Digital Security Prevention Methods

Question 1

Anti-virus & Anti-malware

Answer 1

• Anti-malware software runs on the computer
  
  • Each device manages its own protection

-Updates must be completed on all device

• Large organization need Enterprise management
  
  • Track updates , push updates , confirm updates , manage engine updates

-Mobility adds to the challenge

Question 2

Host-Based Firewalls

Answer 2

• ‘Personal” firewalls
  
  • Software based
• Included in most operating system
  
  • 3rd-party solutions also available
• Stops unauthorized network access
  
  • “stateful” firewall
  • Blocks traffic by application

Question 3

Network-based Firewalls

Answer 3

• Filters traffic by port number
  
  • OSI later 4 (TCP / UDP)
  • Some firewall can filter through OSI layer 7
• Can encrypt traffic into/out of network
• Can proxy traffic
• Most firewalls can be layer 3 devices (routers)
  
  • Usually sits on the ingress / egress of network

Question 4

Directories Permissions

Answer 4

• NTFS permissions
  
  • Much more granular than FAT
  • Lock down access
  • Prevent accidental modification or deletion
  • Some information shouldn’t be seen
• User permissions
  
  • Everyone isn’t an Administrator
  • Assign proper rights & permissions
  • this may be an involved audit

Question 5

VPN Concentrator

Answer 5

• Virtual Private Network
  
  • Encrypt (private) data traversing a public network
• Concentrator
  
  • Encrypt / decryption access device
• Many deployment options
  
  • Specialized cryptographic hardware
  • Software - based options available

-Used with client software

Question 6

Data Loss Prvention

Answer 6

• Where’s your data
  
  • Social security numbers
  • Credit card numbers , medical records
• Stop the data before bad guys do
• So many sources , so many destination

Question 7

Disabling Unused ports

Answer 7

• This is good practiced
  
  • Don’t just rely on 802.1X
• Requires additional maintenance
  
  • Also requires constant vigilance
• Plan on periodic reviews
  
  • Easy to do on the switch management console

Question 8

Access Control Lists

Answer 8

• ACLs
  
  • Permissions associated with an object
  • Used in file systems , network devices , OS, etc
• List the permissions
  
  • Bob can read files
  • Fred can access the network
  • James can access network 192.168.1.0 / 24 using tcp port 80 , 443 & 8088

Question 9

Smart Card

Answer 9

• Must have physical card to provide access
  
  • A digital certificate
• Multiple factors
  
  • Card with PIN or Fingerprint

Question 10

Email Filtering

Answer 10

• Unsolicited email / spam
  
  • Stop it at the gateway before it reaches user
  • On-site or cloud based
• Scan & block malicious software
  
  • Executables , known vulnerabilities