IT security Are you protected against hackers?

Why are we in danger?  The Internet is worldwide, publicly accessible  More and more companies and institutes are connected to the Internet – they are the potential target  New customers => new hackers

Why are we in danger? /2  Anyone can connect to the Internet (Internet Cafes, Hot spots, etc.)  Downloadable hacker tools, articles  New worms and viruses weekly

Probable attack types  Attacks against web services  Spyware, adware  Spam  DoS (Denial of Service)  Attacks in the application layer  Portscan  etc.

Security rules  The network must be divided into security zones  Each zone has own security rules  Between these zones there must be a device, which is usually the firewall

Firewall architectures There are typically three basic firewall architectures:  Basic Border  Basic with DMZ Network  Dual Firewalls with DMZ Network

Demilitarized Zone (DMZ)  Demilitarized Zone  It is a firewall configuration for securing local area networks (LANs)  In a DMZ configuration, most computers on the LAN run behind a firewall connected to a public network like the Internet.

Demilitarized Zone (DMZ) /2  One or more computers also run outside the firewall, in the DMZ  Those computers on the outside intercept traffic and broker requests for the rest of the LAN, adding an extra layer of protection for computers behind the firewall.

Basic border firewall  A single-layer solution  Every firewall function on one device  Simple  Cheap  The least secure solution

Basic firewall with DMZ Network  We have server(s) providing services to the outside network  The server is the most endangered  We put it into a new network, which is the DMZ  Better security and reliability

Dual firewall with DMZ Network  Two firewalls:  Outer  Inner  The network is divided into 3 segments:  Outer network  DMZ  LAN  Different architecture of the firewalls is practical – it’s more safe

What can you do?  Use personal firewall  It is a software running on the PC  Protection for home networks  Should be used on every computer  Cheap or free solution  Easy to configure and use  It has limited capabilities