023 Device and Storage Security - 023.1 Hardware Security (weight: 2)

Computer Types

• Computers come in various forms including laptops, desktops, servers, control computers in devices, mobile devices like smartphones and tablets, networking devices like routers, and consumer electronics such as TVs.

Basic Computer Components

• Essential components of all computers are processors, memory (RAM), mass storage, and network adapters.

Processors (CPU)

• Processors execute calculations and can be single or multi-core to perform multiple tasks in parallel.
• There are general-purpose processors and those optimized for specific functions.

Memory (RAM)

• RAM holds temporarily needed data for ongoing calculations and offers quick access.
• RAM capacity is less than permanent storage, and it is volatile, meaning data is lost when power is off.
• RAM costs per unit of storage are higher than that of mass storage.

Mass Storage

• Stores data permanently, allowing retention even when the computer is powered down.
• Traditional hard drives use rotating disks and magnetic heads, while SSDs use memory chips without moving parts.
• SSDs are faster but generally more expensive and with lower capacities than traditional HDDs, organized into data blocks for efficient storage.

Network Adapters

• Connect devices to networks using various technologies, such as wired Ethernet or wireless protocols like Wi-Fi and cellular.
• Devices can have multiple network adapters and often auto-configure when connecting to new networks.
• Security precautions are essential due to vulnerability to network-based attacks.

Physical Access and Security

• Physical access to computers poses security risks, allowing for potential tampering or data breaches.
• Trusted Computing limits executable software and detects hardware/software changes to enhance security.

Internet of Things (IoT)

• IoT refers to the increasing connectivity of devices that are not traditional computers, including smart home appliances.
• Smart Home automation uses devices categorized as sensors (to obtain info) and actuators (to perform actions).
• IoT devices are interconnected to enable centralized control and automation through platforms that can execute rules based on data.

Security Concerns in IoT

• IoT platforms typically require cloud connectivity, which poses security risks if vulnerabilities arise.
• Compatibility issues can arise between devices from different manufacturers, affecting functionality.
• Older IoT devices might not receive updates from manufacturers, risking exposure to known vulnerabilities.

Connections and Interfaces

• USB is a standard for connecting devices to computers with various forms like USB-A and USB-C, commonly used for data transfer and charging.

USB Device Types

• USB devices include storage devices, input devices (keyboards, mice), chargers, printers, and network adapters.

USB Security

• USB devices can masquerade as other device types for malicious intent. Unknown devices should not be connected without precaution.
• Specialized adapters can allow only power transfer without data exchange to enhance security.

Bluetooth Technology

• Bluetooth connects devices over short distances, typically for audio accessories like headsets and speakers, with a standard range of a few meters.
• Bluetooth connections are encrypted and require a pairing process between devices.

Bluetooth Pairing Process

• Pairing requires one device to broadcast its presence, which the other device can detect and connect to, allowing shared functionalities.

Bluetooth Security Measures

• Bluetooth devices should not remain in discoverable mode indefinitely; pairing should take place in secure environments to avoid unauthorized access.
• Authorization and permissions of devices during pairing must be carefully monitored.

Radio Frequency Identification (RFID)

• RFID transmits static information via tags that emit unique identifiers when close to a reader, typically used within a range of half a meter.
• Widely used in retail and logistics; however, RFID tags can be read without consent, raising privacy concerns.

Near-field Communication (NFC)

• NFC is a subset of RFID for communication between devices at very short distances of up to four centimeters.
• It is commonly used in payment systems and involves both passive (static information) and active (interactive communication) devices.

Test your knowledge of various computer types and hardware components with this quiz. It covers laptops, desktops, servers, mobile devices, and network devices. Challenge yourself and see how well you understand the different functionalities and applications of these technologies.