Англ язык Защита информации

посторонних, вредоносные программы (сетевые черви) могут сделать ваш компьютер полностью неработоспособным, а также кто-то может воспользоваться им для рассылки подобных программ или вирусов другим компьютерам без вашего ведома.

Class activity

Exercise 1. Outline the main ideas of the text:

Text 2. HOW DIFFERENT IS NETWORK SECURITY

FROM COMPUTER SECURITY?

Network security consists of the provisions made in an underlying computer network infrastructure, policies adopted by the network administrator to protect the network and the network-accessible resources from unauthorized access and the effectiveness (or lack) of these measures combined together.

Securing network infrastructure is like securing possible entry points of attacks on a country by deploying appropriate defense. Computer security is more like providing means of self-defense to each individual citizen of the country. The former is better and practical to protect the civilians from getting exposed to the attacks. The preventive measures attempt to secure the access to individual computers the network itself thereby protecting the computers and other shared resources such as printers, network-attached storage connected by the network. Attacks could be stopped at their entry points before they spread. As opposed to this, in computer security the measures taken are focused on securing individual computer hosts. A computer host whose security is compromised is likely to infect other hosts connected to a potentially unsecured network. A computer host's security is vulnerable to users with higher access privileges to those hosts.

Network security starts from authenticating any user. Once authenticated, firewall enforces access policies such as what services are allowed to be accessed by the network users. Though effective to prevent unauthorized access, this component fails to check potentially harmful contents such as computer worms being transmitted over the network. An intrusion prevention system (IPS) helps detect and prevent such malware. IPS also monitors for suspicious network traffic for contents, volume and anomalies to protect the network from attacks such as denial of service. Communication between two hosts using the network could be encrypted to maintain privacy. Individual events occurring on the network could be tracked for audit purposes and for a later high level analysis.

Honeypots, essentially decoy network-accessible resources, could be deployed in a network as surveillance and early-warning tools. Techniques used by the attackers that attempt to compromise these decoy resources are studied during and after an attack to keep an eye on new exploitation techniques. Such analysis could be used to further tighten security of the actual network being protected by the honeypot.

(From Wikipedia, the free encyclopedia)

List of words and expressions

network administrator – администратор сети policy – политика, стратегия

unauthorized access – несанкционированный доступ (НСД) entry point – точка входа

preventive measures – предупредительные меры

122

about leaks (both external and internal) as regulated companies because of the strategic nature of the information they manage and the frequency with which they fall victim to leaks.

Over the years, organizations have spent a tremendous amount of resources in hopes of protecting their information. However, their efforts have been focused on preventing outsiders from hacking into the organization, educating employees, and securing data at rest. According to analyst firms, the majority of all leaks are the result of unintentional information loss from employees and partners, both external and internal leaks.

Gateway-based systems are usually dedicated hardware/software platforms, typically installed on the organization's internet network connection, that analyze network traffic to search for unauthorized information transmissions. They have the advantage that they are simple to install, and provide a relatively low cost of ownership. Because decoding network traffic at high speed is extremely complex and difficult (transmitted objects are broken into small parts, often encoded, and then mixed with other traffic), Network based systems typically integrate with or include technologies to discover information 'at rest' while it is stored in file systems and databases. Discovering sensitive data at rest is far simpler and less time critical, thereby allowing greater levels of accuracy. Taking 'signatures' of data identified at rest, and then looking for such signatures as data passes over the network boundary, is a technique favored by virtually all Network system vendors to improve accuracy, and to identify sensitive data that would otherwise be missed. The technique does suffer from the disadvantage that it must have previously been scanned at rest in order to be identified, and therefore newly created data, for example typed directly into an email message, is often missed.

Network systems have the disadvantage that they can only monitor external communications, and therefore cannot consider internal leaks - between departments for example, and that they are easily defeated by encryption, or even compressing sensitive data in a Zip (file format) or similar archive.

Host Based ILD&P systems run on end-user workstations or servers in the organization. Since they are not limited to operation at the network boundary, host based systems can address internal as well as external communications, and can therefore be used to control information flow between groups or types of users (eg 'Chinese walls').

Workstation systems have the advantage that they can monitor and control access to physical devices (such as USB keys, iPods etc) and in some cases can access information before it has been encrypted. Workstation systems can also provide granular application controls to block attempted transmissions of confidential information, and provide immediate feedback to the user. They have the disadvantage that they need to be installed on every workstation in the network, cannot be used on mobile devices (eg Blackberry), or where they cannot be practically installed (for example on a workstation in an internet café using Outlook Web Access to send corporate email).

Server based systems, for example on email or file servers, have the advantage that they only need to be installed on a relatively small number of machines, but provide protection for a full range of corporate email clients (eg Blackberry and Web clients). They do however require deep integration with messaging and file systems, and few vendors provide them.

The most comprehensive protection is provided by solutions where both Network and Host based systems are combined, preferably within a single management platform where rules are defined centrally and distributed automatically, and where results are gathered and presented in a single console. This approach is endorsed by industry analysts.

(From Wikipedia, the free encyclopedia)

125

For instance, a user in marketing could be allowed to view, or read a data file in accounting but not be permitted to change or write to it.

Security management is also important in managing the network itself – for instance, only certain individuals (such as network administrators) should be permitted to change configuration settings on a server or other key network devices.

Performance management tools produce real-time and historical statistical information about the network’s operation: how many packets are being transmitted at any given moment, the number of users logged into a specific server, and utilization of internetwork lines. As already noted, this type of information can help network administrators pinpoint areas or network segments that pose potential problems.

Most network operating systems (NOSs) provide some level of network management capabilities; in particular, almost all the leading NOSs offer password-protection schemes that limit users’ access to network resources. Novell, for instance, implements its NetWare management schemes through user profiles, which define not only the user’s access rights, but the users’ classifications (supervisor, workgroup manager, console operator, or user), which also determine the resources they can access.

In this scheme, a supervisor has access rights that allow reconfiguring and upgrading the entire system. The workgroup manager, available with NetWare 3.X, controls only the resources of a single user or user group. This concept allows a supervisor to distribute some of the responsibility for maintaining the network to others around a large network.

A user with console operator access rights can run NetWare’s FCONSOLE utility, which allows monitoring and controlling a variety of network performance criteria, such as print queues. The user can access only those resources allowed by the supervisor (or workgroup manager with NetWare 3.X). Although users can access the NetWare management utilities, their rights to actually perform management functions are severely limited.

Although other NOSs’ access schemes may differ in specific features from NetWare’s, they all offer similar resource-restriction capabilities that give the network managers control over their networks.

(From mk:@MSIT Store:C:\Documents)

List of words and expressions

security management – управление защитой (безопасностью) to log – записывать (регистрировать)

internetwork line – межсетевая линия to pinpoint – точно определить

user profile – безоп. профиль пользователя

комп. параметры ( профиль) пользователя, upgrading – модернизация, совершенствование

console – пульт (управления); консоль; пульт оператора queue – очередь; очередность, список очередности

Exercises

Comprehension Check

Exercise 1. Answer the following questions:

1. What allows the network manager to restrict access to various resources? 2. What do

128

password-protection schemes give users? 3. Is security management important in managing the network itself? 4. What information do performance management tools produce? 5. Can this type of information help network administrators pinpoint areas or network segments? 6. What do most network operating systems concern with? 7. Can user profiles define only the user’s access rights? 8. What is the workgroup manager available with? 9. Which resources can the user access? 10. What gives the network managers control over the network?

Exercise 2. Use the text to translate the following equivalents. Use them in your

own sentences:

Инструменты управления безопасностью, ограничивать доступ к различным ресурсам, вся сеть полностью, предлагать схемы защиты при помощи паролей, предоставлять пользователям различные уровни доступа, не разрешается изменять файлы, изменять установки, информация в режиме реального времени, быть подключенным к определенному серверу, выделять области и сегменты сети, представлять потенциальные проблемы, классифицировать пользователя, позволять реконфигурацию и обновление всей системы, различаться в определенных технических характеристиках.

Language Work

Exercise 1. Complete the statements using the words from the box:

1.A user in marketing could not be permitted to change or write to a …… file.

2.Security management is also …… in managing the network itself.

3.A file server might …… the number of users logged in.

4.Password-protection schemes limit users’ …… to network resources.

5.A …… has access rights that allow reconfiguring and upgrading the entire system.

6.Configuration management applications deal with installing, initializing, booting, modifying, and tracking the configuration parameters or options of network hardware and

…….

Exercise 2. Choose the best alternatives in the following sentences:

1.Crimeware represents / is represented a growing problem in network security as many malicious code threats seek to pilfer confidential information.

2.Cybercriminals are used / use a variety of techniques to steal confidential data through crimeware.

3.Individual events are tracked / track for audit purposes and for a later high level

analysis.

4.Hacking and system cracking appeared / were appeared with the first electronic computers.

5.Any deviations from the Inspection technologies, server operating software and applications require / are required.

6.This standard applied / was applied to protect packets both between hosts and between network security gateways like routers or firewalls.

Class Activity

Exercise 1. Speak about Network and Systems management. Make a short oral

129

summary. Present it to the class

Text 5. NETWORK SECURITY AND BACKUP SYSTEMS

Prevention is the key when it comes to network security. Identifying and stopping intrusion – in all its forms – is what security is all about. But identifying a potential intrusion is not always obvious, or likely. The usual security suspects – CIA agents, and industrial espionage – make great headlines, but they don't pose real risks to the average company. However, just because you're not building the next secret weapon doesn't mean that you're not at risk from security breaches. Far more often, security risks come from acts committed out of human error, greed, malcontent, or machine error.

Physical theft, electronic tampering, and unauthorized access are just three of the more obvious threats to network equipment and data. Physical theft includes people stealing computers, taking floppies with data, and tapping into the cable to siphon off information. Electronic tampering covers computer viruses and other malicious reprogramming. Unauthorized access, the most common threat to security, usually occurs when people see information they shouldn't.

Networks seriously increase access to your information, and with access comes the responsibility of restriction and control. In addition to the usual sources of security breaches—people taping passwords to their monitors and using scanners to electronically eavesdrop—networks invite a whole host of other vulnerabilities. It's easy enough to drop another workstation or server on the network or add another application. Add the ability to dial into the network system, and you pose an even greater risk.

There is no simple formula for calculating your security needs. The amount of security depends upon the threat you perceive. In some cases, the need for security is clear: banks, airlines, credit card companies, and insurance companies. In other cases, the risks may be less obvious. Allowing any worker to examine the payroll file makes for disgruntled employees. Your personal calendar indicates when you are out of town. The following are some of the more common risks to network security.

Your network can be a danger to itself. Being made of mechanical components, a network can do itself damage when disk heads crash, servers fail, and power supplies blow. Tape and disk platters get old and go bad. Bugs, such as in an out-of-control operating system process or one with a faulty memory mapping, destroy data. Monitor mechanical equipment for wear. For critical components, keep spares onsite or, if warranted, online.

Your network is physically vulnerable. Thieves and other intruders can physically break into your building, wiring closet, or server room and steal or vandalize equipment and data. When a file is erased, very often it physically remains on disk or tape – only the entry to the directory structure is removed. Sensitive documents may be printed out and left lying around the office, waiting for prying eyes or thieving hands.

Your first line of defense is the simplest: Use locks, guards, and alarms to protect against these physical vulnerabilities. Lock servers in a room and lock wiring closets, permitting access to only those with a key. Sensitive data must be completely wiped off the media when deleted. Shred all sensitive printouts. Bolt expensive equipment to the floor or to a desk. A slew of products exist to prevent intruders from physically taking equipment. Most involve locking equipment with metal bars, in steel cabinets, or with large chains. Others sound loud alarms to deter the thief. These products can help to keep your equipment from being physically stolen (it also makes them difficult to move from one station to another). If your security needs are extreme, you might employ biometric devices.

130