Computer Security Chapter 12

Study Notes

Operating System Security involves multiple layers to protect against cyber threats.
The 2010 Australian Signals Directorate identified strategies to mitigate cyber incidents; 85% of targeted intrusions could be avoided with these methods.

Allow-list approved applications to limit potential vulnerabilities.
Regularly patch third-party applications and the operating system to close security gaps.
Restrict administrative privileges to limit access and potential misuse.
In 2017, the "Essential Eight" strategies were introduced, including:
- Hardening user applications
- Configuring Microsoft Office macro settings
- Implementing multifactor authentication
- Creating regular data backups.

Systems may be compromised during installation before applying the latest updates.
A planned deployment process is essential to mitigate risks, including:
- Risk assessment and planning before system deployment.
- Securing both the operating system and vital applications.
- Protecting critical content and ensuring network security measures are in place.

Initial planning is fundamental to successful system deployment.
The planning should focus on:
- Identifying appropriate personnel and training for system management.
- Conducting a comprehensive security assessment of the organization.
Aim to maximize security while minimizing costs through effective resource allocation.

The purpose of the system, the nature of stored data, and the services provided should be well-defined.
User account categories, privileges, and the information they can access need to be established.
Authentication methods should be clear, along with access control strategies for data stored on the system.
Administration of the system must be identified, determining local versus remote management approaches.

Initial security starts with hardening the base operating system.
Basic hardening steps include:
- Installing and regularly updating the operating system.
- Removing unnecessary services, applications, and protocols to minimize attack surfaces.
- Configuring additional security controls like anti-virus and host-based firewalls.
- Testing the security posture of the operating system to ensure sufficiency against threats.

System security begins with the system's operating system installation.
New systems should be set up on a secure, isolated network environment.
Comprehensive installation and hardening should occur before deployment to production environments.
Only the essential components should be installed, ensuring the boot process is secure.
Validate the integrity of driver code sources and maintain updated security patches.
Patches should be staged and validated in a test environment to ensure stability before production application.