0 ratings0% found this document useful (0 votes) 62 views14 pagesSecurity Practices Assignment
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content,
claim it here.
Available Formats
Download as PDF or read online on Scribd
Parv- A
Seenrity Practices
) Neksork Security "4
Network Be lusty enlempades al Lee Slee
token to prtoct the Tctaghty of a Gonpule nebworle
cud ta caita uUAPnTH. Nehwork Security 23 Trpe rte
because tH Ceops Sentidfve clata Sede pevor Gy bep
attacks nehoork 25 usable and chrustwority-
2) Secustly Atocks:
| Cypher Rocurtdy Hacks Cefer do to asols of acbtong
Het the ivect acho perforin de Jain dy Prrpordant
| Causes.
8) Seouiidy Sexvtces :
Setwity Beritces 28 cleftnap as a kervice
that ewrancos tre sBeCutity of the data procening
ystems aud) tha Enformation.
4) Secuidy Mechanlsm:
Ay cerca Cox) furchion olertpned te pavide
lone Lor) More ee cutly Services Udeally ‘valid Ln
tormg of Strength of hori ces ard assanie polegm,
5) Tatruion Detection:
A System Cllled Sibvuston deboctfon System
| phierves robuork twoffe fer Malictous cyantacton
‘alps vobonr t+ 23 obsowved t Sof twabe Cheebs a@Netwo. 5
Tidretfon Prevention Lilen 27 alg bs
(8 Lntouston etecHon and Puevention Syilem. 3
& hetwort oSetur8 ty anpli(ahioy Pat buonktors.
YY Web ApplPaalfons
: | A web app “eahien és Sfhvake hat Gta
B VYour web prowder- Blutsnens have Le echagge
Lefermatton & olltey Serviter veruolely-
) Securety Q&b:
| | Os) Arch?teotine :
| [Osi Lecury |
a Vancktecee|
ieee an
| Setusry | le lack iy 7 oe
| meckantin| [ ce
A cBeCus dy atlachs res any ccbon Yooh poste
the elt tor) orerall Be Cully
| #, An atlack rlght be Suctetifull oy trfy Clopfudl
Flee ofa Pcconpel hack.
| % Thes@ ole Zhe slewi ces Hat ate ued for
(eBrtatring Qe Cunt *hy.
The Ory abecutity Model tt abto ered ts
| Jolenstify Abe CiPes of attacks.
¥ These Beturtty Sevicar Can be Lnplemeted
2p varfous Sayers of the as) Medel.
| K TE Can be olone eekeg Sate parsvoorel
eee
HX Daw ga vartous Level of
Levels of acleys Ae lhe
nplogey hk howe yaboug of-
Aster
© The. Prroluct Mevapep faslinitled aCtets as
Conpnred te Hla CTD of Ue Conypouy. % fa. ~
ot Titrevon Prevertion System aktop,
(as Eebiiion DetecHons aol preveen Glen.
| X Tt 25 & hehoorh BSacuti dy ofp Ulafrey fee
| Moniters hetwort (6) Systim achiPher for halltion
lachely,
| (cht My
Ce Collect tn fer malion about dul aekithy reper
[trad attempt te block tor) Step Zt.
| + Dos dyeFcally V2 Cord Fuformebfon yoltsal fo
OPexved eveuks Welty Rocufihy abner? Gtreclocs ef
Emportad observed evaitt anf produce Peporte
M token the System Aokecks ohuuphlous traps.
[it blooks at prom entirriirg the Nehoorb.
Types of 1po:
|
There aye tivo makin type; of Ops:
4- Network based Ips: PNehvort heared Spe £5 Pestelley
atte hehvort pefimekep aud honfiors alll drafpice
Phat enters and exgpt tte Mastcoorh.
Q Hest ~ Based Des: A Bett Bowed [pr 2) Tusklled on
Tedidlual haste and mond drs He traffic tat
(08 and out of te best
Cla prcation af Tibructon prevenlton Cyrhem (ps):
Dreuifon preveutfon Lips kero (Tp) & clarified 4 &per Qt
qt
le - 8
cd) jee beured Btveron Prevenlty Siflen Coupe):
j H Mmobitors the Cutie rehoort for desputes
{ : Specoy
|Feadtte by avelje fog Prete Col acti,
fe Wwirolen Exkewion Prevention System (Wipes):
| Ut wonthrs a wireley Aohoork-fer Alipielous
| Prac by dualy hig twlrelats Aetuoor kipg protetat
uty Nedzoorh belbavious avalysG (ipa):
| Tt Cranthes hebworh toobfic teClentfy |
HHireati Hat generat unuiteal deafhc flows. tuck |
jes Ant bubed cleutal of Servite A efs-
QD Hes based Etruston prererrey Splon CPs:
| LL cn in biiht cSefoate prcbage cobich
| Qpeate a Siglo batt fer cleubifpl ackrifydy
\afeams Ques Phat OCP (Atthé. Be Aad,
| Compas. £0n of TPs kK 1D:
| Te ain dliffeter(e belie tabrution preveubs
Sistem (Ips) vito iateusion Oe tection ofystim C021)
|
| x Diteeror prevertion ofiyston ave platetE
|e ard are able te tuchrely prevent tor) block
| Intrusions al ave. Shectes-
| yp Ips Go Habe Sich action Od cforeleg ar alsin,
| olvoppis Clelicted praticioy Packet. rerhiig a
{ e } : 2
| Qanecton lo blocking trafic from the offerdiy
| Ip addrep:
TPS alto Cy Crrecl y hic wedurclny heck
(Cec) exors, Aefiggnent pathet brea, cs amen ~
we Nlekwoort Tubewtion dekection SLyotern 1
lone Sot upata plasned Print cxtts , the
[Netusork to exanine traffic-
+ Prom all devices on the rehoork- L
Perfo an obferratton ef pasting trafffe On the
ye The traffic feat-fy pasdecd onthe Subnoh
to te Colleciion of brovon aftacks.
¥Olce an attack £1 Felentified Cor) abrorm
bohakeour £1: observed. pat aleve Can be Seutfo
tke ad pautehrechor
W Hest Fahruston delectinn System CMDs)
ae a Encleperdent buorts tex) deuteron the
shetvoork. 4 HiDo monitors En Comtigg ard oulgoling
Pecbety from Cie devtco, Only ond will alert be
| dnd strator-
eek Renee aes
]
+ Renefebs of Pps: A
% Retectt Palichouy ackrfly: Votes
(ey Buypretous AMV her aol alert ths
| Sistem Olnent Mralis Lepore
" LUGE Can
| olarnage tt ae OY :
ve Aehenh perfgrmare,
LDS Gr kelp i,
| Meeting GunplPante "eget rementy by MounP dorigg 4
hetwort achvity Ord $eretating myer by.
\XProvicle Lay ble : DDS Geren let Valuable Lip
tate Aetecork prifpie, vehlch Car be pizoS r
| Perbifyory tieakjert ad top rove retour
eeu y:
| Conpartétin af 12S vith F¥xe coals, >
KH DRE awl firecnll Slt are volt ts ¢
hetoor b- Seurity butar D2o olifereant fpom 2
Preval as a firousdll Mookt Ctually for .
©
Litrupfous.
a An Fos Auyeribes a seypected Enbrtiry
00 a hag beppired al ten ALA arn
| barr. ok
pomees _ related (oedtformation
| te Lafermation 0 be ot Leche the
| eacnypHion of Ute merigne» wih he a
rneuge Bo that Fs inreatsbe ie ane
Opporert, aud the eablivien of 2 Codle ated on
tte lonlialy of ta meweapes | vith Cx, be. Vhaalfe
Verify the Blentity af Lie Seder
TFeuster! tax parky
COrbi ber, clterii ter
> 2b facrak trborrosig
®
Opponent Secret
MD trusted Hote
Ccheive Kecuwe grant
Ney be vespouw be le by
Enformalion _ey te ko
cb Prom Guy eppo reuk.
He eretat bie Hecresh Lnformation tobe
Used wstte tte algoS tim.
fear, way be jected to
medion a40Pr Porky
fr NS bees the aWecret
Priaciple robe bap ig © Levelop methods for ba cAéstvbaliey aad
iy of te eecrat L.fermahion.
| oe pectfy 4 pore? It 2 cued by He Aso
polnctpal Lat makes ute of be eSecurity
aljor Hon and Mix kaecret Lafertneion ty 2hive|
re part¥Clap sect ty oferiite
| © The Aackef Can bo eomecre, who Loffh ro
ates Enlteut, Llngode golr KeAit fica/ton
[Prom Aveabing aul entering a Conte bysbens.
2 Fe Eabrdler Gun be Ae prinbled enplssc
‘woh wwEphey_ts obo cbmege pra Critial colo
abe Opt Grete atets for financial
pom
@ Ppother Gre Of tertdanted! atte Ly Liz
|Phioment 81 2 lomputeo! Syste af Lyle Hat!
[Bptotts vulppabrlites < be Byyben aud bal tay
application pr goed Ob well as u/tlihy Dygrang
> Stereept (or) modlify alate 07 behalf
obtuers who cthold nothave ates As Patolal,
> fokitcervice Plauen Compybers Ey
bab Ute by lerilimate Wert. : ee OePeAppUCottonts * a
| by A eetuntty pol Application » oF tes
Weferred te ad & YYeotse web agpl ation,
La Sofpwate appl Gatton phat 4 oleipped ae
‘clvelopad tol fA aprimany poles oD ensuing he
| Security anol protector of data, Lefer? ao Me
pplteattors AM wleby DB opetaly over te
| Aten
& Mere ore eBome Ly clerondt aud prachita
web Bopl ations.
| atockabed with Securyy
| a+ Aultentigtor k Auliovizelion 5 Web apy | (ables
| Slot agp ened vehi aelitalfon /rrechaut tr,
|
to verify He ccclenlity, oft Lt 00s +
|. Gate Encryption: Ole encigplten Protocol Ohl
Lops) te Pv tect lt trassmitled Lotacxthenes
applicatton & pers browsers
he Dapot valicletions: Validate and Saniftre all
lgesey Lipt proedt inmon Security Vecbnerabs ly
Like Sx Sfection® Cress -9¢be Cemphiag Coats).
4: one ee Lryplement; Secure
Berion pravaporrert Lo erdele. phat Udet
Lefesiton cave. Prbeeted Qpaint afertion Afjastly
arol fixotPon athlaefy: 5
/* | SoSetute Cooling PraclPled: Ae velpen dhoubfe
foliae efetute leoliy Preeti te anes
Velnotabslities.
(6) perrevell wrod betrustoy Dehechton Sfften 2
Employ coeb appt? a/fon frev-all nes)
land Ettuston Actectfon bytes C/20).
| DY Regular Security Testing 2 lovduch replay cSetuty
LB mek; , Protecting perckeitlon Xglieg ard lee
(eviews te Aelerbity and aclelrete Wh epabr lites
2) cepelat & patch Mange emanl:
bepticweb eppltalior Soltero, libyonty
Ord dependencies vp te dale with Soluthfe patches.
Y) ecu ty Healers :
Druplemet x Cenk, hacctes ty HT fe
yesporier, buch og lovtent cecil, polity CCL).
to) Alters Coutro/:
| Ejforce Strict legs Lule! peasute fy
ensue thal uers Cw oly acts fee Ds * farchinalt,
i”) Lover Had lig;
Sip lanent Lashom exvor Ladbieg p> Prvtole
afrtrvell ofr formation fe pototah gblackerd:
W) fate lant tg:
e ee: linstieg fe probect- apatingt
| bouikbe forco ahacls ofb8 forms cof abude- =
) Hoke! Alar Bictip:
iS) Ownsp Stars for “the Open eb 2
Setar Prefect yond tt oc honprofiy orga
edfoabad te Eup revive te Selusity of cfhisone
| > Dwrsp Prvides valuable retoutcoy and
cools for Aewelopers, Selushy Profers Pousls aud
OVFauiabions to enhance He Seui ty of wel
Applicators cand S Phone Syphon.
| deve ave Some hey dekily about Owhsp:
4- Mission:
Owpsp's Parrasy
ebtvoove Secu ty Ve
(Oud ovgpuitzaHeus G
| He wich. They aim to Cunpowes Aeouelopoy 1 OPT abt
bs bald and Neh, defn We Cure COT Cobong.
2: Top Ten:
One ef DSWAPS most well ran profecky
44 the Ownsp Top To, woléah isa leo of the dup
jon most CRG web appt cation decutty visbrB,
| Uplate Petedi ably to replect the chaugiég Breed
Mitton 5 fo make
sPble Lodtap FudltvFdeals
an make Tulermed Aeckofoug abet EZ
3) Projects:
OWPSP rrafideiy Qwide rage of
Poafecks, Ercluoliing Azols, locumentatfory awl best
Poockfees Yolbal ts web applPcaton ehecumty-
1) Cornmuut dye
| Dwnsp a 2 Commutiyy diver Orpuiea Hor
is ay \Volunboors Cobh bute te Ts prfacks and
|Purstakoes. Dt provider aplalform for Reselerye
|S bani nga CallaborotPon Among efocunity Propattiordy
| anel clevelopars-
|S) Coufe yrancas and Chapters:
| OWASp Orgrsizes Global and regional
(Centesences, a3 welll as local chaptens Ain Wor
| Cettay, cohere experts and enttuuriaytias Can meat
and Ai Cus web applicator peru ty-
b) Rekewsces:
Owpsp oes a wealth of Proc resoutes
crcludteg guides, Cheat heli and clobunetalion
sfhat Can help Alevelopan avg) fe C5 fy proferFouales
| ulerstond and addres web appl catfon akeutty
Ais nls: p litcatfon
Appl me cut ty Guide here.
Ownsp Pomctes bert Procticar fon
ABecuurty web appl cabiors ncluctig Sete Ca
Guitlebins cand heck’ ques Atomttfpatt Comman \
Vilhorabs Ihrer Lilke Cra. Sito Scriptiig, Sal. Lefeahs
8) Gooluatry Taf fortes
Dwasp bes a Afgriffcant influorce on
Me Sept roore. opaluiity Lnclustyy and ct
Ve oramendlabond cind guiple liner He efhen Cfhed cy
Pdustey Siewtard far web YP! cabin Saciiiy,
Vy Se Cus? Wy Fools:
ON ASP Sporriors ard dlerobpens Q voriely
Ob. cketen ty tel Ua! Can bo ved 2 tet" acd
bane Me B etuity of web “pplialters. Seclude
| bre Qwasp ZAP (Qed Abeck Proxy) and Owhyp
Aepodany —checb.
lo) Of Sodle:
| ls Mest of Qualph weserteer and toh are
per osorflae prabeieg the feet attestble As aelblo
Quollenca avd prormotive pradporerey tn Lee
fed of web application SeCuiify.
| yD DPS 0 valuable Ferade for cleuelpets, Seianty
| Propertionels andl Opertzettirer alrnitg to but aud
| Ietfal, Becute wes ypliatirs.
