Visit booth #2167 to see the new ATEN VM3200 32 x 32 Modular Matrix Switch. Other highlights include the VE8950 4K HDMI Over IP Extender, VS1912 12-Port DP Video Wall Media Player and VK2100 ATEN Control System. Register now with Free Pass Code ATEN288!
Course Of The Month
4 days, 12 hours left to enrollBecome a Premium Member and unlock a new, free course in leading technologies each month.
Network Security
6K
Solutions
27
Articles & Videos
8K
Contributors
Network security consists of the policies adopted to prevent and monitor authorized access, misuse, modification, or denial of a computer network and network-accessible resources. Network security involves the authorization of access to data in a network, and covers a variety of computer networks; conducting transactions and communications among businesses, government agencies and individuals. Networks can be private, such as within a company, and others which might be open to public access.
Share tech news, updates, or what's on your mind.
Hello,
The vendor who does our security audit express concern about SSL certificate we are using on our websites. They mention version 3 and TLS v1 are not secured.
I check the version of the cert we purchase is SHA-2.
I usually purchase the latest version cert and apply it to my IIS website. Are there additional things I need to do?
Please advise.
Thanks.
The vendor who does our security audit express concern about SSL certificate we are using on our websites. They mention version 3 and TLS v1 are not secured.
I check the version of the cert we purchase is SHA-2.
I usually purchase the latest version cert and apply it to my IIS website. Are there additional things I need to do?
Please advise.
Thanks.
1 Comment
Dear zealots, I am configuring Routers and Switch to mitigate DDoS attacks, following this article: http://www.infosecwriters.com/Papers/HChau_Cisco-DoS-DDoS.pdf
However, when I enter "no ip directed-broadcast" into Router and Switch's interface mode, then it cannot be displayed when I hit "show run". Do you know why? My devices' version is 12.2 (Switch 3750/3560) and 15.1 (Router 3925)
And should I apply this command on VLAN interfaces in Switches?
However, when I enter "no ip directed-broadcast" into Router and Switch's interface mode, then it cannot be displayed when I hit "show run". Do you know why? My devices' version is 12.2 (Switch 3750/3560) and 15.1 (Router 3925)
And should I apply this command on VLAN interfaces in Switches?
In this blog we highlight approaches to managed security as a service. We also look into ConnectWise’s value in aiding MSPs’ security management and indicate why critical alerting is a necessary integration.
I have 300 Ubuntu 14 PC's that I block all internet except a whitelist - I do this by disabling dns, and have the central server do dns lookups for everything on whitelist and put it in a hosts file and have all the hosts use that. Obviously, this is a bit hacky but it worked.
The problem now - I have a need to whitelist *.slack.com. Slack says subdomains change too much, they cant provide a static list, or even a current list and then let me update it.
So I guess I need to enable DNS - what might be easy ways to still restrict to a whitelist of domains? I can easily run shell scripts on all 300 machines. (they check in with central server and grab a script and run it regularly). So anything I can install/configure via script is a viable option...
If it's not too hard I could set up an ubuntu machine to be a dns server.
Basically what I want is whatever is easiest so that I can just provide a whiltelist, that is allowed to have wild cards like *.slack.com and block everything else. I suppose it doesn't actually have to be a DNS based block if there is some client app.
Whatever it is, I am OK to set up a server myself - but the clients, it needs to be scriptable install/config.
I want to be able to update the whitelist easily/quickly.
Any ideas/suggestions?
The problem now - I have a need to whitelist *.slack.com. Slack says subdomains change too much, they cant provide a static list, or even a current list and then let me update it.
So I guess I need to enable DNS - what might be easy ways to still restrict to a whitelist of domains? I can easily run shell scripts on all 300 machines. (they check in with central server and grab a script and run it regularly). So anything I can install/configure via script is a viable option...
If it's not too hard I could set up an ubuntu machine to be a dns server.
Basically what I want is whatever is easiest so that I can just provide a whiltelist, that is allowed to have wild cards like *.slack.com and block everything else. I suppose it doesn't actually have to be a DNS based block if there is some client app.
Whatever it is, I am OK to set up a server myself - but the clients, it needs to be scriptable install/config.
I want to be able to update the whitelist easily/quickly.
Any ideas/suggestions?
Can you please suggest best IT security vulnerability reporting software like hackerone which will be also cost effective.
Only 10 days left to sign up for our ransomware prevention and preparation Course of the Month for June. With a 300% increase in ransomware attacks from 2015 to 2016, it is vital to decrease your vulnerability to the next attack and enhance your security by enrolling today.
UpGuard's cyber risk analyst, Chris Vickery, discovers 198 million US voting records in an Amazon S3 bucket freely available online. One particular spreadsheet also calculates the voters probabilities for situations such as "how likely you are to have voted for a certain presidential candidate". This breach is another reminder of how important personal data security is.
We have blocked yahoo, Hotmail, gmail, dropbox :
our audit says there are some lesser known ones that were
not blocked by our Bluecoat proxy.
Anyone can help list out these browser based emails &
file sharing tools ? Would like to cover more to be thorough
to prevent data loss/leakage
our audit says there are some lesser known ones that were
not blocked by our Bluecoat proxy.
Anyone can help list out these browser based emails &
file sharing tools ? Would like to cover more to be thorough
to prevent data loss/leakage
Hello Everyone!
We had some security cameras installed and the installer asked me to open port 8000 for the dvr. We have a Sonicwall 1260 Pro and I followed the instructions for port forwarding. I created the service for both TCP/UDP, port 8000 and then created the group. I used the public server wizard to allow public access to the camera ip. After everything was complete I used the site, http://www.yougetsignal.com/, to check if port 8000 was open. Unfortunately, the port is still closed. I'm stuck figuring what I could be doing wrong. We do have 2 static ips for the site. The other ip is used for the fax machine line. i don't know if this could cause the problem. Any help is appreciated.
Router: SonicWall 1260 Pro
ISP: Cox
WAN: 72.205.202.66
Camera IP: 192.168.168.62
Port: 8000
img.png
We had some security cameras installed and the installer asked me to open port 8000 for the dvr. We have a Sonicwall 1260 Pro and I followed the instructions for port forwarding. I created the service for both TCP/UDP, port 8000 and then created the group. I used the public server wizard to allow public access to the camera ip. After everything was complete I used the site, http://www.yougetsignal.com/, to check if port 8000 was open. Unfortunately, the port is still closed. I'm stuck figuring what I could be doing wrong. We do have 2 static ips for the site. The other ip is used for the fax machine line. i don't know if this could cause the problem. Any help is appreciated.
Router: SonicWall 1260 Pro
ISP: Cox
WAN: 72.205.202.66
Camera IP: 192.168.168.62
Port: 8000
img.png
We currently have a Dell Sonic Firewall that is our firewall as well as our company router. This is our main router for all of our sites in the company. We have 16. We implemented through our EMR (Electronic Medical Records) software an upload to a billing company. They in turn configure and print bills and send them out to our customers. This has worked fine for over two years. When this was implemented, we were not required to make any firewall changes at all.
A week ago, the user doing this procedure received an error that the file could not be uploaded. She called the EMR company, who in their effort to troubleshoot the problem, changed the upload method from ftp to sftp. She then tried to upload and she got an additional error that port 22 was unable to send. Seeing that error, the EMR said that the problem has to do with our firewall. I spoke with the billing company who tried to do a trace route to our external IP. They were unsuccessful, but I was able to do a trace route to them. The only caveat is that the user can do this procedure from home with no problem.
I am willing to make firewall changes if necessary, I just don't know what they would be or why it is necessary now, if no one has made any changes other than the upload method from ftp to sftp.
Please help. I am desperate.
A week ago, the user doing this procedure received an error that the file could not be uploaded. She called the EMR company, who in their effort to troubleshoot the problem, changed the upload method from ftp to sftp. She then tried to upload and she got an additional error that port 22 was unable to send. Seeing that error, the EMR said that the problem has to do with our firewall. I spoke with the billing company who tried to do a trace route to our external IP. They were unsuccessful, but I was able to do a trace route to them. The only caveat is that the user can do this procedure from home with no problem.
I am willing to make firewall changes if necessary, I just don't know what they would be or why it is necessary now, if no one has made any changes other than the upload method from ftp to sftp.
Please help. I am desperate.
Free NetCrunch network monitor licenses!
Only on Experts-Exchange: Sign-up for a free-trial and we'll send you your permanent license!
Here is what you get: 30 Nodes | Unlimited Sensors | No Time Restrictions | Absolutely FREE!
Act now. This offer ends July 14, 2017.
We recently migrated from SBS 2003 to Server 2012 R2. I have a user who frequently gets locked out of her account. She's the only one having the problem. It happens for reasons we cannot account. This morning she attempted to log in and couldn't. I was able to log into the machine as the domain admin. She logged in on the first attempt (so we know it's not password-related). We disabled the password policy, I unlocked her account on the server, she logged in on the first attempt, had her restart, she got locked out again. (Windows 7 workstation in case that makes any difference.)
I changed the domain security policy to disable lockouts (at least I think I did). I tried doing the same thing locally, but mmc (with the security policy snap in), and gpmc and secpol all had all lockout policy options greyed out.
No other users are having the problem, but I'd like to nip it in the bud just in case someone starts to have it. We never had any similar issue on SBS 2003. (Then again, 2003 probably had very little security.).
I've looked at several Microsoft articles, and most of them tell me to go to settings that are grayed out.
Anyone have any thoughts? Thanks. (If you could detail steps for what to do, please do so. I'm not super-familiar with the security components of WIndows Server.
I changed the domain security policy to disable lockouts (at least I think I did). I tried doing the same thing locally, but mmc (with the security policy snap in), and gpmc and secpol all had all lockout policy options greyed out.
No other users are having the problem, but I'd like to nip it in the bud just in case someone starts to have it. We never had any similar issue on SBS 2003. (Then again, 2003 probably had very little security.).
I've looked at several Microsoft articles, and most of them tell me to go to settings that are grayed out.
Anyone have any thoughts? Thanks. (If you could detail steps for what to do, please do so. I'm not super-familiar with the security components of WIndows Server.
It happens I need to keep my laptop (Windows 10 Home) powered on during night to save time for a lot of opened websites and documents I don't want to open anew each morning. But often when I resume work in the morning, the laptop is very slow when switching between the website tabs in the browser, and probably I get virus or other problems during night.
Is there any way I can protect it during nighttime, for example by turning off all ports? Otherwise, I only put it in sleep mode as it is now, but still it seems to get infected during nighttime.
Is there any way I can protect it during nighttime, for example by turning off all ports? Otherwise, I only put it in sleep mode as it is now, but still it seems to get infected during nighttime.
Hi,
I have a Windows 2016 Hyper-V server box that came with two network cards. First NIC is connected to internal LAN (192.168.1.x) and 2nd NIC is connected directly to ISP Internet modem (therefore, it receives a dynamic public IP address given by ISP DHCP server). On 2nd NIC, I intend to create a virtual machine ("TESTVM") where I like to try to open some suspicious email attachments or click on website links (to find out whether they are malicious). I have installed Malwarebytes Anti-Exploits/Anti-Malware
I plan on connecting to this VM thru remote desktop connection program (port# 3389, 3390 .. etc) using Dynamic DNS.
Having said that, I know a lot of experts would go against the idea of exposing the server to public internet.
I know that I could put another router (192.168.2.x) between 2nd NIC and ISP internet modem to enhance security, but what I like to know is how am I venerable as it is?
How could hackers penetrate to this server when the only account is "administrator" with secure password?
Thanks you for your insight.
I have a Windows 2016 Hyper-V server box that came with two network cards. First NIC is connected to internal LAN (192.168.1.x) and 2nd NIC is connected directly to ISP Internet modem (therefore, it receives a dynamic public IP address given by ISP DHCP server). On 2nd NIC, I intend to create a virtual machine ("TESTVM") where I like to try to open some suspicious email attachments or click on website links (to find out whether they are malicious). I have installed Malwarebytes Anti-Exploits/Anti-Malware
I plan on connecting to this VM thru remote desktop connection program (port# 3389, 3390 .. etc) using Dynamic DNS.
Having said that, I know a lot of experts would go against the idea of exposing the server to public internet.
I know that I could put another router (192.168.2.x) between 2nd NIC and ISP internet modem to enhance security, but what I like to know is how am I venerable as it is?
How could hackers penetrate to this server when the only account is "administrator" with secure password?
Thanks you for your insight.
I have 5 IP/s available from my ISP. One IP is for am internal website (registered at godaddy) and we are using 1 for our router IP that I plan to use for port forwarding (VPN, RDP). I am unable to assign the Wan interface to 2 different IP's. Could not find answer in manual.
We developed some apps for our customers. Besides scanning our mobile/IOS
website, auditors have required that we scan the IOS/Android apps that we have
developed for our customers IOS devices.
Q1:
is this a feasible or common practice to scan the apps running on clients IOS?
Q2:
What are some of these scanning tools that anyone can suggest?
Q3:
My view is to scan the mobile portal that we offers, not client's mobiles/iPad
website, auditors have required that we scan the IOS/Android apps that we have
developed for our customers IOS devices.
Q1:
is this a feasible or common practice to scan the apps running on clients IOS?
Q2:
What are some of these scanning tools that anyone can suggest?
Q3:
My view is to scan the mobile portal that we offers, not client's mobiles/iPad
Q1:
Does anyone scan Disaster recovery site, UAT, SIT & Development
sites?
Q2:
For cold DR site that uses the same public & even the same
internal IP (as in ours) & same URL, I presume external it's not
possible as we'll hv duplicate IP. One PCI-DSS doc suggests to
do VA & PT scans only for warm & hot sites: is this the common
practice?
Q3:
What about internal VA? Do we do it on UAT, SIT & cold DR?
Q4:
Assuming cold site DR is powered down / isolated (ie not used
by even internal users), still worth doing external pentest &
internal VA? When we apply fixes/patches/address vulnerabilities,
we propagate to our cold DR
Any best practice papers / authoritative links will be appreciated
Does anyone scan Disaster recovery site, UAT, SIT & Development
sites?
Q2:
For cold DR site that uses the same public & even the same
internal IP (as in ours) & same URL, I presume external it's not
possible as we'll hv duplicate IP. One PCI-DSS doc suggests to
do VA & PT scans only for warm & hot sites: is this the common
practice?
Q3:
What about internal VA? Do we do it on UAT, SIT & cold DR?
Q4:
Assuming cold site DR is powered down / isolated (ie not used
by even internal users), still worth doing external pentest &
internal VA? When we apply fixes/patches/address vulnerabilities,
we propagate to our cold DR
Any best practice papers / authoritative links will be appreciated
After the WannaCry ransomware attack, we sat down with Thomas Zucker-Scharff to get the inside information on the technology behind the attack and what steps you can take to prevent this in the future. Read more of his advice. Take a step toward your security by enrolling in our free Course of the Month covering ransomware security and prevention written by Thomas.
I have a hacker who has compromised my network, devices and my life for over a year. I have found various devices connected to my lab top via blue tooth, unknown devices on my wifi network and have collected a bunch of networking logs and see things on there that shouldn't be there, I believe. It's a lot of information that I really don't know how to read and I don't know what information is important. So I'm looking to hire somebody to review the logs and information that I found and tell me what information should be looked at more closely, what information needs to be investigated further, etc.
Definitely willing to pay.. Contact me privately if you have history in this area.
Definitely willing to pay.. Contact me privately if you have history in this area.
NYS 20th Annual Cyber Security Conference
I will be attending this conference in Albany, N.Y. this Wednesday and Thursday. If you are going to be there, ley me know (maybe we can meet).
Over the years I have become more involved in security related areas of information technology. I hope to learn more/ keep up to date by attending this conference.
I will be attending this conference in Albany, N.Y. this Wednesday and Thursday. If you are going to be there, ley me know (maybe we can meet).
Over the years I have become more involved in security related areas of information technology. I hope to learn more/ keep up to date by attending this conference.
Active today
That sounds great, Thomas! I'm a huge fan of the Socratic method (to the point where I get worried some people may try to poison me one day... j/k ;-) And thinking strategically about anything can be quite a challenge, but an increasingly important one as more and more of the tactical type work is moving entirely into automation.
Not familiar with Bloom's Taxonomy; I'll have to go look that one up...
Looking forward to the summary!
Not familiar with Bloom's Taxonomy; I'll have to go look that one up...
Looking forward to the summary!
Active today
My summary of the 20th Annual New York State Cyber Security Conference & 12th Annual ASIA conference
The conference as a whole was very interesting, although if one has to make a choice between this one and some others, you may want to check out the others. This conference is aimed mainly at government agencies. So it addresses the various compliance issues with which they have to deal. If those do not apply to you, this conference may have limited application as well.
I did enjoy putting some faces to people I had only corresponded with. I also wanted to hear as much as possible about ransomware (these presentations turned out to be only okay), and cryptography (not a gripping presentation – it was a presentation of thesis work and ongoing research – but nonetheless very interesting). They did a good job of setting you up for the days events with a decent Keynote speaker. The lunch speakers were not as polished, but did have good things to say.
I enjoyed going around to the vendors , even if their swag was not class A stuff. (some had excellent stuff while others had none – the full gamut)
I have to say again that the highlight of the conference, for me, was the very non-technical, and only slightly security related talk by Christie Struckman of the Gartner Group, session 4 on the first day. I would encourage anyone in a leadership position to check it out. I have asked for her slides and will try to make a pdf of them available if she is amenable to that. My takeaway on that talk was: There are leaders and there are Bosses. The leaders help their teams think about solutions and then make decisions, the bosses make decisions and tell their teams to carry them out. I think the quote she used at the beginning was excellent:
The conference as a whole was very interesting, although if one has to make a choice between this one and some others, you may want to check out the others. This conference is aimed mainly at government agencies. So it addresses the various compliance issues with which they have to deal. If those do not apply to you, this conference may have limited application as well.
I did enjoy putting some faces to people I had only corresponded with. I also wanted to hear as much as possible about ransomware (these presentations turned out to be only okay), and cryptography (not a gripping presentation – it was a presentation of thesis work and ongoing research – but nonetheless very interesting). They did a good job of setting you up for the days events with a decent Keynote speaker. The lunch speakers were not as polished, but did have good things to say.
I enjoyed going around to the vendors , even if their swag was not class A stuff. (some had excellent stuff while others had none – the full gamut)
I have to say again that the highlight of the conference, for me, was the very non-technical, and only slightly security related talk by Christie Struckman of the Gartner Group, session 4 on the first day. I would encourage anyone in a leadership position to check it out. I have asked for her slides and will try to make a pdf of them available if she is amenable to that. My takeaway on that talk was: There are leaders and there are Bosses. The leaders help their teams think about solutions and then make decisions, the bosses make decisions and tell their teams to carry them out. I think the quote she used at the beginning was excellent:
Put Machine Learning to Work--Protect Your Clients
Machine learning means Smarter Cybersecurity™ Solutions.
As technology continues to advance, managing and analyzing massive data sets just can’t be accomplished by humans alone. It requires huge amounts of memory and storage, as well as high-speed processing of the cloud.
I am going to setup a new PFSense firewall. There are few pieces of equipment on the network that I don't want to have to pay for public facing static IP's for, but I would like to open ports up so they are publicly available to the maintenance people when they are offsite. How do I go about containing those IP's so they can only see out to the internet and not internal to the network in case those pieces of equipment were to be compromise?
Hi,
I am working on a tenable nessus audit file for ibm aix.
What i am trying to achieve is 2 compliance check on the /etc/hosts.equiv file:
1. To find all UID less that 100 and UID not equals to the default system user ids (0,1,2,3,4,5)
2. To find all GID less that 100 and GID not equals to the default system group ids (0,1,2,3,4,5)
<custom_item>
type: CMD_EXEC
description: "UID less than 100 and not system default UID"
cmd: ""
expect: ""
</custom_item>
<custom_item>
type: CMD_EXEC
description: "GID less than 100 and not system default GID"
cmd: ""
expect: ""
</custom_item>
I am really new to working with tenable and also new to aix.
Really apperciate if anyone can help me out with what i should put for the cmd and expect statement on how to make the compliance check work.
Thanks really apperciate it!
Link: https://www.ibm.com/support/knowledgecenter/ssw_aix_71/com.ibm.aix.security/passwords_etc_passwd_file.htm
I am working on a tenable nessus audit file for ibm aix.
What i am trying to achieve is 2 compliance check on the /etc/hosts.equiv file:
1. To find all UID less that 100 and UID not equals to the default system user ids (0,1,2,3,4,5)
2. To find all GID less that 100 and GID not equals to the default system group ids (0,1,2,3,4,5)
<custom_item>
type: CMD_EXEC
description: "UID less than 100 and not system default UID"
cmd: ""
expect: ""
</custom_item>
<custom_item>
type: CMD_EXEC
description: "GID less than 100 and not system default GID"
cmd: ""
expect: ""
</custom_item>
I am really new to working with tenable and also new to aix.
Really apperciate if anyone can help me out with what i should put for the cmd and expect statement on how to make the compliance check work.
Thanks really apperciate it!
Link: https://www.ibm.com/support/knowledgecenter/ssw_aix_71/com.ibm.aix.security/passwords_etc_passwd_file.htm
We need to have a standalone IPS solution put in. We currently run two pfSense firewalls in an HA setup. I was looking around on eBay and saw a Tipping Point 210E (two of them). Are they still good with updates to definitions? Any other less cost recommendations?
pfSense HA works a little odd too, so I'm not sure if this will even work.
Firewall 1 WAN IP x.x.x.1
Firewall 2 WAN IP x.x.x.2
Firewall Shared WAN IP x.x.x.3
Same setup with internal LAN IPs. Each firewall has its own physical connection to the modem via ethernet for the WAN side and LAN side.
pfSense HA works a little odd too, so I'm not sure if this will even work.
Firewall 1 WAN IP x.x.x.1
Firewall 2 WAN IP x.x.x.2
Firewall Shared WAN IP x.x.x.3
Same setup with internal LAN IPs. Each firewall has its own physical connection to the modem via ethernet for the WAN side and LAN side.
I am setting up a linux server on a small network for people to access their files, each windows computer will have local login.
I will create logins on the linux server that will be for each individual on the network.
I will map each computer with the appropriate folders that belong to those users.
How can I handle it if someone else needs to use someone else's computer and would like to access their personal files?
Should I have 2 logins, one belonging to the user of that system and a guest of some sort but how can they get to their files easily without needing me to map the drive for them? I need simple because these are not very technical people.
thanks
I will create logins on the linux server that will be for each individual on the network.
I will map each computer with the appropriate folders that belong to those users.
How can I handle it if someone else needs to use someone else's computer and would like to access their personal files?
Should I have 2 logins, one belonging to the user of that system and a guest of some sort but how can they get to their files easily without needing me to map the drive for them? I need simple because these are not very technical people.
thanks
Any simple and good reference to explain the difference between time-based one time password and traditional OTP?
Besides, what are the risks and concerns of using freeware token app, e.g. FreeOTP?
Besides, what are the risks and concerns of using freeware token app, e.g. FreeOTP?
One PCI DSS assessor had suggested that our Data Domain (sort of VTL as we have
replaced tapes with disks which we backup to remotely to our DR site) ought to be
encrypted.
Internally storage team argued that shouldn't we
a) encrypt at source & only selective sensitive data ? Then we have much less
to encrypt
b) encrypting entire data domain will entails more load (tho I've seen EMC's
solution for this)
c) our assessor's justification is there may be sensitive data (eg: PAN or
credit card#) in the logs that get backup from our Prod to DR site thus
the need to encrypt it at destination
d) I know encrypting tapes is highly recommended as tapes are transported
offsite (for storage) during transit, tapes may get lost. But if we are using
point-to-point link between our Prod & DR sites, there's no risk of losing
media in transit. Is this argument valid?
e) Also, should a HDD in a SAN get faulty & is being returned to vendor, what
are the chances anyone or even a determined hacker could read the faulty
(or even if it's not faulty) HDD for sensitive data? Data is spliced randomly
in SAN's HDD, virtually making data in the HDD undecipherable?
f) when data is being backup from our Prod datacentre to DR site using
point-to-point leased line (assuming the line do not have encryption),
what's the risk it could be tapped or subject to MITMA? Any security
guideline that says backup traffic that is not …
replaced tapes with disks which we backup to remotely to our DR site) ought to be
encrypted.
Internally storage team argued that shouldn't we
a) encrypt at source & only selective sensitive data ? Then we have much less
to encrypt
b) encrypting entire data domain will entails more load (tho I've seen EMC's
solution for this)
c) our assessor's justification is there may be sensitive data (eg: PAN or
credit card#) in the logs that get backup from our Prod to DR site thus
the need to encrypt it at destination
d) I know encrypting tapes is highly recommended as tapes are transported
offsite (for storage) during transit, tapes may get lost. But if we are using
point-to-point link between our Prod & DR sites, there's no risk of losing
media in transit. Is this argument valid?
e) Also, should a HDD in a SAN get faulty & is being returned to vendor, what
are the chances anyone or even a determined hacker could read the faulty
(or even if it's not faulty) HDD for sensitive data? Data is spliced randomly
in SAN's HDD, virtually making data in the HDD undecipherable?
f) when data is being backup from our Prod datacentre to DR site using
point-to-point leased line (assuming the line do not have encryption),
what's the risk it could be tapped or subject to MITMA? Any security
guideline that says backup traffic that is not …
Network Security
6K
Solutions
27
Articles & Videos
8K
Contributors
Network security consists of the policies adopted to prevent and monitor authorized access, misuse, modification, or denial of a computer network and network-accessible resources. Network security involves the authorization of access to data in a network, and covers a variety of computer networks; conducting transactions and communications among businesses, government agencies and individuals. Networks can be private, such as within a company, and others which might be open to public access.
Top Experts In
Network Security
-
1
masnrock9,800 points -
2
Experts Exchange6,082 points -
3
btan4,811 points -
4
Craig Beck3,000 points -
5
Gary Patterson2,800 points -
6
joharder2,800 points -
7
Andrew Hancock (VMware vExpert / EE MVE^2)2,000 points -
8
Shaun Vermaak2,000 points -
9
Teksquisite1,708 points -
10
Dale McKay1,600 points -
11
McKnife1,480 points -
12
arnold1,400 points
-
13
bbao1,200 points -
14
pgm5541,000 points -
15
Allan Nisbet1,000 points -
16
Andy Bartkiewicz1,000 points
-
17
Ski Condry1,000 points
-
18
Natty Greg920 points -
19
Wayne88800 points -
20
David Favor800 points -
21
Brian B500 points -
22
Brandon Dube500 points -
23
Tom Cieslik500 points -
24
Ramin400 points -
25
Rich Rumble338 points