OV 11 - 1 Copyright © 2011 Element K Content LLC. All rights reserved. System Security  Computer Security Basics  System Security Tools  Authentication.

OV 11 - 3 Copyright © 2011 Element K Content LLC. All rights reserved. Least Privilege User 1 User 4 User 2User 3 Data Entry Clerks Financial Coordinators Perform their job with more access privileges Perform their job with more access privileges Perform their job with fewer access privileges Perform their job with fewer access privileges

OV 11 - 4 Copyright © 2011 Element K Content LLC. All rights reserved. Non-Repudiation With non-repudiation:  Owner or sender of data remains associated with the data  Independent verification of sender’s identity  Sender is responsible for message and data

OV 11 - 5 Copyright © 2011 Element K Content LLC. All rights reserved. Threats Information Security Threats Changes to Information Interruption of Services Interruption of Access Damage to Hardware Damage to Facilities Unintentional or intentional Unintentional or intentional

OV 11 - 6 Copyright © 2011 Element K Content LLC. All rights reserved. Vulnerabilities Vulnerabilities include:  Improperly configured or installed hardware or software  Bugs in software or operating systems  Misuse of software or communication protocols  Poorly designed networks  Poor physical security  Insecure passwords  Unchecked user input  Design flaws in software or operating systems AttackerUnsecured routerInformation system

OV 11 - 7 Copyright © 2011 Element K Content LLC. All rights reserved. Attacks Physical Security AttacksSoftware-Based Attacks Social Engineering AttacksWeb Application-Based Attacks Network-Based Attacks

OV 11 - 9 Copyright © 2011 Element K Content LLC. All rights reserved. Unauthorized Access Attacker Intentional or unintentional misuse Intentional or unintentional misuse Deliberate attack by outsider Deliberate attack by outsider

OV 11 - 13 Copyright © 2011 Element K Content LLC. All rights reserved. NTFS Permissions  Supports file-level security on Windows operating systems  Permissions can be applied either to folders or to individual files.  When applied on a folder, these permissions, are applied to the files and subfolders within it.  There are several levels of NTFS permissions, which specify whether users can:  Read files or run applications  Write to existing files and  Modify, create, or delete files.

OV 11 - 19 Copyright © 2011 Element K Content LLC. All rights reserved. Biometrics  Fingerprint scanner  Retinal scanner  Hand geometry scanner  Voice-recognition software  Facial-recognition software Fingerprint Scanner

OV 11 - 23 Copyright © 2011 Element K Content LLC. All rights reserved. EAP EAP:  Hardware-based identifiers for authentication:  Fingerprint scanners  Smart Card readers  Different EAP type for each authentication scheme  Might need password in addition to physical authentication Fingerprint scanner

OV 11 - 32 Copyright © 2011 Element K Content LLC. All rights reserved. Key-Based Encryption Systems (Cont.) Key-Pair Encryption Computer AComputer B Computer A Computer B Public key B Computer AComputer B Public key A Exchange public keys Data encrypted using public key B Data decrypted using private key B 3 3 2 2 1 1

OV 11 - 34 Copyright © 2011 Element K Content LLC. All rights reserved. WPA/WPA2 TKIP EAP TKIP provides improved data encryption. EAP provides stronger user authentication. TKIP provides improved data encryption. EAP provides stronger user authentication.

OV 11 - 36 Copyright © 2011 Element K Content LLC. All rights reserved. Certificate Encryption 1 1 2 2 4 4 3 3 1. User obtains certificate and keys 2. User shares public key 3. Data encrypted with public key 4. Data decrypted with private key

OV 11 - 38 Copyright © 2011 Element K Content LLC. All rights reserved. Certificate Authentication 1 1 2 2 4 4 3 3 1. Presents certificate 2. Validates and accepts certificate 3. Issues certificate 4. Certificate authentication is successful Certificate holderResource CA

OV 11 - 42 Copyright © 2011 Element K Content LLC. All rights reserved. Encryption Using SSL Request secure connection 1 1 Send certificate and public key 2 2 Negotiate encryption 3 3 Generates and encrypts a session key 4 4 Uses session key for data encryption 5 5

OV 11 - 44 Copyright © 2011 Element K Content LLC. All rights reserved. Reflective Questions 1. Which of the basic security concepts in this lesson were familiar to you, and which were new? 2. Can you describe some situations in which you have used basic security techniques such as authentication, access control, and encryption, or made use of a security policy?

OV 11 - 1 Copyright © 2011 Element K Content LLC. All rights reserved. System Security  Computer Security Basics  System Security Tools  Authentication.

Similar presentations

Presentation on theme: "OV 11 - 1 Copyright © 2011 Element K Content LLC. All rights reserved. System Security  Computer Security Basics  System Security Tools  Authentication."— Presentation transcript:

Similar presentations

About project

Feedback

Log in

Auth with social network:

OV 11 - 1 Copyright © 2011 Element K Content LLC. All rights reserved. System Security  Computer Security Basics  System Security Tools  Authentication.

Similar presentations

Presentation on theme: "OV 11 - 1 Copyright © 2011 Element K Content LLC. All rights reserved. System Security  Computer Security Basics  System Security Tools  Authentication."— Presentation transcript:

Similar presentations

About project

Feedback