Макс Патрол - Система комплексного мониторинга...
DESCRIPTION
Макс Патрол - Система комплексного мониторинга информационной безопасностиTRANSCRIPT
- 1.
2. 3.
- -74%
- -83%
- -67%
- -87%
2009 Data Breach Investigations Report -Verizon Business 4.
- -
- - Web-
- -
- -
- -
5.
- -
- -
- !!!
- - ,
- -
- - , ..
6. - - - - - , ! 7. 8. - Security assessment - Asset inventory - Change management - Compliance management 9. - Network scanner - Penetration test - Database scanner - Web -Web application scanner - System audit 10. - - - - - Web - - 11.
- 1. :
-
- - 15 000
-
- - 1 000
- 2. :
-
- - CVE , ,
-
- - Positive Technologies Research Team
- 3. :
-
- -
-
- -
12.
- 1.
- 2.
- 3. :
-
- -Windows:NetBIOS, RDP
-
- -Unix/Network:Telnet ,SSH ,SNMP
-
- - : Oracle ,Microsoft SQL , MySQL
-
- - : FTP, HTTP, SMTP, POP3
13. Positive Technologies : 14. Web- 2008 -WASC 15. - - - - - 16. Microsoft Windows WMI ,NetBIOS ,LDAP, , UNIX : Solaris, HP-UX, AIX, Linux SSH, Telnet : Cisco, CheckPoint, Juniper, Huawei, Nortel SSH, Telnet :Oracle, MS SQL : Active Directory, Exchange, IIS, Apache, SAP R/3, Lotus Notes WMI ,NetBIOS ,LDAP, , SAP DIAG, SAP RFC 17.
- -
- -
- -
- -
18. - - , - - 19.
- :
-
- - : - LAN Manager
-
- - min1 ,m x90
-
- - Microsoft: SMB-
-
- - Registry
-
- - 10 min .
-
- - , SAP*, DDIC, SAPCPIC, EARLYWATCH
20.
- :
-
- AD
-
- line vty , , ..,
-
- SAP R/3 . :
-
- , , , .
21. 22.
- - , /
- - ,
- -
23. 24. 25.
-
- :
-
- -
-
- - ( ERP, CRM )
-
- -UNIX, Windows
-
- - ( Oracle, SQL )
26.
-
- :
-
- - :ISO 27001/ISO 27002
-
-
-
- PCI DSS
-
-
-
-
-
- 152
-
-
-
- -
-
- -Best practice NIST, CIS
-
- -
27. 28.
-
- - ( PCI DSS, SoX )
-
- -
-
- .
-
- -
29.
-
- -
-
- -
-
- -
30. 31.
-
- MaxPatrol Server
-
- MaxPatrol Scanner
-
- MaxPatrol Consolidator
-
- MaxPatrol Console
-
- MaxPatrol Local Update Server
-
- MaxPatrol Mobile Server
32. 33. 34. ! 35. (, , ..) 36. ! 04073, . , . , 18 (+38) 044-390-09-11, 390-09-19 [email_address] www.pronet.ua