1. ? - Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved. 1/93

2. ? : C i s c o ? Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved. 2/93 3. , - ( ) - , , , , Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved. 3/93 4. , , , - , - Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved.4/93 5. S e c u r ity P r o d u c t S e c u r ity M a n a g e m e n t S e c u r ity G o v e rn a n c eE ffe c tiv e n e s sE ffic ie n c y , , G r i d . . Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved. 5/93 6. P ro d u c t M a n a g e m e n tG o v e rn a n c e Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved. 6/93 7. E & Y ( )7 Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved.7/93 8. Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved. 8/93 9. / , , , - Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved. 9/93 10. Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved. 10 /93 11. ( 1) : ( ) , Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved.11/93 12. , - , I d e n t i t y & E n t i t l e m e n t M a na g e me n t : Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved.12/93 13. / - : C a p E x O p E x ( 3 ) N e t I n c o m e , E B I T D A Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved. 13/93 14. Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved. 14/93 15. , 1 0 % 4 0 % : ( ) Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved.15/93 16. SiSiH Q WAN/Internet : : 10 05 0 010 0 0 ($25 K ) $2,5 .$12,5 .$25 . 1 $1,20 0$6,0 0 0 $12,0 0 0 1 $62,5 K$3 12,5 $625 ( , , ) 3 0 4 0 % Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved.16/93 17. / / T e l e P r e s e n c e : ( $3 0 0 -4 0 0 + $1 0 0 ) Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved.17/93 18. - : - Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved.18/93 19. , , U R L : - ( ) Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved.19/93 20. Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved. 20 /93 21. -1 5 2 , . . , , , , , . . ( ) -1 5 2 Secu rity a nd Crisis ( . 6 . 4 -1 5 2 ) 2008 Cisco Systems, Inc. All rights reserved.21/93 22. Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved. 22/93 23. : , , . . , Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved. 23/93 24. Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved. 24/93 25. ? ? ? ? ? ? Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved.25/93 26. ? - , . . , Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved.26/93 27. E f f i c i en c y v s . E f f ec t i v en es s ( ) ? , Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved. 27/93 28. : : 1, 5 , 2 0 0 66 0 0 8 2 5 / $1 8 7 5 0 ( $5 0 0 ) . $2 2 5 0 0 0 $1 5 0 0 0 0 Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved.28/93 29. : e-m a i l (v a l u e )1.000.000 T r a n s a c tio n V a lu e0,0025 25 0.000 T r a n s a c tio n C o s t0,0006 25 20.000 3 00 C o s t p e r C o n tro l0,000023 5 29 4 00.000.000 C o n tr o l p e r T r a n s a c tio n 2.13 I P3 00.000.000 4 00.000.000 S e c u r ity to V a lu e R a tio2% 15 0.000.000 L o s s to V a lu e R a tio15 % 8 0.000.000C o n tr o l E ffe c tiv e n e s s R a tio 9 5 % 3 00.000.000 In c id e n t p e r M illio n1,25 200.000In c id e n t P r e v e n tio n R a te 9 9 ,9 9 9 8 % 5 00 R is k A v e r s io n R a tio4 00 Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved.29/93 30. Sec u r i t y B SC p l i a n c e C o m B S C Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved.30 /93 31. C i s c o : ( ) Secu rity a nd Crisis , 2008 Cisco Systems, Inc. All rights reserved. 31/93 32. / * 1 .0$1 2 . 0 0 1 .0$1 2 . 0 0 2 .0$2 4 . 0 0 1 $4 8 . 0 0 , ? Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved.32/93 33. Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved. 33/93 34. : , ( , ) , , Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved. 34/93 35. ? , , , , , , . 1 9 -1 5 2 , Secu rity a nd Crisis ! 2008 Cisco Systems, Inc. All rights reserved. 35/93 36. , 2 1 7 2 0 0 7 . N 7 8 1 ! ! ! !Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved.36/93 37. Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved. 37/93 38. ? Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved. 38/93 39. - - Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved. 39/93 40. / / 1 8 0 4 4 . . 1 3 5 6 9 . Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved. 40 /93 41. / / 1 8 0 4 5 . . / 1 9 7 9 1 . . Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved. 41/93 42. / / 1 5 4 4 6 . . / 2 7 0 0 6 . . , Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved. 42/93 43. / / 1 8 0 2 8 -1 . . . 1 . / 2 4 7 6 2 . . Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved. 43/93 44. / 2 1 8 2 7 . . / 2 7 0 0 0 . . . / 2 7 0 0 2 . . / 2 7 0 0 5 . Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved.44/93 45. . . . , . Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved. 45/93 46. . . , . Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved. 46/93 47. C is c o ? Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved. 47/93 48. C i s c o , , , , Id e n tity - Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved. 48/93 49. 5 2 0 0 9 / 1 0 Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved. 49/93 50. A p p l i c ati o ns B u sine ss Applications Collaboration ApplicationsTOGAF A ppl ica tion D el iveryA ppl ica tion O rien ted N etw ork in g Management ServicesU n if ied Commun ica tion s Security Services ServicesM ob il ity ServicesIntegratedCompute Services N etw o rk S erv i c esStora g e ServicesI d en tity Services N etw ork I n f ra structure V irtua l iz a tionZ a c h m a n N etw o rk S y s tem sF ra m e w o rk Cam pu sD ata Ce nte rB ranch F ederal Enterp ris eA rch itecture Cisco Architecture OnDemand - Homeland SecuritySecu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved. 50 /93 51. C i s c o Sec u r i t y F r a m ew o r k C i s c o Se c u r i t y F r a m e w o r k , Cisco Security Framework Id enti ty , , , , , - - , , , , , - , Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved. 51/93 52. / , T C O / , , / Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved. 52/93 53. / W A N W A NSi Si I nternet C is co V irtual O f f ice SiSi Si I nternet E-C ommerce Si Si Si Si Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved.53/93 54. C i s c o ( S C A D A ) 4 5Si In te r n e t/In tr a n e t/Si /W A N D M Z L A N /W A N 3 2 1 0Secu rity a nd Crisis 2007 Cisco Systems, Inc. All rights Cisco Systems, Inc.Cisco P u b lic 2008 reserved.All rights reserved.5454/93 55. C i s c o P C I D S S P O S C a s h R e g is te r AC SP O S(P C I 1, 3, 5, 6, 7) P O S (P C I 2 , 1 0 , 1 2 )C S M (P C I 1 0 , 1 2 ) (P C I 1, 3, 5, 6, 7)NACC S AM C (P C I 1 0 , 1 2 )AS A C S -M AR S 7 2 0 0AS AWAP (P C I 1 0 ) (P C I 1 , 4 ) Internet C a ta l y s t IS R(P C I 4 )6 5 0 0 WAP 6 5 0 0 S w i tc h F WS M AS A (P C I 1 , 4 )C red i t C a rd WAPS to ra g e (P C I 1, 3, 5, 6, 7)(P C I 1 , 3 , 5 , 6 , 7 ) E-c o m m erc e(P C I 1 , 3 , 5 , 6 , 7 ) ! Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved. 55/93 56. C i s c o -1 . 0 / A T M P O S - P O S AC SC S MNAC NC MC S -M AR S 7 2 0 0AS A WAP AS A Internet C a ta l y s tIS R6 5 0 0WAP 6 5 0 0 S w i tc hF WS M AS A WAP - ! Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved.56/93 57. C i s c o e-C o m m er c e i-B a n k in g IS P A IS P B V P N Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved. 57/93 58. C i s c o E R P S C M D a ta C e n te r E d g eW e b - F i rew a l l & IP S Web S ec u ri ty D a ta Enc ry p ti o n T i ered Ac c es sD O S P ro tec ti o n Ap p l i c a ti o n S ec u ri ty X M L , S O AP , AJ AX In M o ti o n M o ni to ri ng & Ap p P ro to c o l Ins p ec ti o n Ap p l i c a ti o n Is o l a ti o n S ec u ri tyAt R es tAna l y s i s Web S erv i c es S ec u ri ty C o ntent Ins p ec ti o n X D o S P rev enti o n S to red D a ta R o l e-B a s ed V P N term i na ti o n S S L Ap p to Ap p S ec u ri tyAc c es s C o ntro l Ac c es s Em a i l & Web Ac c es s Enc ry p ti o n/O f f l o a d S erv er H a rd eni ng S eg m enta ti o n AAA Ac c es s c o ntro l S erv er H a rd eni ngC o ntro l ACEACS Iro n P o rt W AAS E-M a i l S e c u r i t yW AFCS ACS M T ie r 1 /2 /3 CS A-M C M D SS to ra g e CW -N CMIro n P o rtw /S M EW AF W e b S e c u r ity AS ACS A Ca t 6 K CS A CS A M AR S F W S MCS A W AFW e bS e rv e rs Iro n P o rt T a p e / O f f -s i t eW e b S e c u r ity B a c k u pSecu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved. 58/93 59. C i s c o : , I P S e c , S S L V P N , A C L ,N A C SiSiIP S W A F M D 5 : N e tF lo w ,S y s lo g ,S N M P ,M A R S ,N A CDMZN IP S ,H IP S :Si N e tF lo w ,A A A ,C o P P ,S S H ,R F C 2 8 2 7 ,Si A S AS y s lo g , S N M P v 3 ,IG P /E G P M D 5 S N M P v 3 A S AIP S : A C E ,A C E X M L G a te w a yA C LR F C 28 27 :C S M ,M A R S ,N C MSecu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved.59/93 60. C i s c o N o k ia E S e r ie s iP h o n eC is c o S S L /IP S e c V P N S o lu tio n s MA C is c o S e c u r ity A g e n t C is c o V P N C lie n t / C is c o A n y C o n n e c t C lie n t C i s c o S e c u r e D e s k t o p ( ) Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved.60 /93 61. C i s c o P O S C a s h P O SR e g is te r Iro nP o rt S - NACS eri esP O S AS A 7 2 0 0S M EWL CAS A InternetC a ta l y s t IS R6 5 0 0 WAP 6 5 0 0 S w i tc h F WS M WAP Web WAF Iro nP o rt M -C S AC red i t C a rd S eri es S to ra g e - - - - Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved. 61/93 62. C i s c o C S A 8 02. 1x - : L 2 8 0 2 .1 x ,N A C A p p lia n c e , u R P F A C L , N A CA C L : F W S M SiSiN e tF lo w ,S y s lo g ,S N M P ,M A R S , IP S M M D 5N IP S ,H IP S - N e tF lo w , :S y s lo g , S N M P v 3A A A ,C o P P ,S S H ,u R P F ,S N M P v 3 , I G P / E G P M D 5 , L 2 SiSi : C S M ,M A R S ,N C M Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved. 62/93 63. C i s c o : Si Si 8 0 2 . 1 x , A C L , u R P F M D 5 :A C L - F W S M N e tF lo w ,S y s lo g ,S N M P ,M A R S , N IP S ,H IP S A X G IP S MA O N S : N e tF lo w ,A A A ,C o P P ,S S H ,u R P F ,S N M PS y s lo g , v 3 , I G P / E G P M D 5 , 8 02. 1xS N M P v 3 L 2 - : L 2 A C E ,A C E X M L G a te w a y : C S A C S M ,M A R S ,N C M Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved.63/93 64. IS O 2 7 0 0 x P C I D S S 1 5 4 0 8 - ( ) ( ) Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved. 64/93 65. - (+ ) / (+ ) BC P ( , , P C I ) ( W e b , ) ( , ) Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved.65/93 66. C i s c o ? () P C I - D S S ! Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved. 66/93 67. 4 2 0 + , , 1 5 4 0 8 , , ( ) , , - , , I S O 2 7 0 0 x , C O B IT , IT IL , P C I D S SSecu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved.67/93 68. C is c o P ix 5 0 1 , 5 0 6 , 5 1 5 , 5 2 5 , 5 3 5 C i s c o F W SM C i s c o I SR 1 8 0 0 , 2 8 0 0 , 3 8 0 0 C i s c o I SR 1 7 0 0 , 2 6 0 0 , 3 6 0 0 , 3 7 0 0 C is c o 7 2 0 0 , 7 3 0 0 , 7 5 0 0 , 7 6 0 0 R o u te r C i s c o A SA 5 5 1 0 , 5 5 2 0 , 5 5 4 0 C i s c o A SA 5 5 0 5 ( ) C a ta ly s t 2 9 6 0 C a ta ly s t 2 9 7 0 , 3 5 5 0 , 3 5 6 0 , 4 5 x x , 6 5 x xC is c o IP S4 2 0 0 Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved. 68/93 69. ? C is c o S e c u r ity A g e n tC is c o ID S MC a ta ly s t 2 9 5 0 ,3 5 6 0 ,3 7 5 0 ,4 0 x x , 6 0 x xC is c o G S RC is c o M A R SC is c o S e c u r ity M a n a g e r I r o n P o r t E -m a i l S e c u r i t y A p p l i a n c e , N A C A p p l i a n c e C i s c o Secu rity a nd Crisis 2005 Cisco 2008 Cisco Systems, Inc. All rights reserved. Systems, Inc. All rights reserved. 69/93 70. Sel f -D ef en d i n g N et w o r k 3 . 0 I d en t i t y - I T T C O , C i s c o Se l f -D e f e n d i n g N e t w o r k : , Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved.70 /93 71. C i s c o Cisco Security Intelligence Operations T h re a tCisco O p e r a t ion s S e n sor B a se Ce n t e r , : T h reat O p erat ions Cisco SensorBase Cent er , Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved. 71/93 72. : $ 1 0 0 M 1 0 0 0 + 1 0 0 G B 5 0 0 ( ) : 5 0 0 + > 2 5 0 , > 1 0 0 , 1 0 0 7 / 2 4 / 3 6 54 S e c u r ity O p e r a tio n s C e n te r sSecu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved. 72/93 73. C is c o IP S7 .0 I P S I P S I P S 1 0 0 x , I P S, Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved. 73/93 74. NAC N A C G u es t S er v er B i o M ed N A C ( N A C - ) CS A P C I D S S W eb A p p l i c a t i o n F i r ew a l l T el ePIro n Pr es en c e o r t E-m a i lW eb S ec u r i t y A p p l i a n c e , , Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved.74/93 75. Sa a S: , , , I r o n P o r t . Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved.75/93 76. e-m a i l : Sa a S ( ) C is c o C is c o C is c oC is c o C is c o C i s c o . ( 2 4 / 7 ) 9 9 ,9 9 9 % ( S O C ) Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved.76/93 77. C i s c o S-T er r a C SP / C i s c o S y s t e m s - V P N - http://www.s-te r r a .c o m / N M E -R V P N , C i s c o I SR 2 8 1 1 , 2 8 2 1 ,2 8 5 1 , 3 8 2 5 3 8 4 5 V P N - S-T e r r a C SP N M E -R V P N V i P N e t , http://www.i n f o te c s.r u / V i P N e t V P N Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved.77/93 78. C i s c o + C i s c o S y s t e m s ,- + C i s c o C is c o IS R 2 8 1 1 , 2 8 2 1 , 2 8 5 1 , 3 8 2 5 3 8 4 5 :N M E -R V P N N M E -R V P N V P N Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved. 78/93 79. A p p l i c a t i o n eX t en s i o n P l a t f o r m S D K a n d D ev el o p m en t P o r t a lA X P P a r t n er P r o g r a m A I M -1 0 2 N M E -3 0 2 / 5 2 2 2 5 6 M B , 1 G B , Intel C el ero n 5 1 2 M B 2 G B , 8 0 /1 6 0 G B , A X P D ev el o p m en t S er v i c es Intel C el ero n P enti u m M A X P A d v a n c ed S er v i c es L i n u x C , P y t h o n , P e r l J a v a T C O C P U , G r een C i s c o I S R 1 8 4 1 , 2 8 0 0 , 3 8 0 0 S e r ie sSecu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved. 79/93 80. C i s c o C i s c o C i s c o b u s in e s s v a lu e C i s c o Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved.80 /93 81. ? - 1 2 3 4 5C i s c o C a p i t a l - , Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved. 81/93 82. - H R Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved.82/93 83. I r o n P o r t E SA : e-m a i l - Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved. 83/93 84. I r o n P o r t E SA : / - T C O , C a p E x O p E x Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved. 84/93 85. I r o n P o r t E SA : / -1 5 2 ( ) ( , . . )Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved. 85/93 86. % % % / / % / / / / Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved. 86/93 87. / / / % , % , / / % , / / Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved. 87/93 88. / / / - / Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved. 88/93 89. Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved. 89/93 90. , , , Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved.90 /93 91. Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved. 91/93 92. s e c u r i t y -r e q u e s t @ c i s c o . c o m : + 7 4 9 5 9 6 1 -1 4 1 0 h t t p : / / m y . c i s c o . r u ( W h i t e P a p e r , . . ) Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved. 92/93 93. Secu rity a nd Crisis 2008 Cisco Systems, Inc. All rights reserved. 93/93