Network Domain Basics

• A domain is a group of users, workstations, devices, printers, computers, and database servers sharing data via network resources, and it has subdomains.
• A domain controller manages domain functions and network security, overseeing user functions like usernames, passwords, resource authentication, and access, also assigning resource privileges.
• A simple network domain connects computers and workgroups, comprising combined systems, servers, and workgroups.
• Multiple server types (Web, database, print) can exist in a domain depending on network needs.

Domain Types and Risks

• User Domain includes all users with access to other domains.
  • Risks include data destruction/deletion and password misuse.
  • Users can insert infected CDs/flash drives.
• Workstation Domain is an individual user's computer.
  • Risks: OS vulnerabilities may allow remote data theft
  • Browsers may have vulnerabilities that allow silent malware installs
  • Hard drive failure can cause data loss.
• LAN Domain contains workstations, hubs, switches, and routers and is a trusted zone.
• Risks: Malware spread, server OS vulnerabilities
• Unauthorized LAN workstation access.
• WAN Domain includes the Internet and semi-private lines.
  • Risks: Service provider outages, Denial-of-Service (DOS/DDOS) attacks
  • File Transfer Protocol (FTP) can allow illegal software uploads.
• LAN/WAN Domain is the boundary between trusted and untrusted zones, filtered by a firewall.
  • Risks include hackers penetrating IT and firewalls misconfigured to allow unauthorized internet access.
• System/Application Storage Domain includes user-accessed servers like email and database.
  • Risks include fires destroying data
  • DOS attacks can cripple email, SQL injection attacks can corrupt databases.
• Remote Access Domain enables mobile users to access the local network via VPN.
  • Risks: communication outages and unsecured remote communication.

Local and Domain Users in Windows

• A local user's username and password are stored on the computer itself.
• Domain user information is kept on a domain controller.
• Domain users evolved due to administrators managing large numbers of computers, peripherals, services and users.

LAN and WAN Domains

• The LAN domain is a sub-network of servers and clients managed by a centralized database, in which user approval comes from a central server or domain controller.
• Domain can also refer to Internet sites or LAN subnetworks.
• The WAN Domain is a communication network spanning a large geographic area.
  • It can be private or public.

Remote Access Domain

• Remote Access Domain lets remote users access files and resources on networked devices as well as improving collaboration.
• This strategy increase the flexibility to hire.
• Remote access is commonly provided via a VPN which creates a secure connection over the Internet
• VPN tech was developed to securely enable remote log-in to corporate applications and other resources

Remote Access Methods Comparison

• IP Security VPN (IPsec VPN).
  • Pros: Plenty of licenses included with firewall purchase, low processing overhead. Established and familiar technology.
  • Cons: Requires software installation and configuration on user's computer.
• Secure Socket Layer VPN (SSL VPN) is a common encryption technology.
  • Pros: End users can install the VPN client from a public portal
  • No IT involvement needed for each machine
  • Admins can set up granular security policies down to single web applications and has software clients for mobile devices.
  • Cons: More configuration needed on the firewall, requires more processing overhead and SSL VPN licenses are sold as hardware add-ons
• Microsoft DirectAccess
  • Pros: is a seamless technology and can allow work remotely.
  • Cons: Elaborate changes required on the corporate network, designed for IPv6 primarily, and requires additional software on the LAN for IPv4 access.

System/Application Domain

• This consists of a business' mission-critical systems, applications, and data.
• Attacks are denial, destruction, alteration, and disclosure.

Unauthorized Access

• Unauthorized Physical Access is gaining access to a physical entity or area without permission.
  • This leads to stealing, altering, or destroying the systems and data.
  • This threat is dangerous for sensitive areas like computer rooms, data centers, or wiring closets.
• Unauthorized Logical Access is similar to physical access, but targets intangible data.
  • Attackers can destroy, alter, and disclose information, causing denial of service.

Vulnerabilities and Data Loss

• Software Vulnerabilities are flaws in software that allow unauthorized access, which can be exploited to install "malware."
• Server software vulnerabilities are similar, where the potential to more damaging.
  • Exists in services the server uses (FTP, SSH, PHP) or the server's OS itself.
• Data Loss is the destruction of digitally stored information in emails, documents, images, and databases during storage, transmission, or processing.
  • Preventative measures include data backups and complete system images, off-site storage allows recovery in data loss events.

Reducing Risks with System/Application Domains

• Secure physical areas with sensitive systems.
• Implement encryption and data handling standards.
• Minimize data access and back up data.
• Be aware of all applications on the network.
• Plan, configure, and maintain network servers.
• Develop and implement standards.
• Read and understand the provided Acceptable Use Policy.
• Report suspected IT policy violations to the supervisor.

Cyber Ethics

• Cyber ethics means responsible behavior on the Internet, defined as not doing anything in cyberspace considered wrong or illegal in everyday life
• Considerations include avoiding rude language, cyberbullying, plagiarism, breaking into computers, using passwords, infecting computers, and adhering to copyright when downloading material.

Ethics Manifesto

• The Ethics Manifesto by Gerd Leonhard focuses on human rights in a technological future, focusing on the right to remain natural, to be inefficient, to disconnect, to be anonymous, and to employ people instead of machines.
• The Code of Ethics for Information Security Professionals encompasses values such as integrity, objectivity, professional competence, and due care.
• Descriptions of integrity include performing duties under laws, not engaging in conflicts of interest, and acting in stakeholders' best interests.
• Objectivity means acting honorably, justly, responsibly, and legally in all aspects of your profession.
• Professional competence and due care involve unbiased judgment, opinion marking when necessary, performing services diligently, promptness, meeting professional standards, supporting colleagues, sharing progress, and avoiding harming the profession's reputation.