Microsoft Windows computers can be very useful by themselves, but they are far more effective when they are able to communicate with one another. In an essay, address the following: Discuss the techniques that many organizations use to ensure that their
Michelle_Michy
20181027181706winsec_ppt15_l10.pptxSecurity Strategies in Windows Platforms and Applications
Lesson 10
Microsoft Windows Security Administration
© 2015 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
1
Learning Objective and Key Concepts
Learning Objective
Develop a security administration framework to ensure your organization meets its security policy goals.
Key Concepts
Security administration
Due diligence
End user security awareness training program
Page ‹#›
Security Strategies in Windows Platforms and Applications
© 2015 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
2
Operating System Administration
Page ‹#›
Security Strategies in Windows Platforms and Applications
© 2015 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
3
Workstation Administration
Server Administration
Network Device Administration
Security Administration Process
Page ‹#›
Security Strategies in Windows Platforms and Applications
© 2015 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
4
C-I-A
Page ‹#›
Security Strategies in Windows Platforms and Applications
© 2015 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Availability, integrity, and confidentiality (A-I-C)
Aka confidentiality, integrity, and availability, (C-I-A)
Aka the A-I-C triad or the C-I-A triad
5
Types of Security Administration
Page ‹#›
Security Strategies in Windows Platforms and Applications
© 2015 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Availability, integrity, and confidentiality (A-I-C)
Aka confidentiality, integrity, and availability, (C-I-A)
Aka the A-I-C triad or the C-I-A triad
6
Firewall
Backup
Operating system service pack
Group Policy
Types of Security Administration
Page ‹#›
Security Strategies in Windows Platforms and Applications
© 2015 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Availability, integrity, and confidentiality (A-I-C)
Aka confidentiality, integrity, and availability, (C-I-A)
Aka the A-I-C triad or the C-I-A triad
7
DACL
Encryption
Anti-malware software
Windows Firewall with Advanced Security MMC Snap-in
Page ‹#›
Security Strategies in Windows Platforms and Applications
© 2015 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
8
Windows Performance Monitor
Page ‹#›
Security Strategies in Windows Platforms and Applications
© 2015 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
9
Windows Backup and Restore for Windows 7
Page ‹#›
Security Strategies in Windows Platforms and Applications
© 2015 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
10
Windows Server 2008 Backup
Page ‹#›
Security Strategies in Windows Platforms and Applications
© 2015 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
11
MBSA GUI
Page ‹#›
Security Strategies in Windows Platforms and Applications
© 2015 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
12
Group Policy Management Console
Page ‹#›
Security Strategies in Windows Platforms and Applications
© 2015 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
13
Object Properties Security Page
Page ‹#›
Security Strategies in Windows Platforms and Applications
© 2015 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
14
DACL Advanced Security Settings
Page ‹#›
Security Strategies in Windows Platforms and Applications
© 2015 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
15
Object Properties—Advanced Attributes
Page ‹#›
Security Strategies in Windows Platforms and Applications
© 2015 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
16
Enabling BitLocker
Page ‹#›
Security Strategies in Windows Platforms and Applications
© 2015 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
17
BitLocker Management Tool
Page ‹#›
Security Strategies in Windows Platforms and Applications
© 2015 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
18
Compliance and Due Diligence
Page ‹#›
Security Strategies in Windows Platforms and Applications
© 2015 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
19
Compliance
Due Diligence
Security Policies, Standards, Procedures, and Guidelines
Guidance Documents
Security policy
Security standard
Security procedure
Security guidelines
Main Security Elements
Clearly stated security goals
Documented plans
Communication with stakeholders
Page ‹#›
Security Strategies in Windows Platforms and Applications
© 2015 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
20
Best Practices
Clearly state security goals
Include all compliance requirements
Use the PDCA method
Communicate with all stakeholders
Strive for simplicity
Search for controls that have little impact on users
Coordinate AUPs with technical controls
Automate
Use AD GPOs
Page ‹#›
Security Strategies in Windows Platforms and Applications
© 2015 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
21
Best Practices (Cont.)
Coordinate physical and technical controls
Use anti-malware controls
Develop a plan to monitor system and network performance
Use up to date software
Examine log files
Stay current on emerging attacks
Test your recovery plans
Define DACLs
Page ‹#›
Security Strategies in Windows Platforms and Applications
© 2015 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
22
Summary
Methods of Windows security administration
Process of security administration
Key roles involved in security administration
Recent security breaches
Page ‹#›
Security Strategies in Windows Platforms and Applications
© 2015 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
23
