Sécurité et sureté des réseaux - Cybersécurité – Sciences pour l'Ingénieur (ERE)

Awareness of cybersecurity and its business development. Know: • Cybersecurity actors • Threats • Means used by cyberattackers • Risk analysis Master: • SSI approach in a company • Knowledge of information • Good practices

Introduction

• Purpose of this module
• Conclusion of this module
• Introduction to Information Systems Security
• IT security, yes, but...
• Cyber what?
• The dream of an SSI manager
• The reality...
• Cyberattack on the move
• Protect, yes, but what?
• Confidentiality
• Availability
• Integrity
• Cyberdefense at the service of France
  Theme: Information system
• Information system
• What is an SI?
• Technology
• Examples of SI
• SI from a functional perspective
• Comparison of an SI with a physical enterprise
• Physically
• Computer
• Business network
• SI from a human perspective
• Persons concerned
  Theme: Attacker
• Attacker profile and procedure
• STATE
• ORGANIZED CRIME
• TERRORIST
• IDEOLOGICAL ACTIVIST
• SPECIALIZED OFFICE
• AMATOR
• VENEUR
• PATHOLOGICAL MALVEILLANT
• Objective
• SPIONING
• STRATEGIC PREPOSITIONING
• INFLUENCE
• CONTRIBUTION TO OPERATION
• LUCRATIVE
• CHALLENGES, LOVE
• Attacker: in summary
  Theme: Attack
• RETEX d'Orange
• Attack tools
• Maliciel (malware)
• Phishing
• Social engineering
• Middle man
• Password attack
• Attack by employee
• Procedure for data exfiltration
  Theme: Defence and response
• Actor
• Institutional
• Private
• Risk analysis
• Introduction
• Defining the IS: the good
• What to protect?
• Sources of risk (attack)
• Attack
• Action plan
• Crisis management
  Theme: Organization of ISS in a company
• General
• Key points
• Raising awareness of all actors
• Security policy
• Managing information systems
• Procedures with your partners
• Secure your website
• Controlling the dissemination of your company data
• Passwords
• Secure access to your banking services
• Encrypt storage equipment and media
• Protecting your Internet connection
• Establish strict data governance
• Secure physical and logical environment
• Protection of the information system
  Theme: Good practices Conclusion of the module

Table control (1 hour)