Unit 11: Software and hardware security measures

Scans files stored on a computer and data entering a computer system and compare these to a known database of viruses.

• Anti-virus software

• Firewall

• Router

• Kerberos

Anti-virus Software:

• Scans the computer periodically to check if any software has been installed which contains malicious code (viruses) that may harm the computer

• Removes/quarantines these programs (or notifies the user) of its presence

• Protects the computer by preventing important files (e.g. the boot sector or operating system) from being changed

• is an authentication system that works by having the user select from images, in a specific order, presented in a graphical user interface

Uses rules and/or algorithms to look for commands which may indicate malicious intent.

• Heuristic analysis

• Virus signature

• Packet filtering

• Biometric authentication

A network security device that monitors incoming and outgoing network traffic and decides whether to allow or block specific traffic based on a defined set of security rules.

• Firewall

• Ice Ceiling

• Airfloor

• Earthgate

Data packets do not pass through the firewall unless they match the established rule set defined by the administrator or applied by default.

• Stateful inspection

• Network Access Control

• Packet filtering

• Virtual Private Network

Recognised methods of user authentication

• User login procedures

• Biometric authentication

• Kerberos network authentication

• Two-step verification

• Social engineering

Uses two different forms of identity: your password, and a contact method such as an email address or phone number

• Two-step verification

• Security token

• Knowledge-based authentication

• Certificate-based authentication

The use of a Digital Certificate to identify a user, machine, or device before granting access to a resource, network or application

• Two-step verification

• Security token

• Knowledge-based authentication

• Certificate-based authentication

A protocol for authenticating service requests between trusted hosts across an untrusted network, such as the internet.

• Kerberos

• Security token

• Knowledge-based authentication

• Network Access Control

Which of the following are Network Access Control practices?

• Deny access to systems by undefined users or anonymous accounts

• Limit and monitor the usage of administrator and other powerful accounts

• Suspend or delay access capability after a specific number of unsuccessful logon attempts

• Remove obsolete user accounts as soon as the user leaves the company

• Use Network Address Translation to provide a single public IP Address