Information Security

(ETCS 401)
Assignment -1

Faculty Name: Dr. Farzil Submitted By: Geetika Jhanji

Roll No: 35114802719

Group: 7C-8

AHARAJA, AGRASEN

WSTITUTE OF ECHNOL

MAIT

DEPARTMENT OF COMPUTER SCIENCE & ENGINEERING

MAHARAJA AGRASEN INSTITUTE OF TECHNOLOGY
(AFFILIATED TO GURU GOBIND SINGH INDRAPRASTHA UNIVERSITY,
DELHI
(a)
QWhat do you unduntud by he oncep
ihun bh oyanzaten?
ankoumathen aleuutf

wnauthdhized accs, wse

DALNnting
dsclerdhu, disuption, mrdihileeh
m,
ot olstuuhem
unspechiom, iteodling
uCod.
dnniWmiau Cutiul
Siuity peom Gou
Ot i tht o19anisahin aliity
paote
Jo undion.
It nabls aafe sopesahion applications
bcganisatidh
Amplemeuted'on
lymtemd.
(3Ttpaeteci he data Hhe ogansah bn
Coiluc anel usLs. te
Ttsaye gauds tchnology hat
u4CA.
ogauisafion
b) Tn an Rgauination to
u intsmadion

uit *
Hat
aa apyhe
provide
au thu
g0louwed7
mubsu4
polic should
s
a do cwmnt
d O nplothin cmatan
Acceptabo Use
and prathies har
Pelicy:

mehogtk.
Coporate Poua:Tt idLnikis
Cenhidutial Data
Le o pa (nncluw
what ankeematinand ipecihei nelo mat
Conhielsvitiall be bandld.
dati oruld
peiy: En cption invelmeg
Enuphon
entoding dota Yo up inaccesible
poutes.
&An m Uiautnouzed
Tt outinns mls
to
:
SecuutYPeliuy
Netuook Aotook aCCes, ditemine
k Compuutu ae enfotces and lays
o pelicy
 u Aomu a the
empamy
basue achitectune
&euuity/ mnetroork smeit
h he
uviRonmoG
Poussweed Poucy: A mt seAusity
olenigmidd
by
do enhance. eGmpute An
ad enplo sionf
to emptoy
pamuoi
and eun aua.
:TE inolicates to whovn
Email Vouy emails vNAh be seut on
om homaud aligini what Constidutes
Ucuned Lw0k emas.
enent foi
appropAicate Alcuut
deviu Poioy: For paopel
Moli ike mobilu plonis

)
duices to huas
pasonal pAee eLpo
wuih helps ántz.
Via eUmpleyie-Ownd and
tolc Tt dipins auled
Data Balkup ome d data.
moki backup
po Ceduu fet
Yolic: It dinas
IT
(Tncidon Rispons
x
mi invutigah'on
in loutg
neles Qud Alsoonaibrlines luuit in
chluut
and Alspone Compute
Brach.
Rnol Data
louy: Physa geceityH td
16 Physical Sveuef hat AL leagnd
to muauiLs locatrns he asne,
and
pidtrer phyhial Contuined
Dned pe
inkeemattbn
wifhin.
Aievuky slwolues aound
h
Tntamatin
hu ky
enViRAnVleu,
principlis dupendiung
appli'atan,
uper
comtert eu
use us
Ca,one a hanpuinuiples
Hne ehus,
mugtt be.

mai impetanF
 DAsus Hu impoutawee agn
hm and an
Cenndauine

Hhe case
ganizatten
a ke inanial
dntemt mauktplac2s.

uuity auNou ausund he

Inkoumation
*ie kuy PAincipld-
O ConkdouhiatityTE
authorized
as
duu that only
peRdomhl al
aCles pelnishon
ginen
d modiby olat
tmaintain
Aalps
2Dntegtity: trro0utinLA q dara
ho
lot

Jhaving i n tu
HO * impope
toueetate
and iymmun
medk toction.
(3) Ayalabiut tmeaus Hhat He quthouiznd
o
aC tes»A
uLtes Anou be abl
oata whe nl. LAMiRRd.
is
Cenhiduutialu
inaunual 09enty,
Fepardmeut, JAk
so itweuld ckily
umc
enuyptF
tall
oloCumen- being &lactioi
Ony clasajied
to peveut unauthdized people0
Tlnsteud i (ontenla.
4uom aeaoiug

egauizahons uk iutemet
mkutpla ce!
TeL
ONailduty sparamont
ik heu
as
mitobik
my
wmla be,
weu ont
neaM bmaged el an eytended pRiod.go
com Aom
Jtiategies qat ensuung
{DLw enComcend
y aright ty onei aldu
awalai
datk4,
enupted
Toarram
ne Conkdontialit4, enuphiun and
centi0L al mauw meHnod&
mu
hat
Uaigus acces
axe oLoWid. COmpal
mutuods dependinga upon Hhe slursths
Contuel acebs conttsl
and waknessis aeah
m d.
Access Cenbtol (MAC)
Mand atoy

In a MAC enviaonmnt al access

Ums
Capanhes Out pledakinnd.
mless ui
Cant &narl intoimatibn
tt u estabished. byUahu
Aghts J0 shae ,adminkL
administnatoiL. Cense4menty
hat
nat eod.
mead
mmt makr any changs
tobe made tokuh.ughtz.
:.
Advauaga
lerel data pAotectism
Higu s
Cektialized inkonnat
Puuva
;
DAAadNantages Puocod
Carul Cetting-upPoqjuud
Regila Upåate
LickFlekilorty,

(2Dis caehionasy
Acces Contol ( DAC)

Ina DAC medul, Wis cLnAhaie

mtn
oRmatioN dmamicalln Go a
tin UUMA, TWe methoc Qtou
emven men, but in eiaus
mmoL 4aible oliscloue Q
hauthouized
Hh rink
JoRmotim.
Adnantages
>Ueifiudly
laibl
Headaehs Jet Adminishattom
>Les
 Disadwantages
secuu
Less sam
> Hard to keepkaik 2 data,

Rsle Band Acess Conttod CRBAC)

Abces Centtol based
0w
1E umplmun o Each
ob hunttionha4 onL o spmiliuly.
mO 18les haF
EmpioyeL H inkomai on.
aowocA APecafit
Aelu u mo lsnu
heacces foi peviois
ovailasle.
Aduantapes eRk ueny.
> TmpADsagains buu
innde tomation
Seeiuuty
lak aVin
Tme8to kupRecORd.
Halps

Complex
>
O
DrAodutautage
LaisPlJ eale
GpavnisOtinn
todel.
ManazinentAmiltd
Conbcol (RuBAC)
CRuBAC)
Based Acces
Rule
t AAs tha. duttinps n petho
JD maku diuions
Conkzurd
aLout

)
ALCty peliuès Con be 4etupz:
aCCe,'fhM lules
Den Ae who 4peeihcala
al buh allow access Lias
opplar
in aJiat (ah
uho speihita lly
Den only
Ll a
applar
Hhose
liur (a tiuu diuy Acces
 AtvanaeS
gimpe
Conaettnt
Manaeabe
RepotI
Detallnd
authow Juls an
bur olSLed.
Desadwantage
and adjuutaba Jeatw.
dan be
Unprducive simplu hat itE
ToD mueh
poteniay DWacked.
A ccess Canol (ABAC)
Atlbute -Based
atceM AOnel mewdrtogy
It is a legtal to perkom a set
wiun auukhomzatibn Bwaluecina
is odutetmined by
oDeRahons assouiated wih tu sulegelr,
attibutes SNA and, n
somL
o ec,en LeANMted dpeRati
Vikon mint ldeh
o
on agairs
ailtimtips
Cans,
peltcy,ules opiuth5n4
NLeut} heallowqbR
thar &lesCilë aattributeg
AoLa gven
xu
Actuanta
Tageted appAoan to LNty
Contol.
amicàtcesence implunula
Eany to scalo
Disodw0ngy
oimplementaud
Complicated
KA uinesa lo-t tne
 auL ha ponba damoges haF
OL Aalyze emesnu g hiaccess to
can bccu
a mebtle phenu. au-
dData
Poaible dalnages

Leakage Hotiu : data

ten
apps are.

Cau nintemhonall
Me
Jeakage. These
i
m hiual
aN tpiCally
but
ap
app
sozed alad send namu
0Und
9ound as ouetiáed, td
peom and /st colpOAate cdocta
ined b
peatnaa.
Remote seNer
nhi it s.O
and cybeçCimina
Odveun4eLs
W Fe wii metwotks
(2) Unsecuued Lwih cau
whih caw
Msecuund o
al wually lLadine
Cmpoi
intioduceVvulnuahruties
datr bunf
Led
peRsonal

(3) NehwoLk Lpo7fing

Tt : shuu
Aaukes
ui

t up gake.
dCCen poimd-Lsne
but au
ni mehvotks,
-AnaDit Puui
hat lok Rike
actualyUaps-
ng
locatio
Because amelele
(9) PhAing Attaiks D0eRd-OH
0L
oKr mOt
alwayH pove
hey LLattaek. Mstau urA ar
clovices Lines
the
phi Aline
+hu mail uU
6ftn noutdLihy

t
SPYsu :
slal-ine

un wtheu dees damaEto0u

atype malsau
yoe eNeX Realizir
mVonll
l
p-honi baetgound
ond
JUn
t weRs ntatwe
j0, Aealin/ qLoMm otbui altas
ies" m
an
honl
nownatfi .
 Cytogtapy: Baok CYptrg*opkt
Bxokn WAe
Can appein wien
heak eicyptin
app deNLopks
aldithm
gucisnn.
to
pMepe AMplnantAtoug occu
Sesaion Hand inp
( ImpeR wtent'smaly, malitous
hau sRiatw, m
nhen aPps maliuous alti
okuo,pxamp,
ri
o
tem impeldonatt ugtimate
allorrin
ghimate
O

was
QS HOw JD Meune mobih deenty, and
appodkk..
pivay_Uty stemahi-
Tusti? enau moili stuity
tv
C beat piaehices
nd puyay Cu. en.h hiaee
Make usl auheutiCochdwices ca
POut Motmdail
a saLn lock ano
wtn
loe locrd
unlocked
wit a
iormiti
pamuwotd,
Code.
01 PIN and appua-tions
mola llLoL
2Update OSthe can
pncd insta
Keepinp up to dare,
OPtatins
.
vulntlaiuhi
acddA
AJele. Auo aclaA
haLaU. and iety
:
adAiioma
additoma ueg
l

up 4
pesovane
(3)Bak up usu lata Lauking
veuti Ve dota
pteveuti
rad
a bostc methot
The ehcyetim
Utiize Jused a as
entption:
data aA
wel
stoRed

9eetu
nthe molau dOwtce
bh 6uen the
data tiaumusn
mersetk
) Enat
has

missaje
zunote data
thu devica.

Capaln ity naich

he
to
allsws
Aemotly
pe
mh ne
a
'
Incauawu
&ensiti data stolun,

faCtory
eecukkls.
ween mpt nudod
aese
and Wif
6Disablu Lutar and Wifi waa
bOM buutooh
Minimiznp do banine vulnuabiuide.
yporul
Arduce4
and autivimA
matall,mei
Cpputat
;
ons Sinte iuL
AReuty
kecuy
monb sec
mofn
mo additnal
dihaut cannus sahralard
and
Ond
ty

piotechn by
Cutivius kal-time
afpeucations
od
od
againsFmaliuOs
VXuns.
4u
(8) Be nol togRant nnlelau
APpLnsAOnA
peum0 to obplicatinA;
au uplirnlage&
akl to áCces
an ap has Liki keing
'ientatlust s Idkatinm.
EamuA,
Semi aitous ap may alrn Hs atceA
ws Compievmuiny fo peKATMAl
when
nonation.
wé Shmmd Le CaLehal qbAtnA
Henu,
acces Jo our petplunl.
aypkatio