Network Security Management with Firewalls Proprietary Data Personnel Data Sensitive Data.pdf

Network Security Management with Firewalls Stephen P. Cooper Advanced Security Projects Computer Security Technology Center Lawrence Livermore National Laboratory Email: SPCooper@LLNL.GOV Computer Security Practitioners Conference February 7, 1996 UCRL-MI-123352 Work performed under the auspices of the U.S. Department of Energy by Lawrence Livermore National Laboratory under Contract W-7405-ENG-48. Reference to any specific commercial product, process, or service by trade name, trademark, manufacturer, or otherwise, does not necessarily constitute or imply its endorsement, recommendation or favoring by the U.S. Department of Energy or the University of California. This is your network... Proprietary Data Personnel Data Sensitive Data This is your network on the Internet Proprietary Data Personnel Data Sensitive Data VIRUS Trojan Horse Computer Security Technology Center 4Network Security Management with Firewalls Unless you have a Firewall Proprietary Data Personnel Data Sensitive Data Computer Security Technology Center 5Network Security Management with Firewalls Why a firewall? ? You have information and resources that need protection. ? You have a need to connect to a network that has a different view of the world. ? Strong host-based security is too costly or difficult. Computer Security Technology Center 6Network Security Management with Firewalls On the WWW, everyone is a neighbor Computer Security Technology Center 7Network Security Management with Firewalls A Firewall is... ? A gateway between a trusted network and a less trusted one. ? An enforcer of security policy. ? A system designed to: – Control external access to company data and resources. – Control internal access to Internet systems and services. – Provide a security and monitoring choke point. Computer Security Technology Center 8Network Security Management with Firewalls ... or in a nutshell ? A firewall is a tool for managing and controlling traffic that crosses a network “boundary.