IT Infrastructure Domains

Typical Domains of IT Infrastructure

• A domain is a group of users, workstations, devices, printers, computers, and database servers sharing network resources.
• Subdomains are types of domains.
• A domain controller manages basic domain functions and network security.
• Domains manage user functions like usernames, passwords, resource authentication, and access.
• Domains assign specific resource privileges, such as user accounts.
• Simple networks connect computers and workgroups directly.
• Domains combine systems, servers, and workgroups.
• A domain may have multiple server types like Web, database, and print server

Domain Types and Risks

• User Domain includes all users with access to other domains.
  • Risks: Data destruction, file deletion, and introduction of infected media.
• Workstation Domain, a computer for individual user's production.
  • Risks: Software vulnerabilities leading to data theft, malicious software installation, and data loss from hard drive failure.
• LAN Domain contains workstations, hubs, switches, and routers, considered a trusted zone.
  • Risks: Malware spread within the LAN, LAN server OS vulnerabilities, and unauthorized access to workstations.
• WAN Domain is the Internet and semi-private lines.
  • Risks: Network outages, Denial of Service (DOS) or Distributed Denial of Service (DDOS) attacks, and illegal software uploads via FTP.
• LAN/WAN Domain is the boundary between trusted and untrusted zones, filtered by a firewall.
  • Risks: Infrastructure penetration by hackers and firewall breaches through open ports.
• System/Application Storage Domain consists of user-accessed servers like email and database servers.
  • Risks: Data destruction, DOS attacks crippling email, and database corruption via SQL injection.
• Remote Access Domain allows mobile users to access the local network through a VPN.
  • Risks: Communication circuit outages and unsecured remote communication.

Local vs. Domain Users in Windows

• Local users have usernames and encrypted passwords stored on the computer itself, where permissions and restrictions are applied locally.
• Domain users' credentials reside on a domain controller, which the computer queries for login and privilege assignments.
• Domain users address the administrative challenges of managing numerous computers, peripherals, services, and users.

LAN and WAN Domains

• LAN (Local Area Network) domain is a sub-network of servers and clients controlled by a centralized database.
  • "Domain" refers to Internet sites' descriptors or LAN subnetworks.
• WAN (Wide Area Network) is a communications network across a large geographic area.
  • WANs can be private for business connections or public for smaller network connectivity.

Remote Access Domain

• Remote access enables users to access files and resources on the network-connected devices, boosting productivity and collaboration.
• VPNs (Virtual Private Networks) provide secure, encrypted connections over less secure networks like the Internet.
• VPN technology allows remote users and branch offices secure access to corporate applications and resources.

Remote Access Methods: IPsec VPN

• Common remote access technology.
  • Pros: Typically includes licenses with firewall purchases, low processing overhead.
  • Cons: Requires software client installation/configuration before connection.

Remote Access Methods: SSL VPN

• Widely used encryption technology for secure Internet communication.
  • Pros: End users can install the VPN client from a public portal, IT doesn't need to manage individual machines.
  • Network administrators can establish granular security policies for resources, software clients available for mobile devices.
  • Cons: Requires more firewall configuration, higher processing overhead, and may necessitate additional licensing.

Remote Access Methods: Microsoft DirectAccess

• Newer remote access option not developed by a firewall manufacturer.
  • Pros: Seamless connection at the operating system level without requiring user installation or programs.
  • Cons: Needs corporate network changes, relies on IPv6 primarily, and may require more software for IPv4 access.

System/Application Domain

• Mission-critical systems, applications, and data of a business.
• Targeted systems are OS, e-mail, ERP, Web browsers.
• Attacks include denial, destruction, alteration, disclosure.

Security Risks

• Unauthorized Physical Access: Gaining physical access without permission.
  • Leads to theft, alteration, or destruction of systems and data, especially in sensitive areas.
• Unauthorized Logical Access: gaining access to systems to destroy, alter, and disclose information
  • Can be carried out by staff or attackers, potentially causing a denial-of-service attack.
• Software Vulnerabilities: Flaws in software that allow unauthorized access through exploits, often via malware.
  • Common applications/OS can have vulnerabilities.
• Server Vulnerabilities: Software flaws on servers that can be more damaging.
  • Can exist in server software or OS.
• Data Loss: Destruction of digitally stored information during storage, transmission, or processing.
  • Preventative measure: Data backups with complete system images and off-site storage.

Reducing risks in domain

• Physically secure sensitive areas.
• Enable encryption and data handling standards.
• Reduce data access.
• Create data backups.
• Maintain network servers.
• Implement standards.
• Be aware of the use policy.

Cyber Ethics and Responsible Online Behavior

• Cyber ethics: Code of responsible behavior on the Internet.
  • Considerations: Avoid offensive language, cyberbullying, plagiarism, unauthorized access, and copyright infringement.
• Ethics Manifesto: Leonhard's framework for ethics in technology.
  • Focuses on human rights in an era of increasing machine capabilities.
  • Specific human rights: To remain natural, be inefficient, disconnect, be anonymous, and employ people over machines.

Core Ethical Values

• Integrity: Perform duties lawfully, morally, and without conflicts of interest while acting in the public's best interest.
• Objectivity: Perform duties fairly and without prejudice.
• Professional Competence and Due Care: judgement to exercise unbiased analysis.
  • Offer opinions as such, not fact; diligently perform services with care, and rendering services with competence
  • Ensure standards are met and to encourage professional growth, giving stakeholders updates with their work.
  • Prevent harm, and report ethics when needed.