Please enable JavaScript.

Coggle requires JavaScript to display documents.

securing client - Coggle Diagram

- - - - telecommmunication electronoics material protected from elemenating superious trassmission
  - - - insted bios replaced with uefi (unified extensible frimware intefrace)
  - - - different steps in supply chain opened door for attacker to infect malware during manufaturing for storage
        
        when malware injected in rom it's hard to clear or to detect
- - - - gaurds
        
        Video surveillance cameras transmit a signal to a
        
        specific and limited set of receivers called closed
        
        circuit television (CCTV)
      - motion detection devices
      - barrier
        
        fence
        
        tall perment structure
        
        cage
        
        fenced an dused as station area
        
        barrier cade
        
        large concreate
        
        Bollard
- - - - disable default passwords and accounts
      - employe least functionality
      - disable un necessary ports/services
      - application whitelisting and blacklisting
    - - patch mnagment tools
        
        patch distribution
        
        vendors must test patch always
        
        automated patch update
        
        Manage patches locally rather than rely on vendor’s online
        update service
        
        auromated patch update features
        
        update done from local server without the need to go to vendor's online service and tghis save effort and bandwidth
        
        administrators can reget or accept or set on sepcific date for the update
        
        administartors usually just test or approve updatews onlyy for detection to see if other devoicea realy needs it
        
        patch reception
      - security patch
        
        to fix security issues
      - service pack
        
        ecumlate security updatesz and other features
      - feature update
        
        enhnsments and expanding of functionalities
    - - antispyware
        
        blovk pop up windows placed in brwoser
      - antspam
        
        mail gateway monotor emails for unwanted content
        
        spam filtering methodsn
        
        black list
        
        white list
        
        bayeseian filtering
      - antvirus
        
        examine computer for infection
        
        search in new file for viruses
        
        search in system for well known signture
        
        weakness of av is that vendor's must always check for new viruses and send updates to sustomers
        
        new approch for av is heuristic monotoring and this depend on the characterstics of of virus insteadv of attempteing to get match of signtures
        
        code emulation is testing code in virtrual enviroment
      - trusted os
        
        tighteninig security while design the code
        
        os hardening
        
        4 ways
        
        read only file permissions
        
        reduce capabilities
        
        kernel pruning
        
        leastr privilges
- - - - have three classes of speed
        
        atandard speed
        
        ultra high speed
        
        video speed
      - protecting sd on cameras
        
        apply password
        
        apply encryption
        
        move switch to open position
      - video speed
    - - secondary hard disk drive
      - usb drive
      - network storage attached devices
      - netwotk servers
      - cloud based repositires
    - - sd cards fanilies
        
        sdxc
        
        sdsc
        
        sdhc
        
        stdio
      - stdio
        
        storage card with integrated wirless transmission capabilities
      - example
        
        wifi enabled miscro sd
        
        used in digital cameras
    - - locate mfd in secure area
      - applly security configurations change default password turn hard drive encryption and require all images be purged
      - link print managment software to existing data loss prevention
      - seperate mfd server from network server