Upload File

module 9: designing security for data. overview creating a security plan for data creating a design...

  • Home
  • Documents
  • Module 9: Designing Security for Data. Overview Creating a Security Plan for Data Creating a Design for Security of Data
16
Module 9: Designing Security for Data

Upload: horace-nathaniel-moody

Post on 13-Dec-2015

218 views

Category:

Documents


5 download

Report

Tags:

TRANSCRIPT

Page 1: Module 9: Designing Security for Data. Overview Creating a Security Plan for Data Creating a Design for Security of Data

Module 9:Designing Security for Data

Page 2: Module 9: Designing Security for Data. Overview Creating a Security Plan for Data Creating a Design for Security of Data

Overview

Creating a Security Plan for Data

Creating a Design for Security of Data

Page 3: Module 9: Designing Security for Data. Overview Creating a Security Plan for Data Creating a Design for Security of Data

Lesson 1: Creating a Security Plan for Data

MSF and Security of Data

Defense in Depth and Security of Data

What Is Access Control?

STRIDE Threat Model and Security of Data

Activity: Identifying Threats to Data

Page 4: Module 9: Designing Security for Data. Overview Creating a Security Plan for Data Creating a Design for Security of Data

MSF and Security of Data

The MSF envisioning and planning phases help you to:The MSF envisioning and planning phases help you to:

Decide which locations your plan will help to protect

Ensure that appropriate countermeasures are applied

Consider appropriate DACL configuration

Decide which locations your plan will help to protect

Ensure that appropriate countermeasures are applied

Consider appropriate DACL configuration

3344

55Plan

Envision

Page 5: Module 9: Designing Security for Data. Overview Creating a Security Plan for Data Creating a Design for Security of Data

Defense in Depth and Security of Data

Policies, Procedures, and Awareness

Physical Security

Perimeter

Internal Network

Application

Host

Data

Page 6: Module 9: Designing Security for Data. Overview Creating a Security Plan for Data Creating a Design for Security of Data

What Is Access Control?

Stored on the user’s computerContains the SIDs of the users account and groupsLists the user rights for the user

Stored on the user’s computerContains the SIDs of the users account and groupsLists the user rights for the user

Access Token

Contains an ACE for each permission that is assignedSIDs compared to SIDs in the access tokenContains an ACE for each permission that is assignedSIDs compared to SIDs in the access tokenDACL

Defines the protections that apply to an object Defines the protections that apply to an object ACE

Page 7: Module 9: Designing Security for Data. Overview Creating a Security Plan for Data Creating a Design for Security of Data

STRIDE Threat Model and Security of Data

Administrators and users have improper rights Administrators and users have improper rights Spoofing

Computers running Windows use default NTFS and share permissions Computers running Windows use default NTFS and share permissions Tampering

Hardware failsHardware failsRepudiation

Permissions are assigned incorrectlyPermissions are assigned incorrectlyInformation disclosure

A user irreversibly encrypts a fileA user irreversibly encrypts a fileDenial of service

A virus corrupts or deletes dataA virus corrupts or deletes dataElevation of privilege

Page 8: Module 9: Designing Security for Data. Overview Creating a Security Plan for Data Creating a Design for Security of Data

Activity: Identifying Threats to Data

In this practice you will:In this practice you will:

Read the scenario

Answer the questions

Discuss with the class

Read the scenario

Answer the questions

Discuss with the class

Page 9: Module 9: Designing Security for Data. Overview Creating a Security Plan for Data Creating a Design for Security of Data

Lesson 2: Creating a Design for Security of Data

Process for Designing an Access Control Model

Considerations for Combining NTFS and Share Permissions

Multimedia: How Encryption Works

Process for Designing EFS Policies

Guidelines for Managing Data Securely

Activity: Data Threats and Countermeasures

Page 10: Module 9: Designing Security for Data. Overview Creating a Security Plan for Data Creating a Design for Security of Data

To design an access control model, follow these steps:To design an access control model, follow these steps:

Determine access control requirements

Create the access control model

Implement the model

Determine access control requirements

Create the access control model

Implement the model

11

33

22

Process for Designing an Access Control Model

Accounts Global Group Domain Local Group Permissions

Page 11: Module 9: Designing Security for Data. Overview Creating a Security Plan for Data Creating a Design for Security of Data

Considerations for Combining NTFS and Share Permissions

Permissions Applied

Share When the data is accessed remotely over a network

NTFS When a user accesses data on an NTFS volume locally or remotely

Page 12: Module 9: Designing Security for Data. Overview Creating a Security Plan for Data Creating a Design for Security of Data

Multimedia: How Encryption Works

How EFS Works

How BitLocker Works

Page 13: Module 9: Designing Security for Data. Overview Creating a Security Plan for Data Creating a Design for Security of Data

To ensure the proper use of encryption in your organization, design:To ensure the proper use of encryption in your organization, design:

Policies for encrypting files

Procedures for recovering encrypted files

A user education strategy

Policies for encrypting files

Procedures for recovering encrypted files

A user education strategy

11

33

22

Process for Designing Encryption Policies

Page 14: Module 9: Designing Security for Data. Overview Creating a Security Plan for Data Creating a Design for Security of Data

Guidelines for Managing Data Securely

For each area Determine

Data storage location

How to store data on the network

What data to store locally

Backup strategy

Who can back up and restore files

How frequently to back up files

How to secure backup media

AuditingHow to audit data access

How to review data access audit logs

Management permissions

Who manages data

Where to manage data

Hardware replacement

How to use hardware redundancy technology

How often to replace hardware

Data retentionHow long to retain data on the network

How and where to archive data from the network

Page 15: Module 9: Designing Security for Data. Overview Creating a Security Plan for Data Creating a Design for Security of Data

Activity: Data Threats and Countermeasures

In this practice you will:In this practice you will:

Read the scenario

Choose the best risk management strategy

Determine an appropriate security response

Discuss with the class

Read the scenario

Choose the best risk management strategy

Determine an appropriate security response

Discuss with the class

Page 16: Module 9: Designing Security for Data. Overview Creating a Security Plan for Data Creating a Design for Security of Data

Lab: Designing Security for Data

Exercise 1 Identifying Potential Data Vulnerabilities

Exercise 2 Designing Countermeasures


Datasheet AS6212RD ENG · Secured Data Transmission ‧VPN connection ‧SSL certificate connection ‧Automatic logout ASUSTOR NAS ensures data security by creating an in-depth

Engage! Creating a Meaningful Security Awareness Program

Is Emplyoee Holiday Shopping on Company & BYOD Devices Creating Data Security Risks?

Creating Data Schemas

Managing MSIE security in corporate networks by creating custom Security Zones

SECCON 2014 - Creating a Security Conscious Culture

Managing Site and List Security Module 6. Overview Understanding Security Adding Users to Sites Creating Custom SharePoint Groups Creating Custom

CREATING TEMPLATES CREATING CUSTOM CHARACTERS IMPORTING BATCH DATA SAVING DATA & TEMPLATES CREATING SERIES DATA PRINTING THE DATA

Creating The Security Business

LinkedIn - Creating a Cloud Security Policy

Creating Developer Security Awareness

Data Sheet Vormetric Data Security Platorm Vormetric Data ... · Vormetric Data Security Platorm Vormetric.com Vormetric Data Security Manager The Vormetric Data Security Manager

Creating and Maintaining Organizational Security Awareness

Airport security - Creating smarter, secure airports

Creating Linked Data

Creating a good research data management plan Rob Hooft€¦ · DATA GIVING ACCESS TO DATA CREATING DATA Creating data design researcn plan data management (formats, storage etc)

CEHv6 Module 49 Creating Security Policies.pdf

Creating Data Sets

creating data

Creating Your Information Security Incident Response Programpublishingext.dir.texas.gov/portal/internal/resources... · Creating Your Information Security Incident Response Program

CREATING LINEAR MODELS FOR DATA · 12! Creating)linear)models)for)data)!)!!)!)!!!!)! !)!!!!!

Social Security Reform: Creating Transformative

ELECTRONIC SECURITY SYSTEMS MANUFACTURER...more, new product testing equipments and a « high security » zone for creating and storing customer data and badges. Technical support

CREATING SHAREABLE SECURITY MODULES

Privacy and Security: Creating a Culture of Compliance from Purchase to Production Catherine Gorman Klug RN, MSN Corporate Director Privacy and Data Security

uLawPractice Data security data-security

Introduction to NVivo 7 Some user basics. Getting Started Creating a Project Creating a Project Gathering Data Gathering Data Creating Nodes Creating

Guide to Creating a Data Security Plan

Module 4: Creating Data Types and Tables. Overview Creating Data Types Creating Tables Generating Column Values Generating Scripts

Surface Transportation Supply Chain Security: Creating a

CREATING & EDITING DATA

Creating Common NGO Security Terminology - ETH Z · Creating Common NGO Security Terminology: ... 11 Relocation 16 12 Hibernation 16 ... medical evacuation,

Creating effective security controls

Creating a Security Champions’ Network at Diageo · John Haren Head of Information Security Governance, Risk & Compliance Creating a Security Champions’ Network at Diageo

Creating a Security Request for Proposal