https://virgool.ir/feed/@MarziehGordanI am specialized in the field of ICT Security. I am experienced in System Network Administrator with a demonstrated history of working in the computer and network security industry.fa2026-11-11 09:02:21https://files.virgool.ir/upload/users/46846/avatar/avatar.pnghttps://virgool.ir/@MarziehGordanhttps://virgool.ir/@MarziehGordan/marzieh-gordan-ict-security-specialist-qhkvq0juxsel ارائه‌ راهکارهای امنیت شبکه و امنیت اطلاعاتمشاوره در خصوص پیاده‌سازی استانداردهای جهانی امنیت اطلاعاتمشاوره و پیاده سازی سیستم‌های رمزنگاری اطلاعاتکمک در جهت ارتقاء سطح دانش امنیتی مدیران شبکه‌هابرگزاری دوره‌ها و سمینارهای مختلف آموزشیارائه‌ خدمات آموزش، استقرار و پشتیبانی راهکارهای نرم‌افزاری/سخت‌افزاریارائه خدمات مهندسی شبکه‌های پیشرفته marzieh gordanmarzieh gordanSat, 18 May 2019 09:39:53 +0430https://virgool.ir/@MarziehGordan/انواع-راهکارها-در-مباحث-امنیت-شبکه-pqiedd5cbqyg موارد زیر جزو اساسی ترین مباحث و راهکارهای کنترل امنیت در انواع مقیاس ها است. البته برخی موارد در مقیاس های کوچکتر قابل حذف هستند اما اگر امنیت اهمیت بالایی دارد بهتر است بر روی تمامی موارد زیر کار شود:Access control به معنی کنترل دسترسیAntivirus and antimalware software به معنی نرم افزارهای مقابله با ویروس و بدافزارApplication security به معنی امنیت نرم افزارBehavioral analytics به معنی تحلیل عملکرد و تعیین معیارهاData loss prevention به معنی جلوگیری از دست رفتن اطلاعاتEmail security به معنی امنیت ایمیلFirewalls به معنی دیوار آتش (نرم افزاری و سخت افزاری)Mobile device security به معنی امنیت دستگاه تلفن همراهNetwork segmentation به معنی تقسیم بندی شبکهSecurity information and event management به معنی اطلاعات امنیتی و مدیریت رویدادVPN مخفف Virtual private network به معنی شبکه خصوصی مجازیWeb security به معنی امنیت وبWireless security به معنی امنیت شبکه بی سیمMarzieh Gordanmarzieh gordanmarzieh gordanSat, 18 May 2019 09:36:00 +0430https://virgool.ir/@MarziehGordan/my-technical-and-professional-skills-are-urmgsuxnbhle Technical skills: ISMS, ISO 27000, Domain Controller (DC), Active Directory (AD), Group Policy Object (GPO), DNS & DHCP, Web Proxy, Syslog, IDS/IPS, VPN, MS Project, Microsoft Office 2016, Microsoft SQL Server, Cisco Routers & Switches, SNMP, SSH, VLAN, IPsec, RIP, OSPF, MPLS, VMware, Firewalls, SolarWinds. Professional Skills: Project Management, User Security, Staff Training, Vulnerability Management, Risk Assessment, SIEM, Disaster Recovery and Business Continuity, Communication and Network Security.Courses: CCNA Routing & Switching, CCNA security, ITIL V3, ISMS, CSCU, CISA, CISSP, CEH, ECSA, MCSA, ENSA. Marzieh Gordan mgordan1986@yahoo.com+00989368298139marzieh gordanmarzieh gordanWed, 15 May 2019 16:54:30 +0430https://virgool.ir/@MarziehGordan/twitter-accidentally-shares-user-location-data-with-advertising-partner-through-apple-devices-brxwjpvikyzd Twitter Inc said on Monday it may have accidentally collected and shared location data of some users accessing its app through Apple devices with an advertising partner.In a blog post, the social media platform said the information collected was not retained and only existed in their systems for a short time and have informed the people whose accounts were impacted to let them know the bug has been fixed.The advertising partner did not receive data such as user's twitter handle or other unique account ids that could have compromised identity, the company said.Extracted by Marzieh Gordan, ICT Security Specialistmarzieh gordanmarzieh gordanWed, 15 May 2019 16:37:45 +0430https://virgool.ir/@MarziehGordan/websites-continue-to-collect-pii-data-insecurely-sgwn6quqm1bc Websites Continue to Collect PII Data Insecurely Websites are still collecting personally identifiable information (PII) without decent web security, including using the HTTP protocol, collecting in clear text and on websites with expired or misconfigured certificates.According to the research by RiskIQ across 48,949 active financial services organization websites, of 4512 sites capturing PII through data entry points accessible by site visitors, 11.5% of these sites (522 sites) are capturing PII insecurely.While this is down from the 27% of sites identified a year ago, this equates to an average of 52 sites per organization which are collecting names, addresses and dates of birth.In an email to Infosecurity, Mishcon de Reya data protection advisor Jon Baines said that the results indicate that despite a slight increase in security compliance since GDPR became applicable, there remain worrying gaps, particularly in some of the sectors which the public should reasonably expect to have most confidence in.“The results certainly point to failures to comply with the security principle of GDPR, the extent to which these are serious failings, of the kind which might warrant regulatory action, will depend on the individual facts of the cases,” he said.“It would be interesting to know if the organizations are even aware, and if they are, whether any will report these breaches (as arguably they should) to the Information Commissioner’s Office.”RiskIQ said that of 3940 public websites with a login page, 442 of these sites (11%) capture login information insecurely.“This research shows that organizations are continuing to make progress in ensuring that personal data entered online is collected in a secure manner,” said Fabian Libeau, VP EMEA at RiskIQ.“However, that we still see instances serves to highlight that there is more to be done. Most organizations are continuing to expand their web presence and it's vitally important that they maintain a complete inventory of those sites and the PII collecting pages they contain.”Jonathan Armstrong, partner at Cordery, said that there is a wide definition of what “personal data” is.He argued that the issue here isn’t just that companies are collecting the data when they likely don’t need it – although this is problematical – it is that they’re not securing it in transit and once they have it. “This double whammy is likely to put any of these organizations into more trouble with a data protection regulator – especially if they’re also not being transparent about what they are collecting, why they are doing with it and how they’re keeping it safe,” he added.“Website users have higher demands than they did even a year ago and the level of complaints is up right across the EU. Any organization which isn’t addressing this as an issue is likely just storing up problems.”marzieh gordanmarzieh gordanTue, 14 May 2019 15:05:44 +0430https://virgool.ir/@MarziehGordan/my-resume-lpnxwprrgesh I am specialized in the field of ICT Security. I can advise companies on their ICT Security issues. My Work Experiences are as below: Company Name: Soshyanet Technology DevelopmentAddress: Unit 4, No. 4, Tohid St., Darya Bolv.,Saadat Abad, Tehran, IranWebsite: http://soshyant.co/Position: ICT Security SpecialistCompany Name: System Sazan AmootAddress: Unit No. 4, Behnam Building, Takhti Sq. Shahid Beheshti St.Website: http://ssaco.co.ir/Position: ICT Security CounselorType of working: From March 2017Company Name: Ghasedak SamanehAddress: Building No. 4, Niroodaryaei St., Resalat Sq., Tehran, IranWebsite: http://ghasedak.com/newportal/ Position: ICT Security AdministratorMy duties are as below:· Planning, evaluating and implementing network security measures and maintaining network security services, protecting systems against unauthorized access, such as installing and setting up antivirus software (Kaspersky-Bitdefender) on the systems within the companyTo perform the operational establishment and preventive maintenance of backups, recovery procedures, and implement security measures and integrity controlsTo implement and administer database documentation, guidelines, policies and proceduresTo test database systems and upgrades, such as debugging, tracking, reproduction, logging and resolving all distinguished problems, based on approved quality testing scripts, their procedures and processesResponsible for the processes, procedures and operational management regarding system security and disaster recovery planning by iimplementing a comprehensive and proportional plan in the companyTo liaise with security vendors, suppliers, service providers and external resources; to analyze, recommend, install and maintain software security applications; and monitor contractual obligations, performance delivery as well as service level agreementsTroubleshooting and providing service support to diagnose, resolve, and repair server-related hardware and software malfunctions; Assessing system risks and expanding programs in order to reduce potential threatsTo prepare and maintain documentation, policies and instructions, record operational procedures, as well as system logs: Preparing reports and technical documentation for managers and users: Providing security advice in order to increase productivity of dealing with security incidentsTo ensure compliance with national and international security standards, and updating systemsTo survey the current computer site continuously in order to determine future network needs and make recommendations to enhance in implementing future servers and networksTo maintain technical knowledge by attending different educational workshop and reviewing different publications Computer Abilities CompTIA Network+Microsoft’s MCSE, MCSA, MCP, Exchange, CRM, TMG, Lync, SharePointCisco CCNA , CCNP , CCIE Routing & SwitchingLinux LPIC1 , LPIC2VMware vSphere: Install, Configure, Manage , VMware vSphere: Design WorkshopMicrosoft OS: Microsoft Windows 2008 R2, Microsoft Windows 2012 and Microsoft Windows 2012 R2 Key Skills: Network & System Security Vulnerability Assessments Authentication & Access Control System Integration Planning Multitier Network Architectures Microsoft Infrastructure Certifications and Workshops: Microsoft Certified Solutions Expert: Core Infrastructure - May 2019 Microsoft Certified Solutions Associate: Windows Server 2012- May 2019 Certificate of Participation for the course of Ethical Hacher +PenTest (CEH+kali) at Jihad University of Khajeh Nasir al-Din Toosi- Aug 2015 Certificate of participation for the course of Secure Computer User (CSCU) at Teaching Technical Department of Tehran Province- Aug 2015 Certificate of Participation for the course of Computer Hacking Forensic Investigator (CHFI) at Professional training organization of Iran- Nov 2015Certificate of participation for the course of ICDL 7 Skill at Tehran Technical Complex-  Nov 2003marzieh gordanmarzieh gordanTue, 14 May 2019 14:27:06 +0430