1.

2. 3.

-74%

-83%

-67%

-87%

2009 Data Breach Investigations Report -Verizon Business 4.

-

- Web-

-

-

-

5.

-

-

!!!

- ,

-

- , ..

6. - - - - - , ! 7. 8. - Security assessment - Asset inventory - Change management - Compliance management 9. - Network scanner - Penetration test - Database scanner - Web -Web application scanner - System audit 10. - - - - - Web - - 11.

1. :

• - 15 000

• - 1 000

2. :

• - CVE , ,

• - Positive Technologies Research Team

3. :

• -

• -

12.

1.

2.

3. :

• -Windows:NetBIOS, RDP

• -Unix/Network:Telnet ,SSH ,SNMP

• - : Oracle ,Microsoft SQL , MySQL

• - : FTP, HTTP, SMTP, POP3

13. Positive Technologies : 14. Web- 2008 -WASC 15. - - - - - 16. Microsoft Windows WMI ,NetBIOS ,LDAP, , UNIX : Solaris, HP-UX, AIX, Linux SSH, Telnet : Cisco, CheckPoint, Juniper, Huawei, Nortel SSH, Telnet :Oracle, MS SQL : Active Directory, Exchange, IIS, Apache, SAP R/3, Lotus Notes WMI ,NetBIOS ,LDAP, , SAP DIAG, SAP RFC 17.

-

-

-

-

18. - - , - - 19.

:

• - : - LAN Manager

• - min1 ,m x90

• - Microsoft: SMB-

• - Registry

• - 10 min .

• - , SAP*, DDIC, SAPCPIC, EARLYWATCH

20.

:

• AD

• line vty , , ..,

• SAP R/3 . :

• , , , .

21. 22.

- , /

- ,

-

23. 24. 25.

• :

• -

• - ( ERP, CRM )

• -UNIX, Windows

• - ( Oracle, SQL )

26.

• :

• - :ISO 27001/ISO 27002

• • • PCI DSS

• • • 152

• -

• -Best practice NIST, CIS

• -

27. 28.

• - ( PCI DSS, SoX )

• -

• .

• -

29.

• -

• -

• -

30. 31.

• MaxPatrol Server

• MaxPatrol Scanner

• MaxPatrol Consolidator

• MaxPatrol Console

• MaxPatrol Local Update Server

• MaxPatrol Mobile Server

32. 33. 34. ! 35. (, , ..) 36. ! 04073, . , . , 18 (+38) 044-390-09-11, 390-09-19 [email_address] www.pronet.ua