Module 2 OBJECTIVE 14: Compare various security mechanisms. GROUP ONE Module 2 OBJECTIVE 14: Compare various security mechanisms.

Access control. Access control is a security technique that regulates who or what can view or use resources in a computing environment. It is a fundamental concept in security that minimizes risk to the business or organization. There are two types of access control, physical and logical. Physical access control limits access to campuses, buildings, rooms and physical IT assets. Logical access control limits connections to computer networks, system files and data.

Access control systems perform identification, authentication and authorization of users and entities by evaluating required login credentials that can include passwords (not obvious, suitable length, mixed case), personal identification numbers (PINs), biometric scans or other authentication factors. Multifactor authentication which requires two or more authentication factors, is often an important part of layered defense to protect access control systems.

identification When issuing identification values to users or subjects, ensure that, Each value should be unique, for user accountability A standard naming scheme should be followed The values should be non-descriptive of the users position or task The values should not be shared between the users.

authentication There are 3 general factors for authenticating a subject. Something a person knows- E.g.: passwords, PIN- least expensive, least secure Something a person has – E.g.: Access Card, key- expensive, secure Something a person is- E.g.: Biometrics- most expensive, most secure

Authentication methods Biometrics Verifies an individuals identity by analyzing a unique personal attribute or behavior It is the most effective and accurate method for verifying identification. It is the most expensive authentication mechanism Passwords It is the most common form of system identification and authentication mechanism A password is a protected string of characters that is used to authenticate an individual Password Management Password should be properly guaranteed, updated, and kept secret to provide and effective security Passwords generators can be used to generate passwords that are uncomplicated, pronounceable, non-dictionary words

authorization Authorization is finding out if the person, once identified, is permitted to have the resource. This is usually determined by finding out if that person is a part of a particular group, if that person has paid admission, or has a particular level of security clearance. 

Physical access control Physical access control refers to the selective restriction of access to a space. Examples of physical access control include fob controlled gates, RFID doors and password protected IT systems. It’s important for access control measures to be able to adapt with changing access requirements. Adaptable access control measures provide a smooth transition between restriction and access. However, ease of transition must be carefully balanced with security. The best physical access measures are both secure and adaptable.

Examples of Physical Control Fences Locks Badge system Security guard Biometric system Mantrap doors Lighting Motion detectors Closed-circuit TVs Alarms Backups safe storage area of backups

LOGICAL ACCESS CONTROL. Logical access control generally features identification, authentication and authorization protocols. This is different than physical access control which utilizes keys, badges, or other tokens to allow access to certain areas. Businesses, organizations and other entities typically use a broad range of logical access controls to protect hardware. These controls might include the use of sophisticated password programs, advanced biometric security features or other methods that effectively identify and screen users. The exact type of logical access control used depends on the entity that owns and administrates the hardware setup.

While physical access control limits access to buildings, rooms, areas and IT assets, logical access control limits connections to computer networks, system files and data.

Physical access control devices. Proximity Card Access System Smart Card Access System Key Fob Access System Swipe Card Access System Multi-Technology Access System Biometric Access System Mobile Access System

Examples of logical control User Account Management Violation and Security Activity Reports Firewalls Passwords Account restrictions Access control list Group policies

Passwords characteristics A password is a basic security mechanism that consists of a secret pass phrase created using different characters. A good password consist of: Characters Numbers alphanumeric and symbolic characters combination must contain 8 to 16 characteristic Upper Case letters Lower case letters

Encryptions Encryption is the process of using an algorithm to transform information to make it unreadable for unauthorized users. This cryptographic method protects sensitive data such as credit card numbers by encoding and transforming information into unreadable cipher text. This encoded data may only be decrypted or made readable with a key. Symmetric-key and asymmetric-key are the two primary types of encryption.  Encryption is essential for ensured and trusted delivery of sensitive information

firewall A firewall is software used to maintain the security of a private network. Firewalls block unauthorized access to or from private networks and are often employed to prevent unauthorized Web users or illicit software from gaining access to private networks connected to the Internet. A firewall may be implemented using hardware, software, or a combination of both. A firewall is recognized as the first line of defense in securing sensitive information. For better safety, the data can be encrypted.