Network Security

Resources from theDepartment of Homeland

SecurityNational Cyber Security Division

Cyber Attacks on School Networks Increasing Digital Education - Education

Week, September 23, 2013 "What I understand from what I've seen is that [DDoS attacks are] a commonality now," said the Kentucky department's chief information officer, David Couch.

"We have to be prepared and understand the environment that we are operating in so we're prepared to address these issues as they come up," Eric Creighton said.

"The change that would do the most right now would be awareness of the issue, and potentially federal funds to help schools buy equipment and train network people,” Marcus Rogers, a professor and chair of the cyber forensics program at Purdue University, in Indiana

Texas Denial of Service Attacks

http://www.myfoxlubbock.com/news/local/story/Lubbock-Lubbock-ISD-LISD-LISD-Hacking-LISD-int/Co8qq5lpQkqMypBPJlQRKA.cspx

Lubbock ISD News on Denial of Service attack

Harris County Department of Education and Client District Attack:•11/8/2013 – Loss of Internet, approx. 7:45 to 8:15 “denying IP spoofing records” confirming DDOS attack on LMS server•11/8 – Updated Cisco ASA with reverse path interface•11/11 – DDOS attacks approx. 8:00 and 2:00; ISP monitoring and trouble shooting•11/12 – DDOS attacks approx. 8:00 and 2:00; Modified outside IP address for LMS serverhttp://www.infoblox.com/downloads/resources/video-infoblox-advanced-dns-protection

DHS Cyber Security Advisor

Mission: Provide direct coordination, outreach, and regional support in order to protect cyber infrastructure.

• Cyber Protective Visits – On-site• Cyber Protection Survey• Cyber Resilience Review• Cyber Security Evaluation Tool

• Information Sharing and Inquiry Response• Incident Response• Educational and Awareness Briefings• Assessments

Cyber Protective Visits

On-site meetings with your organization to answer questions, exchange information, and address concerns about cybersecurity.

Cyber Protection Survey

Lightweight assessment provides you with immediate feedback and recommendations for enhancing your cybersecurity posture.

Cyber Resilience Review

An expert-led, interview-based evaluation that assesses cybersecurity management practices used to protect critical information technology (IT) services.

Cyber Security Evaluation Tool

(CSET)This tool provides users with a systematic and repeatable approach for assessing the security posture of their cyber systems and networks.

CSET is a desktop software tool that guides users through a step-by-step process to assess their cyber systems and network security practices against recognized industry standards.

Cyber Security Evaluation Tool

(CSET)

Process Flow diagram Raises awareness

about cybersecurity Select security

assurance level Identifies areas of

strengths and weaknesses

Output – prioritized list of recommendations

Information Sharing and Inquiry Response

• Provide open-source threat information.

• Provide repository of best practices, guides, templates, after action reports, etc.

• Build regional cybersecurity private-public partnerships.

• Inform stakeholders of national cybersecurity policy and initiatives.

Incident Support

• Facilitate cyber incident response.

• Provide federal coordination for incident notification, containment, and recovery.

Educational and Awareness Briefings

Community-of-interest, symposium, and conference-focused briefings and workshops to help improve your cybersecurity awareness and posture, while providing timely and relevant information on DHS and regional programs and activities.

https://www.infragard.org/

InfraGard Facts

• InfraGard is a trusted partnership between the FBI, the private sector, academia and other government agencies.

• The mission of InfraGard is to foster collaboration and information sharing that enhances our collective ability to address threats to U.S. critical infrastructure.

• Began in 1996 in Cleveland; now 84 chapters and more than 25,000 members across the United States.

1304/21/23 UNCLASSIFIED

Features & Benefits

• Secure Online Resources

• Alerts & Actionable Intelligence

• Presentations by Subject Matter Experts

• Peer-to-Peer Collaboration

• Access to Security Conferences & FBI Events

1404/21/23 UNCLASSIFIED

The IG Network https://www.infragard.org

1504/21/23 UNCLASSIFIED

Houston ChapterSpecial Interest Groups (SIGs)

• Oil & Gas

• Technology

• Banking & Finance

• Emergency Services

• Health Care

• Others Under Development

1604/21/23 UNCLASSIFIED

Membership

• FREE

• Individual

• Requirements: 18 years or older, U.S. Citizen and periodic criminal background checks (applicants are VETTED by the FBI)

• Apply online at https://www.infragard.org/

1704/21/23 UNCLASSIFIED

More about the Department of Homeland

Security• National Cybersecurity and

Communications Integration Center• Industrial Control Systems• U.S. Computer Emergency Readiness Team

• Office of Cybersecurity and Communications

• Community Engagement

Discussionand

Questions?