jacked computers waiting to attack
  systems
• Rapid expansion of regulatory requirements
• 1998 600 laws
• 2004 1,400 and growing
• Speedy updates are essential now
• 2004 it takes 10 days from known vulnerability to
  attack
• 2002 it was 180 days.
• MIT study showed that an un-patched NT system can
  be compromised in only 55 seconds
• Computer viruses and hacking took a 1.6 trillion
  toll on the worldwide economy - 266 Billion in
  the US

4
Regulatory Challenges

• Each of the Regulatory Requirements focus on
  different data elements
• HIPAA Medical Information
• GLBA Client Financial Records
• Sarbanes-Oxley Financial Records
• SB-1386 Personally Identifiable Client
  Information
• Regulatory compliance requires
• Confidentiality
• Data Integrity
• Identification and Authentication (IA)
• Authorization, Access Control and Audit (AAA)
• Monitoring and Incident Response
• Availabiilty
• Training

5
Operational Challenges

• Expanding Perimeters?
• Remote Access
• Secure Storage
• Wireless LANs
• VoIP
• Multi-platform management?
• Disparate Networks
• Multiple Vendors
• Multiple SW License
• Multiple staff skill sets

• Change Management?
• Inventory Control
• Latest Patches
• Virus Updates
• Threat awareness?
• Latest Vulnerabilities
• Zero-day Attacks

6
Existing Technology

• Firewalls and anti-virus dont provide 100
  protection
• Every year, 50 of all organizations suffer from
  a serious security breach
• 99 of organizations who suffered had both
  firewalls and anti-virus in place

Source 2003 CSI/FBI Computer Crime Research
Survey
7
A False Sense of Security
Firewalls and anti-virus were not capable of
stopping any of the last 4 major internet
attacks
(Add Phishing, Blaster, Sasser, etc.)
8
Corporate Security Process Failure
9
Verizon Managed Security Offering
10
Internal Security
Router
11
Internal Security
Router
12
VPN Premise Watch
VPN Tunnel
VPN Tunnel
VPN Tunnel
VPN Tunnel
VPN Tunnel
VPN Tunnel
VPN Tunnel
VPN Tunnel
VPN Tunnel
VPN Tunnel
Data Center
VPN Tunnel
VPN Tunnel
13
Value Added Data Services (VADS)
14
Managed Security Process
15
Why Verizon?

• Financially stable company
• Verizon Commitment
• Comprehensive security solution set
• Account reach
• Trusted Partner
• Technical Expertise CISSP,CCIE,CCSP,CCDP,CCNP,CCDA
  ,CCNA,MCSE