1. Morris Bennett Altman Director of Network Services Internet Security Officer Queens College, CUNY Morris.Altman@qc.cuny.edu Are You Exposed? Network Security Threats Inside The Perimeter

2. 18,000 full time equivalent students located in suburban New York City 76 acre campus with 33 buildings 5,000 computers on the campus network Wireless network covering 98% of the campus

3. Security Challenge - Hackers The Effect of Hackers –System down time –Network down time Outbound DOS attacks swamped Internet Link and/ or edge routers –Loss of productivity –Loss of confidence –Data Loss –Information disclosure

4. Security Challenge - Hackers Preventing Hackers –Firewall & Security Zones –System Updates –Account Policies One user per account Strong passwords Deactivate on departure –IDS/IPS –Application Firewall –Data Encryption

5. Security Challenge – Virus/Worm Preventing Infections –Keep systems up to date on all application/OS patches –Personal firewall enabled on every connected computer –Require antivirus on every connected computer –Make antivirus free for home use –Scan all e-mail for viruses

6. Security Answer – Security Policy Policies & Enforcement –Strong computer use policy –Conduct regular penetration test for all systems Servers Desktops –Deploy intrusion prevention technology Stop dangerous activity before damage is done –Deploy Network Access Control Staff

7. ForeScout’s CounterACT Intrusion Prevention –Identifies dangerous traffic before it damages our network –Works without signatures Network Access Control –Create and enforce network security policies –Does not require endpoint agent to interrogate and enforce policies

8. Morris Bennett Altman Director of Network Services Internet Security Officer Queens College, CUNY Morris.Altman@qc.cuny.edu Questions?