Protecting Information on Local Area Networks (eBook)

Front Cover 1
Protecting Information on Local Area Networks 4
Copyright Page 5
Table of Contents 8
Dedication 6
Introduction 10
PART I: Background 16
CHAPTER ONE. Understanding Today's Computer Networks 18
COMMUNICATIONS BRINGS ADDED VALUE TO COMPUTING 19
TYPES OF COMPUTERS 20
BENEFITS FROM NETWORKING COMPUTERS 21
NETWORK TECHNOLOGY AND APPLICATIONS 22
CONSIDERING A LOCAL AREA NETWORK 23
NETWORK VULNERABILITIES 29
NETWORK RISKS AND SECURITY MEASURES 31
THE PERSONAL COMPUTER AND NETWORKS 35
SOME SECURITY CASES INVOLVING NETWORKS 36
CHAPTER TWO. A Management Responsibility: Protecting Information on Networks 38
A CRITICAL BUSINESS REQUIREMENT: INFORMATION QUALITY 39
MANAGEMENT ACTION 1: MANAGEMENT OF THE INFORMATION RESOURCE 40
SUMMARY 46
PURPOSE 46
SCOPE 46
POLICY 46
REFERENCES 47
CORPORATE PUBLICATIONS 47
MANAGEMENT ACTION 2: GOOD SYSTEM DESIGN 48
MANAGEMENT ACTION 3: EFFECTIVE OPERATIONAL MANAGEMENT AND CONTROL 48
MANAGEMENT ACTION 4: NETWORK AND WORKSTATION SECURITY 49
PART II: Planning and Implementing Network Security 50
CHAPTER THREE. Planning for Security in a Local Area Network 52
A NEW KIND OF NETWORK 52
PLANNING A SECURE LOCAL AREA NETWORK 54
RISK AND COUNTERMEASURES ANALYSIS 61
CHAPTER FOUR. Selecting Appropriate Security Elements 64
A NETWORK IS NOT A DATA CENTER 64
DETAILS OF IMPLEMENTATION 66
ENCRYPTION: THE ULTIMATE PROTECTION 79
PART III: Achieving Network Security 86
CHAPTER FIVE. Keys to Secure Network Operations 88
CHARACTERISTICS OF EFFECTIVE SECURITY STANDARDS 88
SPREADING THE WORD 93
SUMMARY 93
CHAPTER SIX. Security Standards for Modern Networks 96
NETWORK SECURITY STANDARDS 97
THE GENERAL SECTION 97
NETWORK ACCESS MANAGEMENT CONTROL SYSTEMS 100
INFORMATION PROTECTION REGULATIONS 101
NONCOMPANY AND OUTSIDE SERVICES AND CONNECTIONS 102
INFORMATION PROCESSING AND TELECOMMUNICATIONS 104
DISTRIBUTED COMPUTING, INCLUDING PERSONAL, OFFICE, RESEARCH, AND SCIENTIFIC 105
EXCEPTIONS TO POLICY 107
CHAPTER SEVEN. Handling the Personal Computer Risk 110
AN EXAMPLE 110
WHAT IS A PERSONAL COMPUTER? 110
THE POWER OF THE PERSONAL COMPUTER 111
THREATS TO INFORMATION 112
PROTECTING THE NETWORK-CONNECTED PERSONAL COMPUTER 113
PLANNING FOR SECURE USE OF PERSONAL COMPUTERS 114
SUMMARY 120
References 122
APPENDIX A: A Management Task List 124
APPENDIX B: An Automated Logical Access Control Standard 134
APPENDIX C: A Problem Reporting and Resolution Procedure 146
Index 149