Добавил:
ivanov666
Опубликованный материал нарушает ваши авторские права? Сообщите нам.
Вуз:
Предмет:
Файл:English for Information Security. Учебник
.pdf
91
Even though IPv6 has been present for some time, this protocol has
not yet been fully perfected. As with everything that is new, we have to handle
new and unknown weaknesses. That being said, the way we apply security
controls over IPv4 may not be useful or relevant for protecting IPv6.
Solutions
There is no simple answer to address these challenges and manage the
security of these interconnected devices. However, the following are some
actions we must take to overcome these adversities:
We must have a truly open ecosystem with standardized application
programming interfaces that enables interoperability with a reliable and
automatic patching system.
Devices must be hardened with the best practices in the market to
protect against common security exploits.
Devices must be well-protected on the connected networks (intranet
and Internet).
This technology is still in its infancy, and we will have to wait a while
before it gets to a more mature state that is driven by the whole industry. What
can we do in the meantime? Look into existing proprietary ecosystems and
analyze which ones have the features that best fit your business needs. These
include their scalability and the ability to isolate these small and elusive devices
on a separate network (using virtual local area networks) protected by firewalls
or at least with screening routers [12].
Video Section
15. Watch the following video and outline its main points
https://www.youtube.com/watch?v=N9Ip0m6d3G0
92
UNIT 7. TECHNICAL MEANS OF INFORMATION
PROTECTION
LEAD-IN:
In 2003, 94% of British companies reported security incidents related to
computer security. 91% of these cases were intentional. As Financial Times
reported, such information was given in information security report brought by
British Chamber of Commerce and Industry. For the last four years a three-fold
growth of total number of incidents was noted in this field. Rapid development
of the Internet that has brought Britain to the second place by density of the
Internet users, has also brought significant risks alongside. The average size of
damage caused by serious computer security incidents amounted to GBP 10,000.
This sum reached GBP 120,000 for huge corporations. One firm reportedly
incurred a GBP 250,000 loss due to confidential information theft.
Thefts and counterfeits of credit cards turned into a real disaster.
Companies, especially banks, try to conceal incidents of computer theft as they
fear that consumers, partners, depositors, shareholders would lose faith in their
brand names if they were exposed as compromised. That's why scales of losses
reported in the official statistics are negligibly registered. Experts believe that
sizes of computer thefts are four-fold bigger as compared to losses caused by
armed robberies in the USA. During the last 10 years annual losses have
increased for more than 20 times and now make up to tens of billions of dollars.
Pronunciation
1. Make sure you pronounce the following words correctly
Espionage [spn]
prior [pr]
subsequent [sbskw()nt]
erasure [re]
frequency
[)nsi]
residual [rzdjl]
93
counterfeit [kantft]
interference
[ntfr()ns]
deficient [df()nt]
adhere []
flood [fld]
negligibly [nldbl]
Procedure [pr]
tsunami []
familiarize [fmlrz]
Word Study
2. Study the following definitions and memorize the terms
Adhere to stay attached; hold closely; support. Synonyms:
comply, obey, follow. E.g. When safety procedures are not strictly adhered to
the breech of the information system occurs.
amount to to be equal in number, quantity, effect. Synonyms:
total, reach. E.g. The reconstruction bill amounts to 30000 $.
consecutive following one another. Synonyms: successive,
following. E.g. The grant was won for the third consecutive year by our
laboratory.
counterfeit not genuine. Synonyms: fake, false, forged. E.g. He
admitted delivering counterfeit currency.
deficient lacking or not good enough. Synonyms: unsatisfactory,
poor, inadequate, weak. E.g. We suppose your security system is deficient.
erasure removal, loss or destruction of smth. Synonyms: deletion,
wiping, cancellation. E.g. You can‟t sign a contract with so many erasures in it.
falter to hesitate, give way, to speak hesitatingly. Synonyms:
hesitate, delay, waver. E.g. I don‟t falter in my quest for a successful career.
incur to experience something unpleasant as a result of your own
actions; to come into, acquire. Synonyms: sustain, experience, suffer.
E.g. They incur all the development costs and take a lot of risk.
94
Negligibly in such a small or unimportant degree or way that it can
safely be neglected or disregarded. Synonyms: insignificantly, slightly.
E.g. The extra expenses went up negligibly.
prying looking or searching curiously. Synonyms: inquisitive,
interfering. E.g. Now we are safe from prying eyes of our competitors.
Residual resulting or left from something that was previously present.
Synonyms: lasting, remaining, unused, leftover. E.g. The magnetism
remaining in the iron after the current stops is called the residual
magnetism.
shielded protected with or as if with a shield. Synonyms: covered,
safeguarded, sheltered. E.g. "My firm has done nothing to shield anyone
or any entity from any sanctions," Goldin told The Daily Beast in an
email.
3. Phrasal Verbs. Match the phrasal verbs and their meanings
A
B
pay off
fulfill, accomplish
make up
choose, select
close off
obtain, acquire
pick up
yield a profit or result; result in success
carry out
develop into, grow into
bring in
overspend
take over
amount to, comprise
turn into
produce, get
go over
block, barricade
Grammar Section
Gerund (see Appendix)
4. Translate the following sentences. Pay attention to Gerunds or
Gerundial Constructions
95
1. The other approach to concealing plaintext structure in the
ciphertext involves using several different substitutional ciphers.
2. Herbert Yardley organized and directed the US government's
breaking of the codes during and after the First World War.
3. As well as devising the Playfair cipher Charles Wheatstone invented
the Wheatstone bridge.
4. Wheatstone's inventing the cipher made development of substitution
ciphers.
5. One starts performing the encryption by locating the two letters
from the plaintext into matrix.
6. I'm sure we should go on making the experiment.
7. They announced that no one had chance of cracking the cipher.
8. The Greeks being the inventors of the first transpositional cipher
wrote the first work "On the Defense of Fortifications".
9. He succeeded in cryptoanalyzing running-key ciphers.
10. Their main purpose is to protect speech information that can
circulate indoors, from listening with the use of different types of stethoscopes,
acoustic microphones, infrared and laser systems of information theft.
11. These systems work by creating a masking of the speech spectrum,
through broadband unfiltered acoustic noise in ventilation, heating, water supply
systems, as well as in enclosing structures.
5. Translate the following sentences into English using Gerunds or Gerundial
Constructions
96
8.
[17].
Reading Section
6. Read the text and state the following sentences true or false. Correct the false
statements
1. Special organizations have been founded to fight against computer espionage.
2. The activity of such organizations is totally autonomous.
3. The decline in using logic bombs can be observed nowadays.
4. You can hide industrial secrets if you regularly delete stored information.
5. Deleting information from magnetic carriers by standard software means
damages the carrier.
6. One will delete secret information if he overwrites some unclassified
information to the storage area.
97
use the carrier no longer.
8. Operational consecutive writing zeros and ones in data sectors allows to delete
not only the boot record but all data.
9. Overwriting makes information recovery impossible.
10. There special documents defining the procedure of deleting information.
11. Confidential information should be protected by adequate means in terms of
cost effectiveness.
Text A. Technical and Legal Protection of Information
Counterespionage and industrial espionage are developing at a quick
pace nowadays. Special services were formed to cooperate in this field with
governmental intelligence; American Society for Industrial Security was even
created.
Computer science that maintains this activity exists and evolves. New
legal, illegal methods and means of obtaining information on competitors' secrets
are being developed. Computer struggle became a usual thing in the world of
market relationship, including foreign trade. Since information networks of
advanced nations are united, possibilities of introduction of logic bombs grow.
They are programmed in software during development as the means of fighting
against illegal copying. Computer fight completed electronic espionage, made it
active.
One of the points of information leakage is tightly bound with deletion of
electronically stored information.
At the moment there are several ways to remove electronically stored
information completely. Information destruction is erasure of information from
the hard drive so that any software or other means cannot recover it. Methods of
information destruction divide into three main groups:
98
1. Software methods based on deletion of information recorded on
magnetic carrier with the help of standard means of recording of information on
magnetic carriers. If information was deleted by standard means, magnetic
carriers can be repeatedly used. Deletion is simply and naturally carried out
through overwriting of information. Overwriting is a process or recording of
unclassified information to the storage area where classified data were
previously stored. It is noteworthy that at overwriting of information operability
of the device remains the same. It is impossible to carry out foolproof deletion of
information if the device is worn-out or broken.
2. Mechanical method is related to mechanical damage of the basis where
magnetic layer was plotted - physical carrier of information.
3. Physical method is related to physical principles of recording on magnetic
carrier, based on rebuilding of structure of carrier working surface
magnetic material.
The last two methods of deletion usually lead to destruction of the carrier
with no possibility to use it in future.
One of the simplest ways to delete information from the hard drive is the
method when one edits the boot record of a hard disk and puts in zeros instead.
Though in such cases the information is not deleted, this method just complicates
the access to it and it can be easily recovered using special software that analyses
sectors of the hard disk.
The more efficient way of complete deletion is operational consecutive
writing zeros and ones in data sectors. At that not only the boot record but all
data are deleted.
The best way to provide maximum level of information deletion is a
method based on data overwriting on the carrier with the help of several cycles
of overwriting, and in some cases not only zeros and ones are wrote, but some
additional masks.
99
The more cycles of information overwriting, the more complicated to
recover are the data; but the number of cycles is unknown. The more times the
head rewrites data, the greater is the probability that it erases areas of residual
magnetization on the edges of the tracks.
Chains overwrote to data sectors are standardized. There are some
algorithms to delete information. For example GOST R50739-95 RF (Russian
Federation) uses two cycles of recording, at first zeros are written and secondly
the codes are applied.
Though overwriting is a reliable method of information removal, it
possible. To ensure this, very sophisticated and high-cost equipment is needed.
The method of overwriting pays off when the information is cheaper than the
equipment needed to recover it.
We can outline the following advantages of the given method.
1. Low prices for software to delete information.
2. Possibility of subsequent use of the carrier.
3. Time cost is about 10-60 minutes.
In conclusion, it's worth to note that deletion of information in not an
easy task. It demands significant funds. Confidentiality of information is
regarded priceless in these cases. Therefore it is necessary to pick up a method
where recovery of information would be more expensive than the very
information [15].
Vocabulary Section
7. Complete the text using the words given below
performed, crossing, guard, suppose, hire, carry out, affect, event
100
Each person in the company should know how the security policy will
_____________ his or her work. If for example, in the case of fingerprint
readers, employees should know what to do in the __________ of failure. You
should also inform people about the zones, and properly _________ them. If you
catch an employee deliberately _________ a guarded area, you should of course,
punish that employee.
_________ that our staff is trained. What do we have left to do? Well,
fitness tests should be __________ on each system as a whole and each
subsystem. The ideal solution would be to _________ fire drills, partial power
failures (or complete power failures), and to _________ a person to specifically
try to break into the premises.
8. Complete the text by translating Russian phrases given in brackets
Telephone lines are considered (1.
Most devices for active protection of telephone lines (2.
, ), which is connected between the
station and the subscriber unit. The protection is realized (3.
) in the telephone line, (4.
), which causes a decrease in
the quality of the signal at the input of the listening equipment, and also blocks
the acoustic start (5. ). If radio transmitting
devices are used, (6. ) or blurring of
the transmission spectrum.
Modern business (7. ,
) that involves the use of electronic processing systems
that generate spurious electromagnetic radiation. With the help of specialized
technical means, (8.
), and then completely restore the information. In
Соседние файлы в предмете [НЕСОРТИРОВАННОЕ]