|
|
| Planning Network Security for e-Business |
It is vital to develop an applicable network for your business. The structure and system should be scalable, as the business expands, so the network.
All networks contain resources and information on which users depend on. An interruption of network service, slow down or loss of service can be costly. A network security plan protects data and minimizes down-time resulting from natural hazards and human interventions. The security plan should address the following areas:
- Passwords and password maintenance
- Access privilege management
- Encryption
- Power protection
- System and data backups
- System fault tolerance and redundancy
- Firewalls
- Virus monitoring
- Disaster recovery
Setting Passwords
Passwords are a critical defense against intrusions. All network accounts should have a password that is changed on a regular schedule. Accounts such as the NT Server Administrator account should have a long password that is difficult to guess and that is changed every 30 to 60 days. A Guest account on computers running Windows NT Server or Workstation should be checked to make sure it is disabled or has a password, and permission should be applied to control access to files and folders.
| Permission |
Access |
Description |
Applies to:
|
No Access
|
None |
No access to the directory for any users other than the owner
|
Folders and files
|
| List |
Read and execute files
|
Can list files in the directory or switch to a subdirectory but cannot access file contents
|
Folders only
|
| Read |
Read and execute files
|
For existing and new files, can read their contents and execute program files
|
Folders and files
|
| Add |
Write and execute files
|
Can write new files in the directory and execute program files but cannot modify file contents
|
Folders only
|
Add & Read
|
Read, write and execute files
|
Can read files, add new files and execute program files but cannot modify file contents
|
Folders only
|
| Change |
Read, write, execute, and delete files
|
Can read, add, delete, execute, and modify files
|
Folders and files
|
Full Control
|
All directory and file permissions
|
Can read, add, delete, execute, and modify files, plus change permissions and take ownership of directories
|
Folders and files
|
Thanks and Best Regards,
R.C.Sukhtankar |
|