Ujjwal 'Shanu', profile picture
Uploaded byUjjwal 'Shanu'
PPT, PDF2,084 views

Network security

This document discusses network security. It covers risk assessment, controlling unauthorized access through prevention, detection and correction methods, and best practice recommendations. The key threats are disruption, destruction, unauthorized access and financial losses. Controls include firewalls, intrusion detection, access controls, encryption, and disaster recovery plans. The goals of security are confidentiality, integrity and availability of data and systems.

Embed presentation

Downloaded 41 times
Network Security
Outline • Introduction • Risk assessment • Controlling disruption, destruction and disaster • Controlling unauthorized access – Preventing, detecting, and correcting Unauthorized Access • Best practice recommendations
Introduction • Security - always a major business concern – Protection of physical assets with locks, barriers, guards, etc – Protection of information with passwords, coding • Introduction of computers and Internet – Redefined the nature of information security • Laws and enforcement – Slow to catch-up – Now a federal crime in the U.S. (breaking into a computer) – New laws against cyberborder crimes; difficult to enforce
Computer Security Incidents • Growing at a rate of 100% per year – 1988: a virus shut down 10% of the computers on the Internet  Establishment of Computer Emergency Response Team (CERT) with US DoD support Number of Incidents Reported to CERT
Financial Impact of Security • 2003 Computer Security Institute/FBI Computer Crime and Security Survey – 90% of the respondents reported security breaches in the last 12 months – 75% reported a financial loss due to security breaches – Average loss: $2 million • Worldwide total annual cost of security losses – Exceeds $2 trillion • Reason for the increase in security problems – Availability of sophisticated tools to break into networks
Why Networks Need Security • Organizations becoming vulnerable – Becoming increasingly dependent on computers, networks – Becoming increasingly vulnerable to due widely available Internet access to its computers and networks • Huge losses due to security breaches – $2 M average loss + losses related to less consumer confidence as a result of publicity of breaches – Potential losses from disruption of applications (Bank of America estimates $50 M per day) • Protecting consumer privacy – Strong laws against unauthorized disclosures (California: $250 K for each such incident) • Protecting organizations’ data and application sw – Value of data and applications >> network cost
Primary Goals in Providing Security • Confidentiality – Protection of data from unauthorized disclosures of customers and proprietary data • Integrity – Assurance that data have not been altered or destroyed • Availability – Providing continuous operations of hardware and software so that parties involved can be assured of uninterrupted service
Types of Security Threats • Business continuity planning related threats – Disruptions • Loss or reduction in network service • Could be minor or temporary (a circuit failure) – Destructions of data • Viruses destroying files, crash of hard disk – Disasters (Natural or manmade disasters ) • May destroy host computers or sections of network • Unauthorized access – Hackers gaining access to data files and resources – Most unauthorized access incidents involve employees – Results: Industrial spying; fraud by changing data, etc.
Network Controls • Mechanisms that reduce or eliminate the threats to network security • Types of controls: – Preventative controls • Mitigate or stop a person from acting or an event from occurring (e.g., locks, passwords, backup circuits) • Act as a deterrent by discouraging or retraining – Detective controls • Reveal or discover unwanted events (e.g., auditing) • Documenting events for potential evidence – Corrective controls • Rectify an unwanted event or a trespass (e.g., reinitiating a network circuit)
Risk Assessment • A key step in developing a secure network • Assigns level of risks to various threats – By comparing the nature of threats to the controls designed to reduce them • Use a control spreadsheet – List down network assets on the side – List threats across the top – List the controls that are currently in use to address each threat in the corresponding cells
Sample Control Spreadsheet Threats Assets (with Priority) (92) Mail Server (90) Web Server (90) DNS Server (50) Computers on 6th floor (50) 6th floor LAN circuits (80) Building A Backbone (70) Router in Building A (30) Network Software (100) Client Database (100) Financial Database (70) Network Technical staff Disruption, Destruction, Disaster Fire Flood Power Circuit Virus Loss Failure Unauthorized Access External Internal EavesIntruder Intruder drop
Types of Assets Hardware • Servers, such as mail servers, web servers, DNS servers, DHCP servers, and LAN file servers • Client computers • Devices such as hubs, switches, and routers Circuits • Locally operated circuits such LANs and backbones • Contracted circuits such as MAN and WAN circuits • Internet access circuits Network Software • Server operating systems and system settings • Applications software such as mail server and web server software Client Software • Operating systems and system settings • Application software such as word processors Organizational Data • Databases with organizational records Mission critical applications • For example, for an Internet bank, the Web site is mission critical
Common Security Threats • Virus infection – most likely event • Unauthorized access – By internal and external hackers – High cost to recover (both in $ and publicity) • Device failure (not necessarily by a malicious act) • Device theft, Natural Disaster • Denial of Service attacks – External attacks blocking access to the network • Big picture messages: – Viruses: most common threat with a fairly high cost – Unauthorized access by employees: greater threat
Sample Control Spreadsheet Threats Assets (with Priority) Disruption, Destruction, Disaster Fire Flood Power Circuit Virus Loss Failure Unauthorized Access External Internal EavesIntruder Intruder drop (92) Mail Server 1,2 1,3 4 5, 6 7, 8 9, 10, 11 9, 10 (90) Web Server 1,2 1,3 4 5, 6 7, 8 9, 10, 11 9, 10 (90) DNS Server 1,2 1,3 4 5, 6 7, 8 9, 10, 11 9, 10 1,2 1,3 7, 8 10, 11 10 (50) 6th floor LAN circuits 1,2 1,3 (80) Building A Backbone 1,2 1,3 1,2 1,3 7, 8 9 9 (50) Computers on 6th floor (70) Router in Building A 6 (30) Network Software 7, 8 (100) Client Database 7, 8 (70) Network Technical staff 1 1 9, 10 9, 10, 11 9, 10 9, 10, 11 (100) Financial Database 9, 10, 11 9, 10
List of Controls   1. 2. 3. 4. 5. 6. 7. 8. Disaster Recovery Plan Halon fire system in server room. Sprinklers in rest of building Not on or below ground level Uninterruptible Power Supply (UPS) on all major network servers Contract guarantees from inter-exchange carriers Extra backbone fiber cable laid in different conduits Virus checking software present on the network Extensive user training on viruses and reminders in monthly newsletter 9. Strong password software 10. Extensive user training on password security and reminders in monthly newsletter 11. Application Layer firewall
Business Continuity Planning • Make sure that organization’s data and applications will continue to operate even in the face of disruption, destruction, or disaster • Continuity Plan includes – Development of controls • To prevent these events from having a major impact – Disaster recovery plan • To enable the organization to recover if a disaster occurs
Specifics of Continuity Plan • Preventing Disruption, Destruction, and Disaster – Using Redundant Hardware – Preventing Natural Disaster – Preventing Theft – Preventing Viruses – Preventing Denial of Service • Detecting Disruption, Destruction, and Disaster • Correcting Disruption, Destruction, and Disaster – Disaster Recovery Plan – Disaster Recovery Outsourcing
Using Redundant Hardware • A key principal in preventing disruption, destruction and disaster • Examples of components that provide redundancy – Uninterruptible power supplies (UPS) • A separate battery powered power supply • Can supply power for minutes or even hours – Fault-tolerant servers (with redundant components) – Disk mirroring • A redundant second disk for every disk on the server • Every data on primary disk is duplicated on mirror – Disk duplexing (redundant disk controllers) • Can apply to other network components as well – Circuits, routers, client computers, etc.,
Preventing Natural Disasters • More difficult to do – Since the entire site can be destroyed by a disaster • Fundamental principle: – Decentralize the network resources – Store critical data in at least two separate locations (in different part of the country) • Best solution – Have a completely redundant network that duplicates every network component, but in a different location • Other steps – Depend on the type of disaster to be prevented • Flood: Locate key components away from rivers • Fire: Install Halon fire suppression system
Preventing Theft • Security plan must include: – An evaluation of ways to prevent equipment theft – Procedures to execute the plan • Equipment theft – A big problem • About $1 billion lost each year to theft of computers and related equipment – Attractive good second hand market
Preventing Computer Viruses • Viruses (Macro viruses) – Attach themselves to other programs (documents) and spread when the programs are executed (the files are opened) • Worms – Special type of virus that spread itself without human intervention (copies itself from computer to computer) • Anti-virus software packages – Check disks and files to ensure that they are virus-free • Incoming e-mail messages – Most common source of viruses – Attachments to e-mails to be checked for viruses – Use of filtering programs that ‘clean’ incoming e-mail
Detecting Disruption, Destruction, Disaster • Recognize major problems quickly • Involves alerting network managers to problems for corrective actions – Requires clear procedures describing how to report problems quickly • Detecting minor disruptions – More difficult • Bad spots on a drive remaining unnoticed until it is checked – Requires ongoing monitoring – Requires fault information be routinely logged
Disaster Recovery Plans (DRPs) • Identify clear responses to possible disasters • Provide for partial or complete recovery of – All data, Application software, – Network components, and Physical facilities • Includes backup and recovery controls – Make backup copies of all data and SW routinely – Encrypt them and store them offsite • Should include a documented and tested approach to recovery – Include Disaster Recovery Drills • Should address what to do in situations like – If the main database is destroyed – If the data center is destroyed, how long
Controlling Unauthorized Access • Types of intruders – Casual intruders • With Limited knowledge (“trying doorknobs”) • Script kiddies: Novice attackers using hacking tools – Security experts (hackers) • Motivation: the thrill of the hunt; show off • Crackers: hackers who cause damage – Professional hackers (espionage, fraud, etc) • Breaking into computers for specific purposes – Organization employees • With legitimate access to the network • Gain access to information not authorized to use
Preventing Unauthorized Access • Requires a proactive approach that includes routinely testing the security systems • Best rule for high security – Do not keep extremely sensitive data online – Store them in computers isolated from the network • Security Policy – Should define clearly
Elements of a Security Policy • Names of responsible individuals • Incident reporting system and response team • Risk assessment with priorities • An acceptable use policy • User training plan on security
Aspects of Preventing Unauthorized Access • Securing the Network Perimeter • Securing the Interior of the network – Most ignored aspects – “candy security” – security without this aspect • “crunchy outside, soft and chewy inside” • Authenticating users – To make sure only valid users are allowed into the network
Securing Network Perimeter • Basic access points into a network – LANs inside the organization – Dial-up access through a modem – Internet (most attacks come in this way) • Basic elements in preventing access – Physical Security – Dial-in security – Firewalls and – Network Address Translation (NAT) Proxy servers
Physical Security • Means preventing outsiders from gaining access into offices, server rooms, equipment – Secure both main and remote facilities – Implement proper access controls to areas where network equipment is located
Personnel Matters • Also important to – Provide proper security education – Perform background checks – Implement error and fraud controls • Reduces the possibility of attackers posing as employees – Example: Become employed as janitor (doorkeeper) and use various listening devices/computers to access the network • Areas vulnerable to this type of access: – Network Cabling – Network Devices
Securing Network Cables • Easiest targets for eavesdropping – Often run long distances and usually not checked regularly – Easier to tap into local cables • Easier to identify individual circuits/channels • Control physical access by employees or vendors to connectors and cables – Secure local cables behind walls and above ceilings – Keep equipment room locked and alarm controlled • Choose a cable type harder to tap – Harder to tap into fiber optic cables – Pressurized cables: generates alarms when cut
Securing Network Devices • Should be secured in locked wiring closets – More vulnerable: LAN devices (controllers, hubs, bridges, routers, etc.,) • A sniffer (LAN listening device) can be easily hooked up to these devices  Use secure hubs: requires special code before a new computers are connected
Firewalls • Prevent intruders (by securing Internet connections) – From making unauthorized access and denial of service attacks to your network • Could be a router, gateway, or special purpose computer – Examines packets flowing into and out of the organization’s network – Restricts access to that network – Placed on every connection that network has to Internet • Main types of firewalls – Packet level firewalls (a.k.a., packet filters) – Application-level firewalls (a.k.a., application gateway)
Packet Filters • Examines the source and destination address of packets passing through – Allows only packets that have acceptable addresses to pass – Examines IP Addresses and TCP ports only • Firewall is unaware of applications and what the intruder is trying to do • IP spoofing remains a problem – Done by simply changing the source address of incoming packets from their real address to an address inside the organization’s network • Firewall will pass this packet
Application-Level Firewalls • Acts as an intermediate host computer (between outside clients and internal servers) – Forces anyone to login to this firewall and allows access only to authorized applications (e.g., Web site access) – Separates a private network from the rest of the Internet • Hides individual computers on the network behind the firewall • Some prohibits external users downloading executable files – Software modifications done via physical access • Requires more processing power than packet filters which can impact network performance
Network Address Translation (NAT) • Used, by most firewalls, to shield a private network from outside interference – Translates between private addresses inside a network and public addresses outside the network – Done transparently (unnoticed by external computers) – Internal IP addresses remain hidden • Performed by NAT proxy servers – Uses an address table to do translations
Using Illegal Addresses with NAT • Used to provide additional security • Assigns illegal IP addresses to devices inside the network – Even if they are discovered, no packets (with these addresses) from Internet will be delivered (illegal IP address) – Example: Assigned by ICANN: 128.192.55.xx • Assign to NAT proxy server: 128.192.55.1 • Assign to internal computers: 10.3.3.xx – 10.x.x.x is reserved for private networks (never used on Internet) • No problem with users: NAT proxy server • Big problem with intruders !!
Use of NAT Proxy Servers • Becoming popular; replacing firewalls • Slow down message transfer • Require at least two separate DNS servers – For use by external users on Internet – For use by internal users (internal DNS server)
A Network Design Using Firewalls For initial screening - Permits web access - Denies FTP requests
Securing the Interior • Security Holes • Trojan Horses • Encryption
Security Holes • Made by flaws in network software that permit unintended access to the network – A bug that permits unauthorized access – Operating systems often contain security holes • Once discovered, knowledge about the security hole quickly circulated on the Internet – A race can then begin between • Hackers attempting to break into networks through the security hole and • Security teams working to produce a patch to eliminate the security hole
Other Security Holes • Flawed policies adopted by vendors – New computers come with preinstalled user accounts with well known passwords • Managers forgetting to change these passwords • American government's OS security levels – Minimum level (C2): provided by most OSs – Medium Level (B2): provided by some – Highest level (A1 and A2): provided by few
OS Security: Windows vs. Linux • Windows – Originally written for one user one computer • User with full control • Applications making changes to critical parts of the system – Advantages: More powerful applications (without needing user to understand internals  feature rich, easy to use applications – Disadvantages: Hostile applications taking over the system • Linux – Multi-users with various access wrights – Few system administrators with full control
Trojan Horses • Remote access management consoles that enable users to access a computer and manage it from afar • More often concealed in another software that is downloaded over Internet – Common carriers: Music and video files shared on Internet sites • Undetected by antivirus software • Major Trojans – Back Office: attacked Windows servers • Gives the attacker the same right as the administrator – Morphed into tools such as MoSucker and Optix Pro • Powerful and easy to use
Encryption • One of the best way to prevent unauthorized access (more formally, cryptography) • Process of disguising info by mathematical rules • Main components of encryption systems – Plaintext: Unencrypted message – Encryption algorithm: Works like the locking mechanism to a safe – Key: Works like the safe’s combination – Cipher text: Produced from the plaintext message by the encryption function • Decryption - the same process in reverse – Doesn’t always use the same key or algorithm. – Plaintext results from decryption
Encryption Techniques • Symmetric (private key) encryption – Uses the same algorithm and key to both encrypt and decrypt a message – Most common • Asymmetric (public key) encryption – Uses two different “one way” keys: • a public key used to encrypt messages • a private key used to decrypt them • Digital signatures – Based on a variation of public key encryption
Symmetric Encryption Techniques • Data Encryption Standard (DES) – Developed by the US government and IBM – Standardized and maintained by the National Institute of Standards and Technology (NIST) – A 56-bit version of DES: used commonly, but can be broken by brute force (in a day) – Not recommended for data needing high security • Other symmetric encryption techniques – Triple DES (3DES): DES three times, effectively giving it a 168 bit key – Advanced Encryption Standard (AES), designed to replace DES; uses 128, 192 and 256 bit keys – RC4: a 40 bit key, but can use up to 256 bits
Asymmetric Encryption • Also known as Public Key Encryption (PKE) • Longer keys: 512 bits or 1,024 bits • Greatly reduces the key management problem – Publicized Public keys (in a public directory) – Never distributed Private keys (kept secret) – No need to exchange keys • Use the other’s public key to encrypt • Use the private key to decrypt
PKE Operations 2 1 message sender B makes its public key widely available (say through the Internet) 3 No security hole is created by distributing the public key, since B’s private key has never been distributed. message recipient
Digital Signatures • Provide secure and authenticated message transmission (enabled by PKE) • Provides a proof identifying the sender – Important for certain (legal) transactions • Digital Signature: – Includes the name of the sender and other key contents (e.g., date, time, etc.,) • Use of PKE in reverse (applied to Digital Signature part of the message only) – Outgoing: Encrypted using the sender’s private key – Incoming: Decrypted using the sender’s public key • Providing evidence who the message originated from
Transmission with Digital Signatures Digital Signature only Organization A Organization B
Secure Sockets Layer (SSL) • A protocol widely used on the Web – Operates between the application and transport layers • Operations of SSL – Negotiation for Public key infrastructure • Server HTTP, FTP, SMTP SSL TCP IP Data Link Physical – Send its public key and encryption technique to be used (e.g., RC4, DES) • Browser – Generates a key for this encryption technique; and sends it to the server (by encrypting with servers public key) – Communications • Encrypted by using the key generated by browser
Authenticating Users • Done to ensure that only the authorized users are permitted into network – and into the specific resources inside the network • Basis of user authentication – User profile – User accounts – Passwords – Biometric – Network authentication
User Profile • Assigned to each user account by the manager • Determines the limits of what users have access to on a network – Allowable log-in day and time of day – Allowable physical locations – Allowable number of incorrect log-in attempts • Specifies access details such as – Data and network resources a user can access – Type of access (e.g., read, write, create, delete)
Forms of Access • Password based – Users gain access based on something they know – Not very secure due to poor choice of passwords • Card based – Users gain access based on something they have • Smart cards, ATM cards – Typically used in conjunction with a password • One-time passwords – Users connected to network obtains a password via: • A pager • A token system (a separate handheld device) – A network provided number is entered to device which generates the password • Time-based tokens (password changes every 60 s) – Generated by a device synchronized with server
Biometric based Forms of Access • Users gain access based on something they are – Finger, hand, or retina scanning by a biometric system – Convenient; no need to remember passwords • Used in high-security applications; expensive • Low cost versions becoming available – Fingerprint scanners with less than $100
Best Practice Recommendations • Start with a clear disaster recovery plan and solid security policies • Train individuals on data recovery and social engineering • Use routinely antivirus software, firewalls, physical security, intrusion detection, and encryption

More Related Content

PPTX
Cyber Kill Chain.pptx
byVivek Chauhan
 
PDF
Cybersecurity Fundamentals | Understanding Cybersecurity Basics | Cybersecuri...
byEdureka!
 
PDF
Introduction to Cybersecurity
byKrutarth Vasavada
 
PPTX
CYBER SECURITY
byPranjalShah18
 
PPTX
Vapt( vulnerabilty and penetration testing ) services
byAkshay Kurhade
 
PPTX
Cyber crime.pptx
byDawood Faheem Abbasi
 
PPTX
Cyber security
byTaimoorArshad5
 
PPT
Introduction to Cyber Security
byStephen Lahanas
 
Cyber Kill Chain.pptx
byVivek Chauhan
 
Cybersecurity Fundamentals | Understanding Cybersecurity Basics | Cybersecuri...
byEdureka!
 
Introduction to Cybersecurity
byKrutarth Vasavada
 
CYBER SECURITY
byPranjalShah18
 
Vapt( vulnerabilty and penetration testing ) services
byAkshay Kurhade
 
Cyber crime.pptx
byDawood Faheem Abbasi
 
Cyber security
byTaimoorArshad5
 
Introduction to Cyber Security
byStephen Lahanas
 

What's hot

PPTX
Information Security Awareness
bySnapComms
 
PPT
Computer security overview
byCAS
 
PPTX
Network security (vulnerabilities, threats, and attacks)
byFabiha Shahzad
 
PDF
Cyber Security Awareness
byRamiro Cid
 
PPTX
CYBER SECURITY
byVaishak Chandran
 
PPTX
Introduction to cyber security
byRaviPrashant5
 
PPTX
Network security
bytoamma
 
PPTX
Introduction To Vulnerability Assessment & Penetration Testing
byRaghav Bisht
 
PDF
Cyber Security
byRamiro Cid
 
PDF
Information Security Awareness
byNet at Work
 
PPTX
Information security
byLusungu Mkandawire CISA,CISM,CGEIT,CPF,PRINCE2
 
PPTX
Vulnerabilities and Protections in Information Security.pptx
byAssadLeo1
 
PDF
Cyber Security
byTushar Nikam
 
PPTX
Network security
byMadhumithah Ilango
 
PPTX
Computer security threats & prevention
byPriSim
 
PDF
1. introduction to cyber security
byAnimesh Roy
 
PPTX
Introduction to Cybersecurity Fundamentals
byToño Herrera
 
PPTX
Cybersecurity Attack Vectors: How to Protect Your Organization
byTriCorps Technologies
 
PDF
Basics of Cyber Security
byNikunj Thakkar
 
PDF
Application Security | Application Security Tutorial | Cyber Security Certifi...
byEdureka!
 
Information Security Awareness
bySnapComms
 
Computer security overview
byCAS
 
Network security (vulnerabilities, threats, and attacks)
byFabiha Shahzad
 
Cyber Security Awareness
byRamiro Cid
 
CYBER SECURITY
byVaishak Chandran
 
Introduction to cyber security
byRaviPrashant5
 
Network security
bytoamma
 
Introduction To Vulnerability Assessment & Penetration Testing
byRaghav Bisht
 
Cyber Security
byRamiro Cid
 
Information Security Awareness
byNet at Work
 
Information security
byLusungu Mkandawire CISA,CISM,CGEIT,CPF,PRINCE2
 
Vulnerabilities and Protections in Information Security.pptx
byAssadLeo1
 
Cyber Security
byTushar Nikam
 
Network security
byMadhumithah Ilango
 
Computer security threats & prevention
byPriSim
 
1. introduction to cyber security
byAnimesh Roy
 
Introduction to Cybersecurity Fundamentals
byToño Herrera
 
Cybersecurity Attack Vectors: How to Protect Your Organization
byTriCorps Technologies
 
Basics of Cyber Security
byNikunj Thakkar
 
Application Security | Application Security Tutorial | Cyber Security Certifi...
byEdureka!
 

Similar to Network security

PPT
Ch10
byAli Khawaja
 
PPT
Network security, change control, outsourcing
byNicholas Davis
 
PPT
Network Security, Change Control, Outsourcing
byNicholas Davis
 
KEY
Mis
bymisecho
 
KEY
Chapter 10, part 1
bymisecho
 
DOCX
Security and Ethical Challenges Contributors Kim Wanders.docx
byedgar6wallace88877
 
DOCX
Security and Ethical Challenges Contributors Kim Wanders.docx
byfathwaitewalter
 
PPTX
Unit 1 Network Fundamentals and Security .pptx
byGuna Dhondwad
 
PPTX
Network-Security 1.hahahhhhhhhhhhhhhhhhhhhhhhhhhhhhhh
byrenzcamo78
 
PPT
Security & control in management information system
byOnline
 
PPT
Threats to data and information security
byJohn LEE
 
PPT
08 -Securing Information Systems at workplace.ppt
byRoshni814224
 
PPT
Securing Management Information Systems.ppt
byRoshni814224
 
PPT
Security information for internet and security
bySomesh Kumar
 
PPT
Network Security
byforpalmigho
 
PDF
Cyber Security.pdf
bypreethajoseph5
 
PDF
Network Security Research Paper
byPankaj Jha
 
KEY
Mis
bymisecho
 
PDF
Information Security Risk Management
byipspat
 
PPT
Chapter 1 overview
byali raza
 
Ch10
byAli Khawaja
 
Network security, change control, outsourcing
byNicholas Davis
 
Network Security, Change Control, Outsourcing
byNicholas Davis
 
Mis
bymisecho
 
Chapter 10, part 1
bymisecho
 
Security and Ethical Challenges Contributors Kim Wanders.docx
byedgar6wallace88877
 
Security and Ethical Challenges Contributors Kim Wanders.docx
byfathwaitewalter
 
Unit 1 Network Fundamentals and Security .pptx
byGuna Dhondwad
 
Network-Security 1.hahahhhhhhhhhhhhhhhhhhhhhhhhhhhhhh
byrenzcamo78
 
Security & control in management information system
byOnline
 
Threats to data and information security
byJohn LEE
 
08 -Securing Information Systems at workplace.ppt
byRoshni814224
 
Securing Management Information Systems.ppt
byRoshni814224
 
Security information for internet and security
bySomesh Kumar
 
Network Security
byforpalmigho
 
Cyber Security.pdf
bypreethajoseph5
 
Network Security Research Paper
byPankaj Jha
 
Mis
bymisecho
 
Information Security Risk Management
byipspat
 
Chapter 1 overview
byali raza
 

More from Ujjwal 'Shanu'

PPTX
Risk return trade off
byUjjwal 'Shanu'
 
PPTX
Risk perceprtion of ads of infosys
byUjjwal 'Shanu'
 
PPTX
Mutual funds
byUjjwal 'Shanu'
 
PPTX
Corporate governance
byUjjwal 'Shanu'
 
PPTX
Whistle blower final
byUjjwal 'Shanu'
 
PPT
M&a
byUjjwal 'Shanu'
 
PPT
T test
byUjjwal 'Shanu'
 
PPT
Research design
byUjjwal 'Shanu'
 
PPT
Business research
byUjjwal 'Shanu'
 
PPTX
Measurement and scaling techniques
byUjjwal 'Shanu'
 
PPTX
Taxation
byUjjwal 'Shanu'
 
PPT
Shri palaniappan chidambram
byUjjwal 'Shanu'
 
PPTX
Planning
byUjjwal 'Shanu'
 
PPTX
Merger & acquisition
byUjjwal 'Shanu'
 
PPT
Gaar ppt
byUjjwal 'Shanu'
 
PPTX
Rbi
byUjjwal 'Shanu'
 
PPT
Production theory
byUjjwal 'Shanu'
 
PPT
Perfect competition
byUjjwal 'Shanu'
 
PPT
Oligopoly
byUjjwal 'Shanu'
 
PPT
National income
byUjjwal 'Shanu'
 
Risk return trade off
byUjjwal 'Shanu'
 
Risk perceprtion of ads of infosys
byUjjwal 'Shanu'
 
Mutual funds
byUjjwal 'Shanu'
 
Corporate governance
byUjjwal 'Shanu'
 
Whistle blower final
byUjjwal 'Shanu'
 
M&a
byUjjwal 'Shanu'
 
T test
byUjjwal 'Shanu'
 
Research design
byUjjwal 'Shanu'
 
Business research
byUjjwal 'Shanu'
 
Measurement and scaling techniques
byUjjwal 'Shanu'
 
Taxation
byUjjwal 'Shanu'
 
Shri palaniappan chidambram
byUjjwal 'Shanu'
 
Planning
byUjjwal 'Shanu'
 
Merger & acquisition
byUjjwal 'Shanu'
 
Gaar ppt
byUjjwal 'Shanu'
 
Rbi
byUjjwal 'Shanu'
 
Production theory
byUjjwal 'Shanu'
 
Perfect competition
byUjjwal 'Shanu'
 
Oligopoly
byUjjwal 'Shanu'
 
National income
byUjjwal 'Shanu'
 

Recently uploaded

PPTX
apidays Paris 2025 | Building Agentic Workflows
byapidays
 
PDF
Explaining specific examples of purpose-specific BOM
byakipii ogaoga
 
PDF
GDG Cloud Southlake #49: Pradeep R Kumar: Implications of Agentic AI for Iden...
byJames Anderson
 
PPTX
The Transformative Technology in Contemporary Businesses
bygreyaudrina
 
PPTX
GenerationAI Paris 2025 | AI in Tech: Beyond Expectations, Into Execution
byapidays
 
PDF
From Hallucinations to High-Confidence AI with Data Enrichment.pdf
byPrecisely
 
PDF
Preserve workload integrity during cross-architecture migration
byPrincipled Technologies
 
PDF
GTM-and-Sales-Plan for a cyber security product
byAshish Jangir
 
PPTX
Introducing VisualSim 2610 The Next Leap in System Level Modeling
byDeepak Shankar
 
PPTX
Microsoft Azure News - February 2026 - BAUG
byDaniel Toomey
 
PPTX
Tech Trends 2026: AI Agents, Quantum Computing, Robotics & Cybersecurity
byridwansassman
 
PPTX
Do You Control the AI, or Does the AI Control You?
bymedhateltoukhy
 
PDF
NTG -Company Profile_Software_Vendor_Company_in_MENA
byMustafa Kuğu
 
PDF
How AI Can Help Platform Engineers Build Better Platforms
byAll Things Open
 
PDF
apidays New York 2025 | AI in Application Security
byapidays
 
PDF
UiPath Modern Automation Playbook -Session 2
bysuhanisingh58689
 
PDF
Explaining the flow of purpose-specific BOM
byakipii ogaoga
 
PDF
Escape from the Forbidden Zone: Smuggling green and inclusive tech past the g...
byBookNet Canada
 
PDF
UiPath Automation Developer Associate Training Series 2026 - Session 3
byDianaGray10
 
PDF
Agent to agent service discovery using HashiCorp Consul and Vault
byBram Vogelaar
 
apidays Paris 2025 | Building Agentic Workflows
byapidays
 
Explaining specific examples of purpose-specific BOM
byakipii ogaoga
 
GDG Cloud Southlake #49: Pradeep R Kumar: Implications of Agentic AI for Iden...
byJames Anderson
 
The Transformative Technology in Contemporary Businesses
bygreyaudrina
 
GenerationAI Paris 2025 | AI in Tech: Beyond Expectations, Into Execution
byapidays
 
From Hallucinations to High-Confidence AI with Data Enrichment.pdf
byPrecisely
 
Preserve workload integrity during cross-architecture migration
byPrincipled Technologies
 
GTM-and-Sales-Plan for a cyber security product
byAshish Jangir
 
Introducing VisualSim 2610 The Next Leap in System Level Modeling
byDeepak Shankar
 
Microsoft Azure News - February 2026 - BAUG
byDaniel Toomey
 
Tech Trends 2026: AI Agents, Quantum Computing, Robotics & Cybersecurity
byridwansassman
 
Do You Control the AI, or Does the AI Control You?
bymedhateltoukhy
 
NTG -Company Profile_Software_Vendor_Company_in_MENA
byMustafa Kuğu
 
How AI Can Help Platform Engineers Build Better Platforms
byAll Things Open
 
apidays New York 2025 | AI in Application Security
byapidays
 
UiPath Modern Automation Playbook -Session 2
bysuhanisingh58689
 
Explaining the flow of purpose-specific BOM
byakipii ogaoga
 
Escape from the Forbidden Zone: Smuggling green and inclusive tech past the g...
byBookNet Canada
 
UiPath Automation Developer Associate Training Series 2026 - Session 3
byDianaGray10
 
Agent to agent service discovery using HashiCorp Consul and Vault
byBram Vogelaar
 

Network security

  • 1.
  • 2.
    Outline • Introduction • Riskassessment • Controlling disruption, destruction and disaster • Controlling unauthorized access – Preventing, detecting, and correcting Unauthorized Access • Best practice recommendations
  • 3.
    Introduction • Security -always a major business concern – Protection of physical assets with locks, barriers, guards, etc – Protection of information with passwords, coding • Introduction of computers and Internet – Redefined the nature of information security • Laws and enforcement – Slow to catch-up – Now a federal crime in the U.S. (breaking into a computer) – New laws against cyberborder crimes; difficult to enforce
  • 4.
    Computer Security Incidents •Growing at a rate of 100% per year – 1988: a virus shut down 10% of the computers on the Internet  Establishment of Computer Emergency Response Team (CERT) with US DoD support Number of Incidents Reported to CERT
  • 5.
    Financial Impact ofSecurity • 2003 Computer Security Institute/FBI Computer Crime and Security Survey – 90% of the respondents reported security breaches in the last 12 months – 75% reported a financial loss due to security breaches – Average loss: $2 million • Worldwide total annual cost of security losses – Exceeds $2 trillion • Reason for the increase in security problems – Availability of sophisticated tools to break into networks
  • 6.
    Why Networks NeedSecurity • Organizations becoming vulnerable – Becoming increasingly dependent on computers, networks – Becoming increasingly vulnerable to due widely available Internet access to its computers and networks • Huge losses due to security breaches – $2 M average loss + losses related to less consumer confidence as a result of publicity of breaches – Potential losses from disruption of applications (Bank of America estimates $50 M per day) • Protecting consumer privacy – Strong laws against unauthorized disclosures (California: $250 K for each such incident) • Protecting organizations’ data and application sw – Value of data and applications >> network cost
  • 7.
    Primary Goals inProviding Security • Confidentiality – Protection of data from unauthorized disclosures of customers and proprietary data • Integrity – Assurance that data have not been altered or destroyed • Availability – Providing continuous operations of hardware and software so that parties involved can be assured of uninterrupted service
  • 8.
    Types of SecurityThreats • Business continuity planning related threats – Disruptions • Loss or reduction in network service • Could be minor or temporary (a circuit failure) – Destructions of data • Viruses destroying files, crash of hard disk – Disasters (Natural or manmade disasters ) • May destroy host computers or sections of network • Unauthorized access – Hackers gaining access to data files and resources – Most unauthorized access incidents involve employees – Results: Industrial spying; fraud by changing data, etc.
  • 9.
    Network Controls • Mechanismsthat reduce or eliminate the threats to network security • Types of controls: – Preventative controls • Mitigate or stop a person from acting or an event from occurring (e.g., locks, passwords, backup circuits) • Act as a deterrent by discouraging or retraining – Detective controls • Reveal or discover unwanted events (e.g., auditing) • Documenting events for potential evidence – Corrective controls • Rectify an unwanted event or a trespass (e.g., reinitiating a network circuit)
  • 10.
    Risk Assessment • Akey step in developing a secure network • Assigns level of risks to various threats – By comparing the nature of threats to the controls designed to reduce them • Use a control spreadsheet – List down network assets on the side – List threats across the top – List the controls that are currently in use to address each threat in the corresponding cells
  • 11.
    Sample Control Spreadsheet Threats Assets(with Priority) (92) Mail Server (90) Web Server (90) DNS Server (50) Computers on 6th floor (50) 6th floor LAN circuits (80) Building A Backbone (70) Router in Building A (30) Network Software (100) Client Database (100) Financial Database (70) Network Technical staff Disruption, Destruction, Disaster Fire Flood Power Circuit Virus Loss Failure Unauthorized Access External Internal EavesIntruder Intruder drop
  • 12.
    Types of Assets Hardware •Servers, such as mail servers, web servers, DNS servers, DHCP servers, and LAN file servers • Client computers • Devices such as hubs, switches, and routers Circuits • Locally operated circuits such LANs and backbones • Contracted circuits such as MAN and WAN circuits • Internet access circuits Network Software • Server operating systems and system settings • Applications software such as mail server and web server software Client Software • Operating systems and system settings • Application software such as word processors Organizational Data • Databases with organizational records Mission critical applications • For example, for an Internet bank, the Web site is mission critical
  • 13.
    Common Security Threats •Virus infection – most likely event • Unauthorized access – By internal and external hackers – High cost to recover (both in $ and publicity) • Device failure (not necessarily by a malicious act) • Device theft, Natural Disaster • Denial of Service attacks – External attacks blocking access to the network • Big picture messages: – Viruses: most common threat with a fairly high cost – Unauthorized access by employees: greater threat
  • 14.
    Sample Control Spreadsheet Threats Assets(with Priority) Disruption, Destruction, Disaster Fire Flood Power Circuit Virus Loss Failure Unauthorized Access External Internal EavesIntruder Intruder drop (92) Mail Server 1,2 1,3 4 5, 6 7, 8 9, 10, 11 9, 10 (90) Web Server 1,2 1,3 4 5, 6 7, 8 9, 10, 11 9, 10 (90) DNS Server 1,2 1,3 4 5, 6 7, 8 9, 10, 11 9, 10 1,2 1,3 7, 8 10, 11 10 (50) 6th floor LAN circuits 1,2 1,3 (80) Building A Backbone 1,2 1,3 1,2 1,3 7, 8 9 9 (50) Computers on 6th floor (70) Router in Building A 6 (30) Network Software 7, 8 (100) Client Database 7, 8 (70) Network Technical staff 1 1 9, 10 9, 10, 11 9, 10 9, 10, 11 (100) Financial Database 9, 10, 11 9, 10
  • 15.
    List of Controls  1. 2. 3. 4. 5. 6. 7. 8. Disaster Recovery Plan Halon fire system in server room. Sprinklers in rest of building Not on or below ground level Uninterruptible Power Supply (UPS) on all major network servers Contract guarantees from inter-exchange carriers Extra backbone fiber cable laid in different conduits Virus checking software present on the network Extensive user training on viruses and reminders in monthly newsletter 9. Strong password software 10. Extensive user training on password security and reminders in monthly newsletter 11. Application Layer firewall
  • 16.
    Business Continuity Planning •Make sure that organization’s data and applications will continue to operate even in the face of disruption, destruction, or disaster • Continuity Plan includes – Development of controls • To prevent these events from having a major impact – Disaster recovery plan • To enable the organization to recover if a disaster occurs
  • 17.
    Specifics of ContinuityPlan • Preventing Disruption, Destruction, and Disaster – Using Redundant Hardware – Preventing Natural Disaster – Preventing Theft – Preventing Viruses – Preventing Denial of Service • Detecting Disruption, Destruction, and Disaster • Correcting Disruption, Destruction, and Disaster – Disaster Recovery Plan – Disaster Recovery Outsourcing
  • 18.
    Using Redundant Hardware •A key principal in preventing disruption, destruction and disaster • Examples of components that provide redundancy – Uninterruptible power supplies (UPS) • A separate battery powered power supply • Can supply power for minutes or even hours – Fault-tolerant servers (with redundant components) – Disk mirroring • A redundant second disk for every disk on the server • Every data on primary disk is duplicated on mirror – Disk duplexing (redundant disk controllers) • Can apply to other network components as well – Circuits, routers, client computers, etc.,
  • 19.
    Preventing Natural Disasters •More difficult to do – Since the entire site can be destroyed by a disaster • Fundamental principle: – Decentralize the network resources – Store critical data in at least two separate locations (in different part of the country) • Best solution – Have a completely redundant network that duplicates every network component, but in a different location • Other steps – Depend on the type of disaster to be prevented • Flood: Locate key components away from rivers • Fire: Install Halon fire suppression system
  • 20.
    Preventing Theft • Securityplan must include: – An evaluation of ways to prevent equipment theft – Procedures to execute the plan • Equipment theft – A big problem • About $1 billion lost each year to theft of computers and related equipment – Attractive good second hand market
  • 21.
    Preventing Computer Viruses •Viruses (Macro viruses) – Attach themselves to other programs (documents) and spread when the programs are executed (the files are opened) • Worms – Special type of virus that spread itself without human intervention (copies itself from computer to computer) • Anti-virus software packages – Check disks and files to ensure that they are virus-free • Incoming e-mail messages – Most common source of viruses – Attachments to e-mails to be checked for viruses – Use of filtering programs that ‘clean’ incoming e-mail
  • 22.
    Detecting Disruption, Destruction, Disaster •Recognize major problems quickly • Involves alerting network managers to problems for corrective actions – Requires clear procedures describing how to report problems quickly • Detecting minor disruptions – More difficult • Bad spots on a drive remaining unnoticed until it is checked – Requires ongoing monitoring – Requires fault information be routinely logged
  • 23.
    Disaster Recovery Plans(DRPs) • Identify clear responses to possible disasters • Provide for partial or complete recovery of – All data, Application software, – Network components, and Physical facilities • Includes backup and recovery controls – Make backup copies of all data and SW routinely – Encrypt them and store them offsite • Should include a documented and tested approach to recovery – Include Disaster Recovery Drills • Should address what to do in situations like – If the main database is destroyed – If the data center is destroyed, how long
  • 24.
    Controlling Unauthorized Access •Types of intruders – Casual intruders • With Limited knowledge (“trying doorknobs”) • Script kiddies: Novice attackers using hacking tools – Security experts (hackers) • Motivation: the thrill of the hunt; show off • Crackers: hackers who cause damage – Professional hackers (espionage, fraud, etc) • Breaking into computers for specific purposes – Organization employees • With legitimate access to the network • Gain access to information not authorized to use
  • 25.
    Preventing Unauthorized Access •Requires a proactive approach that includes routinely testing the security systems • Best rule for high security – Do not keep extremely sensitive data online – Store them in computers isolated from the network • Security Policy – Should define clearly
  • 26.
    Elements of aSecurity Policy • Names of responsible individuals • Incident reporting system and response team • Risk assessment with priorities • An acceptable use policy • User training plan on security
  • 27.
    Aspects of PreventingUnauthorized Access • Securing the Network Perimeter • Securing the Interior of the network – Most ignored aspects – “candy security” – security without this aspect • “crunchy outside, soft and chewy inside” • Authenticating users – To make sure only valid users are allowed into the network
  • 28.
    Securing Network Perimeter •Basic access points into a network – LANs inside the organization – Dial-up access through a modem – Internet (most attacks come in this way) • Basic elements in preventing access – Physical Security – Dial-in security – Firewalls and – Network Address Translation (NAT) Proxy servers
  • 29.
    Physical Security • Meanspreventing outsiders from gaining access into offices, server rooms, equipment – Secure both main and remote facilities – Implement proper access controls to areas where network equipment is located
  • 30.
    Personnel Matters • Alsoimportant to – Provide proper security education – Perform background checks – Implement error and fraud controls • Reduces the possibility of attackers posing as employees – Example: Become employed as janitor (doorkeeper) and use various listening devices/computers to access the network • Areas vulnerable to this type of access: – Network Cabling – Network Devices
  • 31.
    Securing Network Cables •Easiest targets for eavesdropping – Often run long distances and usually not checked regularly – Easier to tap into local cables • Easier to identify individual circuits/channels • Control physical access by employees or vendors to connectors and cables – Secure local cables behind walls and above ceilings – Keep equipment room locked and alarm controlled • Choose a cable type harder to tap – Harder to tap into fiber optic cables – Pressurized cables: generates alarms when cut
  • 32.
    Securing Network Devices •Should be secured in locked wiring closets – More vulnerable: LAN devices (controllers, hubs, bridges, routers, etc.,) • A sniffer (LAN listening device) can be easily hooked up to these devices  Use secure hubs: requires special code before a new computers are connected
  • 33.
    Firewalls • Prevent intruders(by securing Internet connections) – From making unauthorized access and denial of service attacks to your network • Could be a router, gateway, or special purpose computer – Examines packets flowing into and out of the organization’s network – Restricts access to that network – Placed on every connection that network has to Internet • Main types of firewalls – Packet level firewalls (a.k.a., packet filters) – Application-level firewalls (a.k.a., application gateway)
  • 34.
    Packet Filters • Examinesthe source and destination address of packets passing through – Allows only packets that have acceptable addresses to pass – Examines IP Addresses and TCP ports only • Firewall is unaware of applications and what the intruder is trying to do • IP spoofing remains a problem – Done by simply changing the source address of incoming packets from their real address to an address inside the organization’s network • Firewall will pass this packet
  • 35.
    Application-Level Firewalls • Actsas an intermediate host computer (between outside clients and internal servers) – Forces anyone to login to this firewall and allows access only to authorized applications (e.g., Web site access) – Separates a private network from the rest of the Internet • Hides individual computers on the network behind the firewall • Some prohibits external users downloading executable files – Software modifications done via physical access • Requires more processing power than packet filters which can impact network performance
  • 36.
    Network Address Translation(NAT) • Used, by most firewalls, to shield a private network from outside interference – Translates between private addresses inside a network and public addresses outside the network – Done transparently (unnoticed by external computers) – Internal IP addresses remain hidden • Performed by NAT proxy servers – Uses an address table to do translations
  • 37.
    Using Illegal Addresseswith NAT • Used to provide additional security • Assigns illegal IP addresses to devices inside the network – Even if they are discovered, no packets (with these addresses) from Internet will be delivered (illegal IP address) – Example: Assigned by ICANN: 128.192.55.xx • Assign to NAT proxy server: 128.192.55.1 • Assign to internal computers: 10.3.3.xx – 10.x.x.x is reserved for private networks (never used on Internet) • No problem with users: NAT proxy server • Big problem with intruders !!
  • 38.
    Use of NATProxy Servers • Becoming popular; replacing firewalls • Slow down message transfer • Require at least two separate DNS servers – For use by external users on Internet – For use by internal users (internal DNS server)
  • 39.
    A Network DesignUsing Firewalls For initial screening - Permits web access - Denies FTP requests
  • 40.
    Securing the Interior •Security Holes • Trojan Horses • Encryption
  • 41.
    Security Holes • Madeby flaws in network software that permit unintended access to the network – A bug that permits unauthorized access – Operating systems often contain security holes • Once discovered, knowledge about the security hole quickly circulated on the Internet – A race can then begin between • Hackers attempting to break into networks through the security hole and • Security teams working to produce a patch to eliminate the security hole
  • 42.
    Other Security Holes •Flawed policies adopted by vendors – New computers come with preinstalled user accounts with well known passwords • Managers forgetting to change these passwords • American government's OS security levels – Minimum level (C2): provided by most OSs – Medium Level (B2): provided by some – Highest level (A1 and A2): provided by few
  • 43.
    OS Security: Windowsvs. Linux • Windows – Originally written for one user one computer • User with full control • Applications making changes to critical parts of the system – Advantages: More powerful applications (without needing user to understand internals  feature rich, easy to use applications – Disadvantages: Hostile applications taking over the system • Linux – Multi-users with various access wrights – Few system administrators with full control
  • 44.
    Trojan Horses • Remoteaccess management consoles that enable users to access a computer and manage it from afar • More often concealed in another software that is downloaded over Internet – Common carriers: Music and video files shared on Internet sites • Undetected by antivirus software • Major Trojans – Back Office: attacked Windows servers • Gives the attacker the same right as the administrator – Morphed into tools such as MoSucker and Optix Pro • Powerful and easy to use
  • 45.
    Encryption • One ofthe best way to prevent unauthorized access (more formally, cryptography) • Process of disguising info by mathematical rules • Main components of encryption systems – Plaintext: Unencrypted message – Encryption algorithm: Works like the locking mechanism to a safe – Key: Works like the safe’s combination – Cipher text: Produced from the plaintext message by the encryption function • Decryption - the same process in reverse – Doesn’t always use the same key or algorithm. – Plaintext results from decryption
  • 46.
    Encryption Techniques • Symmetric(private key) encryption – Uses the same algorithm and key to both encrypt and decrypt a message – Most common • Asymmetric (public key) encryption – Uses two different “one way” keys: • a public key used to encrypt messages • a private key used to decrypt them • Digital signatures – Based on a variation of public key encryption
  • 47.
    Symmetric Encryption Techniques •Data Encryption Standard (DES) – Developed by the US government and IBM – Standardized and maintained by the National Institute of Standards and Technology (NIST) – A 56-bit version of DES: used commonly, but can be broken by brute force (in a day) – Not recommended for data needing high security • Other symmetric encryption techniques – Triple DES (3DES): DES three times, effectively giving it a 168 bit key – Advanced Encryption Standard (AES), designed to replace DES; uses 128, 192 and 256 bit keys – RC4: a 40 bit key, but can use up to 256 bits
  • 48.
    Asymmetric Encryption • Alsoknown as Public Key Encryption (PKE) • Longer keys: 512 bits or 1,024 bits • Greatly reduces the key management problem – Publicized Public keys (in a public directory) – Never distributed Private keys (kept secret) – No need to exchange keys • Use the other’s public key to encrypt • Use the private key to decrypt
  • 49.
    PKE Operations 2 1 message sender Bmakes its public key widely available (say through the Internet) 3 No security hole is created by distributing the public key, since B’s private key has never been distributed. message recipient
  • 50.
    Digital Signatures • Providesecure and authenticated message transmission (enabled by PKE) • Provides a proof identifying the sender – Important for certain (legal) transactions • Digital Signature: – Includes the name of the sender and other key contents (e.g., date, time, etc.,) • Use of PKE in reverse (applied to Digital Signature part of the message only) – Outgoing: Encrypted using the sender’s private key – Incoming: Decrypted using the sender’s public key • Providing evidence who the message originated from
  • 51.
    Transmission with DigitalSignatures Digital Signature only Organization A Organization B
  • 52.
    Secure Sockets Layer(SSL) • A protocol widely used on the Web – Operates between the application and transport layers • Operations of SSL – Negotiation for Public key infrastructure • Server HTTP, FTP, SMTP SSL TCP IP Data Link Physical – Send its public key and encryption technique to be used (e.g., RC4, DES) • Browser – Generates a key for this encryption technique; and sends it to the server (by encrypting with servers public key) – Communications • Encrypted by using the key generated by browser
  • 53.
    Authenticating Users • Doneto ensure that only the authorized users are permitted into network – and into the specific resources inside the network • Basis of user authentication – User profile – User accounts – Passwords – Biometric – Network authentication
  • 54.
    User Profile • Assignedto each user account by the manager • Determines the limits of what users have access to on a network – Allowable log-in day and time of day – Allowable physical locations – Allowable number of incorrect log-in attempts • Specifies access details such as – Data and network resources a user can access – Type of access (e.g., read, write, create, delete)
  • 55.
    Forms of Access •Password based – Users gain access based on something they know – Not very secure due to poor choice of passwords • Card based – Users gain access based on something they have • Smart cards, ATM cards – Typically used in conjunction with a password • One-time passwords – Users connected to network obtains a password via: • A pager • A token system (a separate handheld device) – A network provided number is entered to device which generates the password • Time-based tokens (password changes every 60 s) – Generated by a device synchronized with server
  • 56.
    Biometric based Formsof Access • Users gain access based on something they are – Finger, hand, or retina scanning by a biometric system – Convenient; no need to remember passwords • Used in high-security applications; expensive • Low cost versions becoming available – Fingerprint scanners with less than $100
  • 57.
    Best Practice Recommendations • Startwith a clear disaster recovery plan and solid security policies • Train individuals on data recovery and social engineering • Use routinely antivirus software, firewalls, physical security, intrusion detection, and encryption