IT Security Basic - CH.1 Introduction
Introduction
What is security?
- Encryption
- Authentication
- Identification
Why we need network security?
Increase in digital criminal and now is a serious problem which caused economic damage.
Ways of attack
- Guessing password
- Cracking
- back doors
- sniffers
- Packet spoofing
- Dos
- www attacks
- SQL injection
- Buffer overflow
- ...
Vulnerabilities Reported
No. of Vulnerabilities is strictly increasing
SPAM - The biggest problem in the Internet
- Capture victim PCs to be used as SPAM sending zombies
- Rent zombies to others
- 50% of email in many companies are SPAM
- Phishing
Trick people by sending email that direct them to fake websites [E.g. A Bank] and steal passwords
Hope - IT Security professionals
- Training IT Professionals
- Increase understanding of users
- New technology on - encryption, strong authentication and survivable systems
- Increase collaboration across government and industry
- Establish risk management process
Security Policy - RFC 2196
A security policy is a formal statement of the rules by which people who are given access to an organization's technology and information assets must abide
Security Practices Structure
Step 1: Harden/Secure
- Install the operating system and all applicable patches
- Deny all, then allow the just enough privilege
- Set authentication mechanisms, backups, virus detection, remote administration and physical access
- Logging activities
Step 2: Prepare
- Prioritize critical assets, level of asset protection, potential threats and detection
- Identify what data should collect and the collection mechanisms
- Identify, install and understand monitoring tools
- Keep and protect recorded information
Step 3: Detect
- Investigate unauthorized hardware
- Initiate response procedure
- Monitor system and network activities
- Inspect files and directories for unexpected changes
Step 4: Response
- Analyze available information
- Collect evidence
- Disseminate information per policy, using secure channels
- Return systems to normal operation
Step 5: Improve
- Install new patch, re-harden system
- Install new tools
- Update policy and train users
- Update configuration of alert, logging and any mechanisms
Types of digital pest
- Logic Bombs
- Trapdoor
- Trojan Horse
- Virus
- Worms
- Zombie
- ...
Counter measure available
- Cryptography Algorithms and Secure Protocols
- Secure network protocols
- Secure programming techniques
- Building secure software
- Access control and policies
- Authentication tools
- Security Perimeter Controls and Patrol
- Monitoring tools
REMEMBER
- Security is about Risk management. You cannot 100% eliminate all existing risks.
- Security is a process. It is not a piece of software or a box of hardware.
- Practice Defense-in-depth
- Education should be given to anybody is related.
