Unit 9 Network Security P2

I setup windows 2008 server create Microsoft Active Directory(AD), AD can centralize all user accounts for management and setup use right to access File Server permissions can enhance the level of flexibility in management.

Organizations should develop a security policy for the wireless LAN infrastructure prior to the implementation stage. In order to have a strong security policy,

When deciding how to grant access to users, the main concept is limiting access. Users should be granted only based on level of permissions they need in order to perform their job duties. By placing users into groups according to their job titles in an organization, this will provide these users access to company information and resources in the network. These group assignments will allow an organization to give users only what they need to complete their job tasks and ensure that unauthorized access is limited.

Individual users play an important role in any form of institution or organization but concerns are raised about the security. The network administrators clearly lay down a set of rules, regulations and protocols that an individual user has to agree accordingly upon which part of the resources and what class of service that the user can obtain.

There are multiple aspects of security in this network, which I have tried to implement as much as possible. This is where the CIA triangle comes into play, confidentiality, rules and limits to access information; Integrity, making sure the data is accurate and trustworthy; Availability, having reliable access to the information. I am going to talk about each aspect in a list format and explain how it’s used in my network. One thing that will be performed on all network devices is system updates and patches. They will happen on a monthly basis, on a weekend when the networks are not being used.

Security questions will be a great help also to ensure your account. This is a security question secret password that will help you recover your account if it is hacked by the intruder. Make sure you select a unique questions and answer it in a perplexing way. If the questions are too simple, intruder can guess it effortlessly by just searching your details in your social media accounts.

Account Management- Account Management manages what resources the user can access. It also allows users to only have to remember a single user and password. It allows users to access to central file servers, main printers and applications.

Employee logins for the file server can be setup either with User Accounts or the server management tool. I would recommend file directories also be assigned with group policy so that access to some files could be limited to some users, for instance only admin and accounting need access to accounting files and only upper management and HR need access to Human Resources shared files, etc.

The early version of the worm functioned as a man-in-the-middle attack. It sat between the engineering software and the Siemens controllers for the input and output valves feeding into each centrifuge. The worm would accept commands from the engineering software and give false responses to indicate that these commands were being processed by the controllers. In reality, the worm was regularly allowing the centrifuges to be over-pressurized, which had the effect of causing the centrifuges to wear out and break more quickly. The later version of the software was much more crude. It would take over the centrifuges and refuse to acknowledge signals from the engineering software while an attack was active. The attack operated about once a month and worked by slowing down the centrifuges and then spinning them back up to past their normal full speed. This would cause damage as the centrifuges passed through what was known as a resonance speed, which would destabilize the rotor. Stuxnet managed to increase the rotor speeds at Iran’s Natanz nuclear facility from a normal speed of 63,000 rpm to 84,600 rpm. The worms were carefully designed so that it would not be obvious to someone in the facility that their mechanical systems were being sabotaged. For example, the worm would randomly affect different centrifuges at

What services are to be permitted and denied access to your network or computer? Make a list of what enters and leaves your network. Discuss

The framework of security policy is defined to construct a structure by the help of which policy gaps can be identified in an easy manner. A system specific policy would assist to ensure that all employees and management comply with the policies. This is also used to maintain the confidentiality for user authentication would assist in the confidentiality aspect of security, maintain integrity (There are several limiting rules or constraints which are distinct in the relational data model and whose work is to maintain the data’s accuracy and maintain its integrity.), availability and authenticity of the system. Access controls are a collection of mechanisms that work together to create security architecture to protect the assets of an information system. One of the goals of access control is personal accountability, which is the mechanism that proves someone performed a computer activity at a specific point in time. So, the framework acts as the guideline

Cubicle 2-5 had an unsecured trash can which should be kept in a restricted access area to prevent unauthorized access to sensitive information. Cubicle 2-6 did have a fingerprint scanner, which increases access controls. In the hallway there was sensitive financial information displayed on a cork board which should be removed as all sensitive information should be secured. In office 2-1 the computer was not locked. Controls should be put in place to requiring all employees to secure their hardware. Office 2-1 also had a post it note with login information displayed. As previously mentioned with office 1-1, password security needs to increased. For example, security could monitor the premises to ensure login information is not displayed in addition to the company strictly enforcing such controls. Office 2-2 also had login information displayed, there was no fingerprint scanner, a flash drive was on the desk as well as sensitive information. Again, increased security surrounding login information needs to be enforced as well as encrypting flash drives and securing sensitive information in a locked location.

It would be best to apply antivirus programs especially on emails and email quadrating to identify unknown file types and catch any unsafe programs trying to come into the organization. The ability to block outbound traffic that may be accessed during normal work procedures. Also to have some type of file transfer or monitoring on unknown files types received by employees. These programs will all assist in maintaining security and integrity for the organization’s sensitive information (Kim & Solomon, 2012).

Users accounts should be limited and not granted excessive authorizations especially ability to access to administrative functions such as read and/or write source code and source code trees.

Network security has changed significantly over the past years. There is more and more data to monitor and analyze in order to detect the activity of your data and systems. Securing a network has many variables. Password authentication, network access, patches, anti-virus protection, intrusion detection, firewall and network monitoring tools are just a few of the things you can do to protect yourself.