MIS420-Chapter 12 Network Security

Do You Need Security?

• Some information should be confidential
• Not all security breaches are malicious
• Disgruntled employees
• Opportunity for fraud or theft
• Accidents!!!

Security Techniques

• User Accounts
  • user-id
  • time/day restrictions
  • group accounts
  • * account
• Passwords
  • Size and variety
  • memorize
  • don't save password
  • expiration
• Password Generators - VAX
• Privileges - Operators, Administrators, etc.
• Access Rights -

  R	user can read files
  W	user can write files
  C	user can create new files
  M	user can make new subdirectories
  L	user can list the name of files
  D	user is allowed to delete files
  K	user is allowed to delete subdirectories
  N	user is allowed to rename files
  E	User is allowed to execute program files

  • Users
  • Files
• Encryption
• Firewalls

Supervisor - Administrator - SU

How to Manage Multiple Servers

• be consistent with user names
• create accounts for users only on the servers they need to access
• copy list of users
• Primary Domain Controller - NT

Security Resources

• My Security Page
• WWW Security FAQ
• Eugene Spafford & COAST Lab
• RSA Data Security
• List of Computer Security Companies