Protection and Security of OS

Protection and Security of OS

 

Protection and Security is to provide a protection to computer system resources such as CPU, memory, disk, software programs, and most importantly data/information stored in the computer system.This extends to the Operating System as well as the data in the system. This can be done by ensuring Integrity, Confidentiality and Availability in the operating system. If a computer program is run by an unauthorized user, then he/she may cause severe damage to the computer or data stored in it. The system must be protect against unauthorized access, viruses, worms etc.

Threats to Protection and Security

A threat is a program that is malicious in nature and leads to harmful effects on the system. Some of the common threats that occur in a system are

 

Virus

Viruses are generally small snippets of code embedded in a system. They are very dangerous and can corrupt files, destroy data, crash systems, etc. They can also spread further by replicating themselves as required.

 

Trojan horse

A Trojan horse can secretly access the login details of a system. Then a malicious user can use these to enter the system as a harmless being and wreak havoc.

 

 

Trap Door

A trap door is a security breach that may be present in a system without the knowledge of the users. It can be exploited to harm the data or files in a system by malicious people.

 

 

Worm

A worm can destroy a system by using its resources to extreme levels. It can generate multiple copies that claim all the resources and don't allow any other processes to access them. A worm can shut down a whole network in this way.

 

 

Denial of Service

These types of attacks do not allow legitimate users to access a system. It overwhelms the system with requests so it is overwhelmed and cannot work properly for another user.

 

 

Protection and Security Methods

The different methods that may provide protection and security for different computer systems are

 

Authentication

This deals with identifying each user in the system and making sure they are who they claim to be. The operating system makes sure that all the users are authenticated before they access the system. The different ways to make sure that the users are authentic are :

 

• Username/ Password

Each user has a distinct username and password combination and they need to enter it correctly before they can access the system.

• User Key/ User Card

The users need to punch a card into the card slot or use the individual key on a keypad to access the system.

• User Attribute Identification

user attribute identifications that can be used are fingerprint, eye retina, etc. These are unique for each user and are compared with the existing samples in the database. The user can only access the system if there is a match.

 

One Time Password

These passwords provide a lot of security for authentication purposes. A one-time password can be generated exclusively for a login every time a user wants to enter the system. It cannot be used more than once. The various ways a one-time password can be implemented are

 

• Random Numbers

The system can ask for numbers that correspond to alphabets that are pre-arranged. This combination can be changed each time a login is required.

•   Secret Key

A hardware device can create a secret key related to the user id for login. This key can change each time.

 

What is OS hardening exactly?

When you harden a box, you're attempting to make it bulletproof. Ideally, you want to be able to leave it exposed to the general public on the Internet without any other form of protection. This isn't a box you'll use for a wide variety of services. A hardened box should serve only one purpose--it's a Web server or DNS or Exchange server, and nothing else. You don't typically harden a file and print server, or a domain controller, or a workstation. These boxes need too many functions to be properly hardened.

According to the Duo Trusted Access Report, fifty-three percent of Mac OS users are running either the fully patched, latest version of OS X, or the previous version, compared to thirty-five percent of Windows users on Windows 10 and 8.1. That means the majority of these operating systems are outdated. When attempting to compromise a device or network, malicious actors look for any way in. Unbeknownst to many small- and medium-sized businesses, operating system vulnerabilities provide easy access. To provide clients with peace of mind, safeguard their sensitive information, and differentiate your security services from the competition, here are six ways to harden customers' operating systems:

1. Programs clean-up

Programs clean-up – Remove unnecessary programs. Every program is another potential entry point for a hacker. Cleaning these out helps you limit the number of ways in. If the program is not something the company has vetted and "locked down," it shouldn’t be allowed. Attackers look for backdoors and security holes when attempting to compromise networks. Minimize their chances of getting through.

 

2. Use of service packs

 Keep up-to-date and install the latest versions. It’s that simple. No one thing ensures protection, especially from zero-day attacks, but this is an easy rule to follow.

 

3. Patches and patch management 

Planning, testing, implementing, and auditing patch management software should be part of a regular security regimen. Make sure the OS is patched regularly, as well as the individual programs on the client's computer.

 

4. Group policies 

Define what groups can or can’t access and maintain these rules. Sometimes, it’s simply user error that leads to a successful cyber-attack. Establish or update user policies and ensure all users are aware and comply with these procedures. For example, everyone should be implementing strong passwords, securing their credentials, and changing them regularly.

 

 

5. Security templates 

 Groups of policies that can be loaded in one procedure; they are commonly used in corporate environments.

 

 

6. Configuration baselines 

Baselining is the process of measuring changes in networking, hardware, software, etc. To create a baseline, select something to measure and measure it consistently for a period of time. Establish baselines and measure on a schedule that is acceptable to both your standard for maintaining security and meeting your clients' needs.

 

 

 

Blog Written and Created By : 

EDI Group 3 For CAOS Home Assignment
- Gaurav Patil
- Akash Patil
- Shashank Pathmudi
- Samruddhi Parate
- Diya Palresha