Monday, September 28, 2009
When we talk about the security in networks, we actually need to know what network definition to make we more deeply understand. Network for me is something can make multiple user connect in same time to each other. Connection happend when there are seven layer in network connect each other and each layer do their task. Seven layer is Application, Presentation, Session, Transport, Network, Data Link and Physical. (click to get a detail about the layer).
Network Security problem area discuss on authentication, secrecy, non-repudiation and integrity control.Example of authentication is commonly done through the use of passwords when user login. So knowledge of the password important to assumed to guarantee that the user is authentic. While non-repudiation problem is exchange something on network without a trusted third party. For me, integrity control means certificate of access control which can be solved by employing one way hash functions.
The bigger problem in securing the network is to prevent our network from the hacker or attacker. Hacker is a bad people which try to attack our computer, resources or files.
Hacking can be divided into 5 :
- Reconnaisance - by initial planning study detecting enemy before attack example by using googling or dumpster diving
- Scanning - Attacker learn network using structure traceroute or ping.
- Gaining Access - issuing the access to the enemy resources
- Maintaining Access - such as troubleshoot identity and access solutions
- Covering Track - contruction phase or cover the data
Tuesday, August 25, 2009
Database Security makes me undertand the most important of security issue especially in database systems and the problems related to information protection. Beside that we investigate thepotential implementation of security mechanism in the database management system and operating system. I learned that how to create the new database and make sure the user can read their own account and a certain person which have priority can access the data to see, write and edit data. The task that we do is create a new records, read all fields and update data and so on.
To set the access right to any person , we need to set the acess control which enables us an authority to access data or resource. This is a one part of physical security and second layer in computer security achitecture. So the application will call the access control functions to set who can access specific resources provided by that application. When we create a access control, we must consider the decision is suitable for the problem. Such as make sure does the operating system respect the data or record. We must consider all of the factor and the pros and cons of our design decision.
Some people do not care on their user privileged. As a good in securing database, we must have policy and defines the privileges various user on organizational network, specify a group of users and so on. The policy is use to create a access and control the user and data.
Database Security is the most important especially when we use a server. It is to secure the database from unathorized users because we usually store the important data such as clients information, financial details, human resource details and all the data that need to be secure and secretly. The benefit of apply the database security is to monitor activity or proces , improved security database, ensures all the resourse is secure and most important is for integrity and availability to user. So the hacker do not have an authority to attack the data.
Concept of database divide by three (Database, Database Administrator(DBA), Database Management System (DBMS)). There is a few way to make sure that the database is under a good database such as there are good in
