Management recommendation for business-critical network infrastructure devices
Oksanen, Joni (2023)
Julkaisun pysyvä osoite on
https://urn.fi/URN:NBN:fi:amk-2023102327809
https://urn.fi/URN:NBN:fi:amk-2023102327809
Tiivistelmä
Networking devices and their related protocols are seen as potential novel attack vectors in the organization. Zero-day vulnerabilities like Log4j have caused concern relating to network device management. These devices are a critical part of any connected company.
This thesis explores how the target organization could improve handling device management challenges. The organization wants to improve their readiness to oversee issues regarding the assets. These assets are not limited to hardware but also software-based systems. This thesis focuses on networking devices and systems that support those devices.
This work explores devices and their challenges in the target area. The main challenges in the target are related to device information, end-of-life management and communication relating the challenges. Then, NIST and ISO standards are studied to find solution suggestions for those challenges. Those standards are related to asset and security management systems. Then, based on those standards, the work suggests an improvement for the targeted company and tries to reason why work for this suggestion should be started.
This work resulted in the following suggestions for the company: improving asset management, consolidating device databases, and implementing technical risk management processes for explored devices. These suggestions contain a technological perspective instead of an organizational management perspective. The benefits of improvements can increase networking organizations' communication, awareness, documentation, and decision-making processes.
This thesis explores how the target organization could improve handling device management challenges. The organization wants to improve their readiness to oversee issues regarding the assets. These assets are not limited to hardware but also software-based systems. This thesis focuses on networking devices and systems that support those devices.
This work explores devices and their challenges in the target area. The main challenges in the target are related to device information, end-of-life management and communication relating the challenges. Then, NIST and ISO standards are studied to find solution suggestions for those challenges. Those standards are related to asset and security management systems. Then, based on those standards, the work suggests an improvement for the targeted company and tries to reason why work for this suggestion should be started.
This work resulted in the following suggestions for the company: improving asset management, consolidating device databases, and implementing technical risk management processes for explored devices. These suggestions contain a technological perspective instead of an organizational management perspective. The benefits of improvements can increase networking organizations' communication, awareness, documentation, and decision-making processes.