Authentication Methods Type 1 Authentication: Something you know Passwords Static Passwords – reusable password that may or may not expire. User generated and work best with when combined with other authentication type such as smart card or biometric Passphrase –…
Network Architecture and Design Network Defense-in-depth Anyone control may fail, so multiple controls are always recommended. Routers, Firewalls, IPS, hostbased protections, Antivirus, patching and user awareness training should all be used in concert so that failure of one control should…
Perimeter Defenses Fences Fences range from 1M to 2.4M with barbed wire on top and should be designed to steer ingress and egress to contolled points such as doors and gates. Gates Gates range from Class I gates (home) deter…
Cornerstone Cryptographic Concepts Cryptology – Science of secure communications. Encompasses both cryptography and cryptoanalysis Cryptography – Creates messages whose meaning is hidden Cryptoanalysis – Science of breaking encrypted messages Cipher – A cryptographic algorithm Plaintext – unencrypted message Encryption –…
Security Models Reading down and Writing Up Reading Down – Occurs when a subject reads an object at a lower sensitivity level. ie A top secret subject reading a secret object. Writing Up – At the expense of integrity, when…
Classifying Data The day to day management of access control requires management of labels, clearances, formal access approval, and need to know. These formal mechanisms are typically used to protect highly sensitive data, such as government or military data. Labels…
Information Security Concepts Confidentiality, Integrity, Availaibilty – CIA Triad Confidentiality – Seeks to prevent unauthorized read access to data. Data must only be accessible to users who have the clearance, formal access approval and the need to know. Integrity –…