思科网络准入控制管理

《思科网络准入控制管理》由会员上传分享，免费在线阅读，更多相关内容在教育资源-天天文库。

1、思科网络准入控制管理NetworkAccessControl(NAC)安全趋势与网络准入控制思科网络准入控制管理简介思科网络准入控制功能介绍思科网络准入控制部署和应用议程全球电子犯罪率上升迅速！MaliciousSoftwareStrainsexplodedfrom30K/40Kpermonthto170,000fromFebruarytoMarch2008Phishinge-mailsdoubled400,000adayinAugusttonearly800,000adayinNovember)Adsforstolenidentityinformationdouble

2、dortripledinpriceinFall2008(stolenidentitythatoncecost$5,forinstance,nowsellsfor$15).Over100millioncredit/debitcardtransactionscompromisedduetomalwareatalargeUSPaymentProcessor–possiblythelargestdatabreachtodate–(WashingtonPost.com-Jan20,2009)"There'sbeenamarkedincreaseinthenumberofattac

3、ksandthenumberofsuccessfulfraudattempts…Thisisthebusiestpracticehaseverbeen.”Gartner2008“Inperiodsofrecessionorslowgrowth,companiesaregoingtoturntheirattentionstocustomerretentionratherthancustomeracquisition…Thelastthingyouneedinthatenvironmentisadatabreachandtheassociatedbranddamage.“F

4、orrester2008企业重要数据泄漏统计Unauthorizedapplicationuse:70%ofITsaytheuseofunauthorizedprogramsresultinasmanyashalfofdatalossincidents.Misuseofcorporatecomputers:44%ofemployeesshareworkdeviceswithotherswithoutsupervision.Unauthorizedaccess:39%ofITsaidtheyhavedealtwithanemployeeaccessingunauthori

5、zedpartsofacompany’snetworkorfacility.Remoteworkersecurity:46%ofemployeestotransferfilesbetweenworkandpersonalcomputers.Misuseofpasswords:18%ofemployeessharepasswordswithco-workers.Thatratejumpsto25percentinChina,India,andItaly.终端应用安全现状Windows,Linux笔记本电脑、台式机或PDA打印机或其他公司资产系统环境复杂公司员工合同商访客未

6、知人员人员复杂VPN局域网WLAN广域网网络环境复杂防病毒，防间谍软件个人防火墙修补工具安全工具实施难度大终端遭受严重安全威胁，各种恶意代码攻击，如病毒、蠕虫、木马及混合安全威胁，非法访问，黑客攻击如何防范？网络准入控制NAC用户受益威胁控制减少终端感染减轻IT查毒负担增强网络复原力细粒度访问控制减少安全事故防敏感数据泄漏行业规范遵从提高安全性满足安全审计需要提高运维效率便捷的访客网络设备自动识别和监控网络准入控制的好处Source:InfoneticsResearch,May2008网络准入控制实例统计0%20%40%60%80%100%Limittheimpacto

7、fsecurityproblems,stopthreatsfrompropagatingProtectagainstlossofsensitive/personalinformationIncreaseoverallcorporatesecuritypostureControlnetworkaccessbasedonuseridentityandroleReduceriskofallowingalldevicestoconnecttomynetworkDemonstratecompliancetosecurity/access