Chapter 5 Securing Hosts And Data

Front 1

Reducing attack surface

Back 1

Disable unnecessary services and protocols

Front 2

Standardized images

Back 2

Baseline images which include mandatory security configurations. Used to identify anomalies by comparing image with live computers.

Front 3

Host Software Baseline

Back 3

Provide list of approved software and list of software installed on system. Used to identify unauthorized software on systems.

Front 4

Baseline Reporting

Back 4

provides report after comparing baselines with current systems.

Front 5

Snapshot

Back 5

copy of a VM at a particular point in time. Can be used as a backup

Front 6

SCADA

Back 6

Supervisory control and data acquisition: industrial control system within large facility

Front 7

BYOD concerns

Back 7

Data security is greatest concern. Mitigated through use of VLANs.

Front 8

TPM

Back 8

trusted platform module. Chip embedded in motherboard that provides full disk encryption. Storage root key can be activated which TPM uses to generate and store cryptographics keys

Front 9

HSM

Back 9

Hardware security module. Removable or external device that can generate and manage RSA keys.

Front 10

endpoint DLP

Back 10

Data loss prevention which restricts the use of hardware at endpoint (usb drives, mp3 players, etc.)

Front 11

network-based DLP

Back 11

data loss prevention which examines network traffic for PII or confidential data

Front 12

IaaS

Back 12

Infrastructure as a service. Provides customers with access to hardware in self managed platform

Front 13

PaaS

Back 13

Platform as a service. Provides clients with fully manged platform which vendors keeps up to date with patches.

Front 14

Baseline reporting

Back 14

monitors current configurations with baseline and reports discrepancies

Front 15

application whitelisting vs blacklisting

Back 15

whitelisting : allows whitelist & blocks all others