Play Book
Updated
April 22 2010
Firewall
Switch
SAS
Cyber Analysis
IDS
ARF – Consumer and Produce
Accenture SCAP
Consumer/Publisher
Agiliance
Risk Vision
ArcSight
McAfee ePO
Server
HB Gary
Network
Components
Architecture & Data Flow
Router
Use Case
• Geo Coding – Placing physical machines on a map
to indicate location(East, Central, West).
• Outliers
–
–
–
–
FDCC
Virus patches
OS type
Top Talkers (Port usage)
• FDCC Scenario
• Malware Exploitation – HB Gary
GEO Code View - SAS
Vulnerabilities
Issues - West
Asset (OS)
Top Talkers
Virus
FDCC
Asset – OS/Counts
Top Talkers – Ports used/Count
Virus -Patch levels
FDCC- Aggregate % score
Vulnerabilities
Issues- East
Asset (OS)
Top Talkers
Virus
FDCC
Each circle
Represents a
GEO region
Outlier View For FDCC – SAS
Setting Thresholds for FDCC Score
92% - best score
88 % - 10% acceptable rating
<88% - outliers
88%
92%
<88%
Build through Trend Analysis
Help Predict Issues
What will be our indicator?
Threasholds?
Each circle
Represents a
GEO region
Outlier View For Virus– SAS
Compliant Computers :Up-to-Date Patch version
Outer Ring (behind one patch version)
Outliers – 2-3 cycle behind current Patch version
Compliant
Up-to-Date
Virus Check
Ring Area
One Patch
behind
Outlier
2-3 Patches
Behind
Each circle
Represents a
GEO region
Outlier View For Top Talkers– SAS
Number of computers: Using Approved Ports
Outer Ring : Exception Ports
Outliers – Ports not approved
Approved
Ports
Exceptional
Ports
Non-Approve
Ports
Outlier View For OS– SAS
Number of computers: Approved OS
Outliers – OS not approved
OS
Approved
OS not Not
Approved
Approved
OS
Approved
OS
Approved
OS
Approved OS
FDCC Continuous Process
GIG FDCC Scores
Site 1 90%
Site 2 85 %
Site 3 91%
Overall Pass/Fail
Pass 90%
Fails 10%
FDCC Aggregate
Report
1. ARF – Accenture
2. RV- Agiliance
Site 1
90%
Site 2
85%
Site 3
91%
FDCC Detail Report
1. ARF – Accenture
2. RV- Agiliance
FDCC Aggregation Report from Agiliance
Cyber Command
Overall FDCC Score Army 87%
Overall FDCC Score Navy 91%
Pass - Score
Fails - Score
List of TOP 25 critical
•List of Settings 1
•List of Settings 2
•List of Settings 3c
Army
Overall FDCC Score 87
Pass - Score
Fails - Score
List of TOP 25 critical
•List of Settings 1
•List of Settings 2
•List of Settings 3c
AMC
Overall FDCC Score 87
Pass - Score
Fails - Score
List of TOP 25 critical
•List of Settings 1
•List of Settings 2
•List of Settings 3
Navy
Overall FDCC Score 91
Pass - Score
Fails - Score
List of TOP 25 critical
•List of Settings 1
•List of Settings 2
•List of Settings 3