ALOT of the material in these slides and in this lecture is NOT in the book. This book does a good job of presenting most of the material needed for the security+ exam. However the info in chapter 8 is a little thin so play close note to the slides. Perhaps I provide a little too much depth for the security+ exam but it’s well worth doing the extra learning especially if you want to take the CISSP or really understand networks and network security concepts to be USEFUL in real life! | Security+ All-In-One Edition Chapter 8 – Infrastructure Security Brian E. Brzezicki WARNING! ALOT of the material in these slides and in this lecture is NOT in the book. This book does a good job of presenting most of the material needed for the security+ exam. However the info in chapter 8 is a little thin so play close note to the slides. Perhaps I provide a little too much depth for the security+ exam but it’s well worth doing the extra learning especially if you want to take the CISSP or really understand networks and network security concepts to be USEFUL in real life! Infrastructure Security Infrastructure security is concerned with providing security for the entire network infrastructure. Infrastructure security is concerned with providing availability to authorized users, ensuring no one is allowed to access resources in an unauthorized manner, and ensuring that the network integrity is maintained. That is Infrastructure security is concerned with the entire CIA triad. . | Security+ All-In-One Edition Chapter 8 – Infrastructure Security Brian E. Brzezicki WARNING! ALOT of the material in these slides and in this lecture is NOT in the book. This book does a good job of presenting most of the material needed for the security+ exam. However the info in chapter 8 is a little thin so play close note to the slides. Perhaps I provide a little too much depth for the security+ exam but it’s well worth doing the extra learning especially if you want to take the CISSP or really understand networks and network security concepts to be USEFUL in real life! Infrastructure Security Infrastructure security is concerned with providing security for the entire network infrastructure. Infrastructure security is concerned with providing availability to authorized users, ensuring no one is allowed to access resources in an unauthorized manner, and ensuring that the network integrity is maintained. That is Infrastructure security is concerned with the entire CIA triad. Devices on the Network Workstations Workstations (202) Often overlooked in security, workstations are a very attractive target for hackers. Often IT staff spend time securing servers and don’t realize the dangers their unprotected workstations are. (more) Workstations (202) Workstations are often “low hanging fruit” manned by end users who are themselves are a security risk. Once a workstation is infiltrated an attacker may have access to data directly, via the authorized users on the system, and that workstation can be used as an attack point into the network. Workstation security is CRITICAL to the “holistic” network health and security. Workstation Security Best Practices (basic hardening) (203) Physical Physically restrict access to workstation Use locking devices to ensure computer cannot be opened, or be stolen (whether in whole or in part) Set a BIOS password Do not allow booting from removable media / or allow altering of the boot order Remove removable media attachments if .
