Survivable Network Analysis Oracle Financial Management Services Ali

Зарегистрируйтесь, чтобы просмотреть полный документ!

Survivable Network Analysis Oracle Financial Management Services Ali Ardalan Qianming “Michelle” Chen Yi Hu Jason Milletary Jian Song SNA, Step 2, 10/31

Overview n n n n Essential User Capabilities Summary of Essential Components Firewall Type Essential Components Diagram Essential Scenarios Essential Component Details Next Steps SNA, Step 2, 10/31

Essential User Capabilities n n Essential Capabilities performed by 300 dedicated users Dedicated users must have access to financial service applications n n Core Financial Applications Application Desktop Integrator Applications Feeder systems must integrate with financial applications Primary actions performed by users are: n Billing, reporting & reconciliation of budgets and expenses SNA, Step 2, 10/31

Summary of Essential Components n n n Kerberos Domain Controller (authentication) Acis. as. cmu. edu (public access points) Mistral (db server) Tandem (print & e-mail) Chinook (backup server) SNA, Step 2, 10/31

Logical Proxy (Application Gateway) Firewall SCP Oracle Connection Mgr. HTTPS SSH … Tandem LPR (print) SSH SMTP (e-mail) (External) PRIVATE NETWORK CAMPUS NETWORK Acis. as. cmu. edu (Sun Sparc Cluster) 1. Restricts traffic based upon packet content 2. Application specific (Internal) SNA, Step 2, 10/31

Essential Components Diagram Mistral (databse server) Kerberos Domain Contriller O. DB O. Listener O. Forms Kerberos CAMPUS NETWORK HTTP Acis. as. cmu. edu (Sun Sparc Cluster) SCP FTP SQL Net LPR (print) … CITRIX SSH SMTP (e-mail) Oracle Connection Mgr. HTTPS SSH … SSH O. DB O. Listener O. Forms FIBER Tandem LPR (print) Chinook (Backup) SMTP (e-mail) Cyert Computer Center HTTP FTP SNA, Step 2, 10/31 SQL Net LPR (print) CITRIX SSH … SMTP (e-mail) 6555 Penn Ave

Essential Components [1] n Acis. as. cmu. edu: n n n Cluster of Sun Sparc Servers Public Access Points Support services n n n Oracle Connection Manager HTTP, Telnet, FTP, HTTPS(some Kerberos authenticated) SCP (Secure Copy Protocol – unix) SSH Web DB, Big Brother (Monitoring software), … SNA, Step 2, 10/31

Essential Components [2] n Mistral: Database Server n Hosts main Oracle Server: n n n n HTTP Oracle Listeners, Names, Database CITRIX Application Server NFS(data sharing), SMTP (e-mail) LPR (printer) & Fs (other printer) SQL net, FTP, SSH(file upload)… SNA, Step 2, 10/31

Essential Components [3] n Tandem n n n Print & E-mail gateway No user accounts on this machine Services provided: n n n SSH (Administrator Connections) LPD (Printing) SMTP (email) SNA, Step 2, 10/31

Essential Components [4] n Chinook n n n Disaster Recovery Machine: standby database Located offsite at 6555 Penn Ave. Test & Development machine Mirroring of Development database every 5 -minutes Existing passive fiber link between campus and this location. Exact Same HW & SW as Mistral SNA, Step 2, 10/31

Essential Scenarios – Budget Spreadsheet Mistral (Databse Server) Kerberos Domain Contriller Kerberos HTTP CITRIX O. Listener CAMPUS NETWORK (out) Acis. as. cmu. edu (Sun Sparc Cluster) HTTPS Oracle Connection Mgr. SCP Tandem LPR (print) SSH SMTP (e-mail) SNA, Step 2, 10/31 O. DB O. Forms

Essential Scenarios – Feeder System Mistral (Database Server) Kerberos Domain Contriller CAMPUS NETWORK Kerberos HTTP Acis. as. cmu. edu (Sun Sparc Cluster) HTTPS Oracle Connection Mgr. SCP Tandem LPR (print) SSH SMTP (e-mail) SNA, Step 2, 10/31 LPR (print) SMTP (e-mail) Secure Directory O. DB O. Listener O. Forms

Essential Components – DB Mirroring Mistral (Database Server) Chinook (Backup) O. DB O. Mirroring Software Automatic mirroring of development database changes every 5 -minutes SNA, Step 2, 10/31

Ongoing Steps n Client & Users n n n 3 rd client meeting to verify essential services and components On-going interviews of Business Managers with and w/o feeder systems Within Our Group n n n Development of potential intrusion detection scenarios & attacker profiles Identify compromisable components Physical visit to 6555 Penn Ave. Backup facility SNA, Step 2, 10/31

A potential security threat n Business Managers: n n 30+ business managers SCS, MCS, CIT, etc… Determine exactly who is able to obtain various forms of access to areas of the oracle financial system For example, MCS: n n n College Manager 7 Business Managers Provide access to 2 -3 individuals (regular users) SNA, Step 2, 10/31

Скачать презентацию Survivable Network Analysis Oracle Financial Management Services Ali

7144dc033e8b1bf82960a148032a8c50.ppt

Количество слайдов: 15