Unit 3 Assignment 1: Implementing Passwords

Passwords should be designed to prevent them from being discovered by unauthorized persons. All passwords should have at least eight (8) characters. The user-IS should never be used as the password. Words in dictionary, derivates of user-IDs, and common character sequences such as “123456789” should not be employed.

It’s the most important security feature and basic mean of authentication its important to set secure ungues sable password security is most critical means to protect a system a good password is always desireable not to be compromised the system

No demand to remember multiple passwords, it saves your passwords and other data in sync.

Sadly, there is no way to alleviate the numerous amounts of threats that haunt networks and computers worldwide. The foundation and framework for choosing and implementing countermeasures against them are very important. A written policy is vital in helping to insure that everyone within the organization understands and behaves in an appropriate manner with regards to the fact that sensitive data and the security of software should be kept safe.

* If passwords are written down, they must be kept in a safe place, e.g. a wallet, or a safe. Passwords are not be be written down and tape to the bottom of the keyboard, stuck to the computer monitor with a sticky note, or put in an unlocked desk drawer.

You can prevent all users from using or reuse same old passwords under Linux. The pam_unix module parameter remember can be used to configure the number of previous passwords that cannot be reused.

Create a policy requiring users to obtain a security training prior to gaining access to the wireless networks.

The following questions would guide you on your way to implementing a good authorization concept.

Password Policy: Password policies for SQL Server logins can be compulsory only when the case is installed on windows server 2003 or 2008.

     On September 24, 2010, a laptop was stolen from an unlocked Urology office at the Henry Ford Health Systems hospital. The laptop did contain password protection software; however, it may not have been enough to permit access if the thief had advanced knowledge in computers. Additionally, the information stored on the laptop did not include social security or health insurance information, but instead held “patient names, medical record numbers, dates of birth, telephone numbers, e-mail addresses, and treatment and doctor visits” (Moscaritolo, 2010, p. 1). It is unknown how many records were contained on the laptop, but all records were related to prostate services that were provided during an eleven year span.

19.) Enforce password history option This security setting determines the number of unique new passwords that have to be associated with a user account before an old password can be reused. The value must be between 0 and 24 passwords.

A firewall will be used so that UN authorized users will be restricted. Parts of security will be different user account and password for each member.

Faults are a precise interaction of hardware and software that can be fixed given enough time.

The bottom-up approach lacks support from upper management. The top-down approach offers more upper management support with more funding plus clear planning.

Authentication is the only method which protects information or data of an individual or organization from a second party to access. Based upon the confidentiality of that particular data or information, the level of authentication depends. Now-a-days, all this data and information what we are talking about is getting digitized all around the world. For this digitized data or information to be secure, a proper authentication procedure must be set. This arise the need for an authentication secret which belongs to the category “Something we know” to come into picture. These secrets authenticate each secret holder as the authorized legitimate user to access their particular account. Technology is