Archive for February, 2011

On the local network Telecommunications Internal info Communicate Network (L_DCN) to explain the security dangers exist, and from Network Safety, Technique safety, application security, details protection, management, security and other features of the appropriate safety options.

L_DCN Telecom is supporting the nearby network application method for all details network platform. L_DCN to Telecom’s client service, manufacturing management, enterprise development, internal management and deliver great comfort, but also brought several problems, particularly protection problems. How to guarantee the security of L_DCN has turn into carriers of data necessary for the healthful development and fixing the essential problems to contemplate. Primarily based on the L_DCN security chance assessment analysis, protection options.

1, L_DCN Position L_DCN is a personal computer-primarily based information communication integrated info network, telecommunications firms recognize details communication and resource sharing. L_DCN carrying the main details application programs: integrated enterprise management technique (that is, “97″ program), billing method, client service system (ie, technique No. 10000), the specialist network management method, OA, and so on.. Figure 1 for a telecommunications business L_DCN neighborhood network topology diagram, this all interpretations are based mostly on the topology.

Figure one L_DCN topology L_DCN far more complex applications, the data belong to diverse subnets, the subnet is L_DCN major part of integrated office network is between the numerous subnets. L_DCN export more to the provincial firm and the county (city) offices have interfaces, billing method interface to the bank, No. 10000 has its own Web system export. In addition, L_DCN in the customer are a lot of and widely distributed, often ADSL Or telephone dial-up Net customers. The exit of the lack of suitable security isolation facilities, in different security zones did not get proper security measures, the lack of required network protection audit measures from telecommunications businesses vulnerable to internal and exterior array of attacks and threats.

2, L_DCN protection pitfalls L_DCN the network by analyzing the structure and use of ISSScanner, X-Scan, Nmap and Sniffer.

On L_DCN the host, network, database and application methods to scan, keep track of, safety hazards arrive generally from L_DCN:

2.1 network security pitfalls 2.one.one Internet security risksThe Web to make on-line information sharing and opening up, there are significant protection pitfalls, simply because the survival of TCP / IP family members of the lack of appropriate security mechanisms, in a safe and trustworthy, QoS, Bandwidth, and so there is no adaptation, and the intention of customers is diverse. L_DCN there are ADSL or dial-up customers, producing L_DCN face, such as hackers trying to break into the security implications.

two.1.two outreach network protection risksL_DCN outreach network contain firms with provincial and county (city) organization, banks and other interfaces, there is not credible outreach network node regions on L_DCN result in some security threats. For illustration: an intruder can use the Scanner and other sniffer program, by scanning the current network and working method vulnerabilities this kind of as open TCP port, save the user name and password of the paperwork, and via the exploits of the L_DCN attack intruder can Sniffer network monitoring equipment these kinds of as access to L_DCN person names, passwords, and many others., and then fake-home legal standing for illegal log, telecommunications company to steal crucial data, this kind of as buyer data, financial info. Figure two identifies the vulnerability, remote buffer overflow can be consumer password.

Figure 2 identifies vulnerabilities two.one.3 internal network protection risksKnown network security incidents, about 70% of the attacks from internal network. L_DCN carrying different details programs have their very own private data and information, in between nodes in the internal network, there is great safety threat. For example: by Regional area network Entirely shared directory, you may inadvertently carry crucial info (these kinds of as the client information) stored in the shared directory, resulting in info disclosure internal management intentional or not leak method administrator person name and password and so on. Figure 3 is the use of weak super-consumer password info, check out the user’s machine in a sample.

Figure 3 weak passwords leak 2.2 system safety threat L_DCN exist in numerous sorts of server methods, Router, Swap As nicely as a big amount of desktop. Generally in server operating systems, database techniques and different application application systems routers and switches have the suitable working system. The technique far more or much less the existence of a “back again door” and loopholes, the default configuration, weak password or an empty password, unnecessary solutions, these as safety patches are not enjoying a important safety threat. Figure four that the SQLserver configuration sa person password is empty.

Figure four empty password hidden two.3 the threat of dataL_DCN several of the transmission of data in plaintext, an attacker can the network transmission line (in distinct, WAN ) Put in bugging products in the network transmission steal critical information, and then read info through a quantity of details engineering, resulting in leakage or do a thing to undermine the integrity of data tampering. The data transmitted in the network of insecurity on the telecom firms constitute a significant security danger.

two.four application protection hazards Programs are broad, dynamic, application protection is multifaceted. Exist in the existing L_DCN WWW browsing, E-mail, software program vulnerabilities and the “back again door”, resource sharing, the threat of viruses and other security applications.

2.5 the chance of network managementNetwork management is an essential aspect of L_DCN security. Inadequate safety management technique is an critical supply of network risk. Network administrator or the working technique is not configured appropriately and timely update patches safety holes triggered use of weak passwords consumer protection awareness is not sturdy, will be no cost to tell other people their own account and so on, these management troubles are, no issue how sophisticated security policies and network protection program are not addressed, will result in the L_DCN at chance.

three, L_DCN Protection Total Answer L_DCN Safety Total Answer. network protection audit