Abstract

Defense in depth is the coordinated use of multiple security countermeasures to protect the integrity of the
information assets in an enterprise. The strategy is based on the military principle that it is more difficult for an
enemy to defeat a complex and multi-layered defense system than to penetrate a single barrier.
Defense in depth minimizes the probability that the efforts of malicious hackers will succeed. A well-designed
strategy of this kind can also help system administrators and security personnel identify people who attempt to
compromise a computer, server, proprietary network or ISP (Internet service provider). If a hacker gains access to a
system, defense in depth minimizes the adverse impact and gives administrators and engineers time to deploy new
or updated countermeasures to prevent recurrence.

Firewall protection + IDS + Security Best Practices hardening Routers & Switches

Collection of available security features

Switch security

1. MAC Flooding Attack :
   Understanding attack
   Mitigation (Port security feature)
   Configuring & verifying port security

2. Strom Control
   Understanding feature
   Mitigation of STP & DDos
   Configuring & verifying Strom Control

3. Private VLAN
   Concept of Private vlans
   Configuration and verification

4. DHCP SNOOPING
   Understanding DHCP
   DORA process
   MITM Man in the middle attack

Mitigation

1. IP spoofing Understand the attack Mitigation IP sourceguard feature configuration & verification.

Speaker

Mohnish Singh

I am a cyber-security professional having 9 years of experience. I have assisted in the creation of cyber security strategies, documentation, and conducting training for various global Enterprises.
Have been assigned critical roles in teams that conduct cybersecurity assessment, deploy and maintain security products, monitor enterprise infrastructure for threats, plan secure infrastructure architectures.

Experience with multiple Security controls SIEM, SOAR, Cyber threat intelligence, etc.

I am driven by Innovation and love investigating cyber incidents

Timing

Starts at Saturday February 11 2017, 10:20 AM. The sessions runs for about 1 hour.

Resources