Cyber Security: An overview of National University, Bangladesh

Transcription

1 Cyber Security: An overview of National University, Bangladesh Presented by: Md. Hayder Ali National University Bangladesh Gazipur, Bangladesh 1 23 rd October, 2018 CRNC2018 ICAICT-2016, Tajik Chittagong, Academy of Bangladesh Sciences Dushanbe, Tajikistan

2 Outline Introduction. Level-1 Security (Data Center). Leve-2 Security (Data Center). Level-3 Security (Data Recovery Center). Data Protection System. NU Storage System. DDoS and Other attack Protection System. Mail Spam filtering. NU Network Security. Simulation Procedure. NU Security Guidelines. Question and Answer Session rd October, 2018 ICAICT-2016, CRNC2018 Chittagong, Tajik Academy Bangladesh of Sciences Dushanbe, Tajikistan

3 Introduction - Introduction to National University Bangladesh. - A brief of National University Bangladesh activities. - A brief of NU ICT activities. - Over view of NU cyber security system. Beautiful Campus of National University, Bangladesh 3

4 Level-1 Security (Data Center) Fencing and Gates, Exterior Lighting, CCTV. Electronic Access Control. Register book maintain after Electronic Access Control verification. 4 Turnstile Security Gate Electronic Access Control Register Book Maintaining

5 Leve-2 Security (Data Center) AAA login (Specific IT people with user name and a strong Password). Store LOG after completing any task. Update is highlighted with previous configuration. Network is monitored by a monitoring tool like- Observium. 5 Observium interface for Network Monitoring

6 Level-3 Security (Data Recovery Center) Maintain two-factor authentication. Data replication in DR Center. Auditing of System Configurations and vulnerabilities. NU Data Center NU Data Recovery Center 6

7 NU Data Protection System o o o o Data backup synchronization in EMC2 storage. All data are stored in DVD dick and all disk are store in a locker. All exam related data are store in separate servers. All student related information (Name, roll, registration no, image etc) are store in more than two servers. EMC2 storage System AIKO Locker 7

8 NU Storage System NU is using EMC storage system. All updated data is stored using active directory. Data are synchronized with previous on. 8 Storage system-1 Storage system-2

9 DDoS and Other attack Protection System Network border filtering (Cisco Firewall). Outsourced protection. Reduce the attack surface. Filter traffic Internet (ISP) Internet Router Firewall Core Switch Access Switch Internal Network NU Network Structure 9

10 Mail Spam filtering Using Server based Quick Heal Antivirus. Build OWN list. Monitor engagement metrics. Black List IP. DNS MX Record Lookup. IP Blocking NU Mail Server 10

11 Network Security Use VLAN based Static IP (Department wise IP list). Use MAC binding policy. User traffic is controlled by a Mikrotik router. Observium is used to monitor the network traffic, device health etc. Traffic controlled by Mikrotik router 11

12 NU Security Guidelines Guidelines for Appropriate Use of Administrator Access. Guidelines uses policy and Bulk Distribution. Fare usages policy for Campus Network and Wifi Networks. Guidelines for Data Sanitization and Disposal. Guidelines for Data Protection. Guidelines for Mobile Device Security and Usage. Guidelines for Password Management. 12 IP Camera Surveillance System Security Surveillance System

13 13 23Institute rd October, of Information 2018 ICAICT-2016, APICTA CRNC2018 and Awards-2016, Communication Chittagong, Tajik Academy Taipei, Bangladesh Technology of Sciences Taiwan (IICT), Dushanbe, BUET Tajikistan

14 Thank You 14