preview

Nt1310 Unit 1

Good Essays
Open Document

CSC 1: Inventory of Authorized and Unauthorized Devices Critical Security Control 1 was implemented to actively manage all hardware devices on the network so that only authorized devices are given access, and unauthorized and unmanaged devices are found and prevented from gaining access. This is critical because attackers, who can be located anywhere in the world, are continuously scanning and monitoring the address space of target organizations. They do this for the main purpose of waiting for new or unprotected systems to be attached to the network. A main focus is looking for devices (especially laptops) that come and go off of the enterprise’s network. These devices are vulnerable because they can commonly get out of sync with patches or …show more content…

When a machine becomes compromised, attackers often make significant changes like back doors or trap doors to configurations and software. Frequently, an attacker might make subtle modifications to data stored on compromised machines. This is done to populate the machine with polluted information potentially jeopardizing organizational effectiveness a company. “When the attackers are discovered, it can be extremely difficult for organizations without a trustworthy data recovery capability to remove all aspects of the attacker's presence on the machine” (CSC 2015). SANS recommends that once per quarter, the testing team evaluates a random sample of system backups. The team will attempt to restore the backups on a test bed environment to validate which backups are still accurate. Once the restored systems are verified to ensure that the operating system, application, and data from the backup are not populated with a malware injection. The correct backups would be store for future use, if a malware injection occurs a version of the backup that predates the original infection will be

Get Access
Related
Get Access