Preventive Maintenance Techniques by Yusoff Yaacob

MOHAMMAD NOOR SYAHRAIN BIN MOHD ISA

2017-03-05 01:11:05 UTC

03DDT16F1093

Physical methods

As you have seen, there are many different ways that you or a business can lose valuable data. With a little bit of planning and thought however, the risks can be reduced or even eliminated.

Physical methods of protection are there to stop unauthorised people physically going to the computer and accessing the IT systems.

There are many things companies can do to make their equipment more secure:

Lock the room when not in use
Use swipe cards or keypads to activate locks
Bolt computers to the desk
Use special pens to mark their postcode onto the computer case
Keep windows shut - especially if on the ground floor. Use bars.
CCTV video cameras to monitor rooms where the computers are and also the corridors
In large firms, security guards
Passes which are checked by the security guards
Position the screen so passers-by can't see what you are working on
Make sure that nobody can see the keyboard whilst you are typing in your password

MUHAMMAD IZZUL AMIN BIN SHARIF

2017-03-05 01:20:10 UTC

03DDT16F1093

INTRODUCTION

The physical security domain provides protection techniques for the entire facility, from the outside perimeter to the inside office space, including all of the information system resources.The physical security domain provides protection techniques for the entire facility, from the outside perimeter to the inside office space, including all of the information system resources.

MOHD FIRDAUS BIN ZAKARIA

2017-03-05 01:23:26 UTC

03DDT16F1077

Physical Security Definition

•The physical measures & their associated procedures to safeguard & protect against:

•Damage

•Loss

•Theft

Implementing controls that discourage attackers by convincing them that the cost of attacking is greater than the value received from the attack

MOHAMAD SHAHRIL BIN YAACOB

2017-03-05 01:32:20 UTC

03DDT16F1079

List of Physical Equipment

Network Devices :
-HUB
-Ethernet Hub
-Switches
-Bridges
-Routers

MUHAMMAD IZZUL AMIN BIN SHARIF

2017-03-05 01:34:37 UTC

(03DDT16F1081)
Protecting Data While in Use

^{For users that need to access sensitive network resources, a token can be used to provide two-factor authentication. A token can be hardware type, such as a pin card, or a software type, such as a soft token program, . The token is assigned to a computer and creates a unique code at certain times. When users access a network resource, they enter a PIN and a number displayed by the token. The number displayed by the token is created from a calculation made with its internal clock and a random number encoded on the token at the factory. This number is authenticated against a database that knows the token’s number and can calculate the same number.}

MUHAMAD AZFAR BIN KAMALUN AZMI

2017-03-05 01:36:26 UTC

003DDT16F1070

List of Physical Equipment

-Network Card
-Gateways
-Modem

IZZAT FAHMI BIN ISMAIL

2017-03-06 03:53:15 UTC

(03DDT16F1072)

Disabling AutoRun

Another method of hardware security is to disable the AutoRun feature of the operating system. AutoRun automatically follows the instructions in a special file called autorun.inf when it is found on new media. AutoPlay is different from AutoRun. The AutoPlay feature is a convenient way to automatically identify when new media, such as optical disks, external hard drives, or thumb drives, are inserted or connected to the computer. AutoPlay prompts the user to choose an action based on the content of the new media, such as run a program, play music, or explore the media.

On Windows, AutoRun is executed first, unless it is disabled. If AutoRun is not disabled, it follows the instructions in the autorun.inf file. On Windows Vista and Windows 7, AutoRun is not allowed to bypass AutoPlay. However, on Windows XP, AutoRun bypasses AutoPlay and might launch an application without prompting the user. This is a security risk because it can automatically run a malicious program and compromise the system, so it is recommended to disable AutoRun.

To disable AutoRun in Windows XP, follow these steps:

Step 1. Select Start > Run.

Step 2. Type regedit and click OK.

Step 3. Navigate toHKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom.

Step 4. Double-click AutoRun. In the Value Data text box, type 0 and click OK, as shown in Figure 1.

Step 5. Close the Registry Editor.

Step 6. You might have to log out and then log back in for this change to take effect.