Qurdi Sanchez Tecnical

Your iPhone !

2009-10-14T07:26:00.001-07:00

Securities Principles

2009-10-14T07:21:00.000-07:00

Securities Principles

The chief information security officer (CISO) is the one who is in charged of security polices and how it will be implemented. Managing the entire information structure is based on securities principles such as protecting systems by layering, limiting, diversity, obscurity and simplicity. We have been applying those principles in hands on project. I will be writing on three of these principles, protecting systems by layering, limiting and diversity.

Developing Securities

As information system security expert, developing securities principles is extremely important. Understanding the concept of security layers helps to protect the vital information that could compromise the company. Building up efficient and effective layers of security depends on variety of factor we must to have in mind. Layering covers from employees, physical structure, hardware, computer software and networking.

Accessibility or Limitation Related with User's Profile

This week we have been managing users accounts and their privileges, so control access to computer systems. We have created and set up group policies, and applied the accessibility or limitation related with user's profile. We have learned how to set folder permissions in different accounts based on the identity of the users.

Diversity

The definition provide in chapter 3, tells in essential what is diversity refer to. Diversity is no more than security layer been different, so that if attacker penetrate one layers; they cannot use the same technique to break through all other layers.

In conclusion, building up efficient and effective layers of security depends of the security principle. How well understand the security polices through out any organization contribute the qualities of itself. "The principle of information security safeguards is a key information privacy principle" (Dayarathna, 2009). When a company or an organization do not protect the privacy of its people the confidence, the legal problems and financial welfare are critical in order to survive.

Dayarathna, Rasika. 2009. "The principle of security safeguards: Unauthorized activities." Computer Law & Security Report 25, no. 2: 165-172. Academic Search Premier, EBSCOhost (accessed October 3, 2009).

Week 5th

2009-10-14T07:17:00.000-07:00

Why do companies use database management systems and why are data base administrators critical to the success of businesses? I have learned the importance of data centers and the Data Base Administrator (DBA) do what would be impossible to do without it by manual tracking. The sequence that is implemented is: what a database management system is.

A data center is the core where information is stored, processed, exchanged and managed through computer applications. The network of networks, called the Internet is compounded by data centers and computer servers compound these data centers. Data centers are the core where a huge amount of information is treated.

This points out how dependable a company is on its information technology infract structure well known as a database management system and the people who operate it. Database management systems infract structure and qualified individuals are based on what a corporation needs. A database management system is used to capture data for different aspects of a business process, such as manufacturing, distribution, sales, and marketing.

In conclusion I want to quote Jukic Nenad “This data reflects explicitly and implicitly customer patterns and trends, the effectiveness of business strategies and resultant practices, and other characteristics.” Such data is of vital importance to the success of a business.

Jukic, Nenad. 2006. "MODELING STRATEGIES AND ALTERNATIVES FOR DATA WAREHOUSING PROJECTS." Communications of the ACM 49, no. 4: 83-88. Research Starters - Business, EBSCOhost (accessed March 20, 2009).

In this 3th week, I have studied the attackers and their attack

2009-09-19T18:05:00.000-07:00

In this 3th week, I have studied the attackers and their attacks

The first stage of hacking is to scan opening ports available in order to enter in a computer. This sentence represents my own definition of hacking concept. The chapter two and hand on project make you go through the basic attacks provider by different categories of hackers. We learn to define attackers profiles, basic and identity attacks, identify denial of service attacks and malicious code called Malware. Finally, I have performed the entire Hand-On Projects.

Attackers Profiles

They are different attackers profiles such as: Hacker, Cracker, Script kiddies, Spy, Employee, Cyberterrorist. Each one of these attackers profiles has its own skill level of expertise and motivation.

Basic and Identity Attacks are Named like follow:

Social Engineering in which is the easiest way to attack a computer systems.

The named "Password Guessing" defines what it does.

Man-in-the-Middle Attacks consist of based on identity attacks

Denial of Service Attacks, consist of making the server or device unavailable by flooding it with requests.

Malicious Code (Malware)

Malicious Code (Malware) is named based on what it does. Virues, Worms, Logic Bombs, Trojan Horses, Back Door.

Hand-On Projects

I have applied two methods of Backing Up Data. The first one through Windows based on physic store device and the second from AVG based on the back up uploaded to the cloud. Also, I have been able of viewing and modify the ARP table, stopping zombies related of DoS attacks and password guessing to break in to a word document. The last project consisted of explored the Linux password file.

In conclusion, having performed the entire Hand-On Projects helping me to enhance my knowledge and experience. I have been able to develop attacker profiles, learn the basic and identity attacks, malicious code (Malware) and applied my knowledge in Hand-On Projects.

Security Base

2009-09-11T06:59:00.000-07:00

I will talk about Window XP installation in a MacBook Pro using Boot Camp. Also, I will explain why is values to have an original copy of Windows OS and Microsoft Baseline Security Analyzer. Finally, I will expound about my experience using Shield Up scan.

Window XP professional edition was difficult to install using a Mac Book Pro with Boot Camp, but I succeed. I even set up the regedit, so make possible the installation of Service Pack 3. I made a disk install from the WinXP ISO using an ISO burning software. Using an original copy of Window will pay back through time.

The services packs upgrade are extremely important for the stability of the Windows operating system and future threat to face. As well, I have experimented for the first time Microsoft Baseline Security Analyzer (MBSA) in order to identify any flaw in the system. My WinXP OS passed the test. Finally have surf the web to test my OS against any threat from the Network of network, Internet. I scanned all service ports, file sharing, and other so identify vulnerability that could compromise my personal information.

In conclusion, the experience was great! I really enjoined playing around with cool stuff. I have gone through all these before, but have analyzed it step by step has increase my knowledge making deeper my security concept that I used to have in the mind.

We are not only learn in the way that the world does; even more, we are able to learn by revelation in the way of the Lord.

2009-09-04T07:39:00.000-07:00

The Gospel of Jesus Christ has the answers of all questions we could ever ask. Learning in the manner of the Lord, it is in deed one of them. Learning based on principles make you ponder about your life itself and what the Lord your God is waiting for you to do. Prepare, teach one another, ponder and prove are fundamentals stages for learning process. I will apply these concepts through out my Information System classes. Doing so, I will be able to enhance what have been taught to me.

I have learned that LDS Business College is really a Temple of Learning. It is amazing how we are lead by the influence of God. We are not only learn in the way that the world does; even more, we are able to learn by revelation in the way of the Lord. These scripture says what the Lord have command me to do. I have been command to act, and my purpose is to obey.

78 Teach ye diligently and my ^a^grace shall attend you, that you may be ^b^instructed more perfectly in theory, in principle, in doctrine, in the law of the gospel, in all things that pertain unto the kingdom of God, that are expedient for you to understand;

79 Of things both in ^a^heaven and in the earth, and under the earth; things which have been, things which are, things which must ^b^shortly come to pass; things which are at home, things which are abroad; the wars and the perplexities of the ^c^nations, and the judgments which are on the land; and a ^d^knowledge also of countries and of kingdoms— (D&C 88: 78-79)

My Blog

2009-09-04T07:19:00.000-07:00

4 of September opening of My Blog