Intro to ERP

Basics of IS Security : 

Basics of IS Security Protecting the Personal Information which is held within your Computer.

What is Security? : 

What is Security? Its a technique for ensuring that data stored in a computer cannot be read or compromised by any individuals without authorization.

Why Computer Security? : 

Why Computer Security? The Internet is a dangerous place We are constantly being scanned for weak or vulnerable systems. We need to protect Our data Our ability to use our computers (denial of service attacks) Unauthorized Access & Use

Security Model : 

Security Model Prevention Access controls Firewall Encryption Detection Audit Logs Intrusion Detection System Response Backups Incident Response teams Computer Forensics Protection = Prevention + (Detection + Response)

Common Types of Attacks : 

Common Types of Attacks

Public Key Encryption : 

Public Key Encryption

Encryption : 

Encryption Encryption is the process of encoding data To protect a user’s identity or data from being read To protect data from being altered To verify that data originates from a particular user

Firewalls : 

Firewalls Firewalls can provide: Secure gateway to the Internet for internal clients Packet filtering Application filtering A system or group of systems that enforce a network access control policy Filters data packet in and out of intended target Will mitigate the following attacks: Denial of Services (DoS) Attacks Unauthorized Access Port-scanning and Probing

Intrusion Detection System (IDS) : 

Intrusion Detection System (IDS) IDS is an application which detects attacks on computer systems and / or networks. Network-based Intrusion Detection Monitors real-time network traffic for malicious activity Similar to a network sniffer Sends alarms for network traffic that meets certain attack patterns or signatures Host-based Intrusion-Detection Monitors computer or server files for anomalies Sends alarms for network traffic that meets a predetermined attack signature

Virus Protection : 

Virus Protection Software should be installed on all network servers, as well as computers. Shall include the latest version, as well as signature files (detected viruses) Should screen all software coming into your computer or network system (files, attachments, programs, etc.) Secure from: Viruses and Worms Malicious Code and Trojans