Upload
ratih-gustifa
View
218
Download
0
Embed Size (px)
Citation preview
8/16/2019 0.Protecting Doc
1/31
Document Security- how to protect your data -
M.S. MANGGALANNY – DEPUTY NETWORK OPERATION ANDSECURITY
8/16/2019 0.Protecting Doc
2/31
CLASSIFICATION
8/16/2019 0.Protecting Doc
3/31
Mi&it'ry
Top Secret (TS)( RED. m'teri'& )ou&* c'u+e ,exceptionallygrave damage, -irrecoer'/&e0 to n'tion'& +ecurity i1 m'*e2u/&ic&y
Secret (S)( A!ER. m'teri'& )ou&* c'u+e ,grave damage,-m'++ie0 to n'tion'& +ecurity i1 it )ere 2u/&ic&y ''i&'/&e
Con"dential (C)( #ELLO$. m'teri'& )ou&* c'u+e ,damage, o
/e ,pre%&dicial, to n'tion'& +ecurity i1 2u/&ic&y ''i&'/&e
Re'tricted (R)( REEN. m'teri'& )ou&* c'u+e ,&nde'iralee*ect', -irrecoer'/&e0 i1 2u/&ic&y ''i&'/&e
+ncla''i"ed (+)( $,ITE. u+e* 1or *ocument+ t3't *o not 3'e' c&'++i4c'tion &i+te* '/oe 'n* +ometime+ c'n /e ie)e* /yt3o+e )it3out +ecurity c&e'r'nce
8/16/2019 0.Protecting Doc
4/31
L'/e&in6
!&'ine'' 'ector7 Pu/&ic( Sen+itie( Pri'te( Con4*enti'&(Unc&'++i4e*
overnment 'ector7 Unc&'++i4e*( Sen+itie( Re+tricte*(Con4*enti'&( Secret( To2 Secret
In cro++8+ectori'& 1orm'tion+( t3e Tr'9c Li63t Protoco&( con+i+t+o17 $-ite( reen( Amer 'n* Red
Se2'r'tion7 /y cla''i"cation 'n* di'clo'&re policy
Se6re6'tion7 /y p-y'ical 'eparation 'n* acce'' policy
$or.'-op7 *i+cu++ 'n* *e4ne your in1orm'tion &'/e&c&'++i4c'tion+:
8/16/2019 0.Protecting Doc
5/31
/OLIC#
8/16/2019 0.Protecting Doc
6/31
Acce++ Contro&
Non8*i+cretion'ry '22ro'c3 con+o&i*'te+ '&& 'cce++ contro& un*e' centr'&i;e* '*mini+tr'tion i.e. +in6&e +i6n on -SSO0 '22&ic'tion
U+u'&&y /'+e* on in*ii*u'&+ 1unction -ro&e0 )it3in t3eor6'ni;'tion 2o&icy or 'n in*ii*u'& t'+
8/16/2019 0.Protecting Doc
7/31
Aut3entic'tion
5 ty2e+ o1 'ut3entic'tion in1orm'tion i+ +omet3in67
#o& .no07 PIN( 2'++)or*( mot3er=+ m'i*en n'me
#o& -ave7 *rier=+ &icen+e or ' m'6netic +)i2e c'r*
#o& are7 2'&m"4n6er 2rint+( oice( retin' -eye0 +c'n+
Stron6 'ut3entic'tion re>uire+ 2roi*in6 in1orm'tion 1rom 't &e'
"5 *i?erent ty2e+ o1 'ut3entic'tion( 1or e@'m2&e( 'omet-ingyo& .no0 2&u+ 'omet-ing yo& -ave( it+ c'&&e* t0o 1actora&t-entication
Proce*ure+ +3ou&* '22&ie* 't 'ny &ee& 'n* 'u*ite* 2erio*ic'&&y
8/16/2019 0.Protecting Doc
8/31
Aut3ori;'tion
A1ter ' 2er+on( 2ro6r'm( com2uter 3'+ +ucce++1u&&y /eeni*enti4e* 'n* 'ut3entic'te* t3en it mu+t /e *etermine* )3'tin1orm'tion'& re+ource+ 2ermitte* to 'cce++ 'n* )3't 'ction+ )i/e '&&o)e* to 2er1orm -1or e@'m2&e7 run( ie)( cre'te( *e&ete( orc3'n6e0
Aut3ori;'tion to 'cce++ /e6in+ )it3 '*mini+tr'tie 2o&icie+ 'n*
2roce*ure+. It 2re+cri/e )3't c'n /e 'cce++e*( /y )3om( 'n*un*er )3't con*ition+ -inc&u*in6 oerri*in6 2roce*ure+0
Acce++ contro& mec3'ni+m+ t3en con46ure* to en1orce 2o&icie+
S3ou&* /e m'int'ine* 'n* 'u*ite* 2erio*ic'&&y
$or.'-op7 i*enti1y )3ic3 +erice+ nee* 'n AAA 'n* SSOB
8/16/2019 0.Protecting Doc
9/31
ANAEENT
8/16/2019 0.Protecting Doc
10/31
O2er'tin6 Sy+tem
A&& mo*ern OS 3'+ 4&e 'n* *irectory &ee& 2rotection7
A&)'y+ u+e ri63t m'n'6ement +erice
De4ne 'n* u+e u+er 'cce++ ri63t 2o&icy
Em2&oy 4&e( *irectory 'n* 4&e +y+tem encry2tion
U+e '22&ic'tion &ee& 2rotection i.e. 4&e 'n* com2re++ion
2'++)or* Some or6'ni;'tion re>uire* termin'&"*eice &ee& o1 'cce++
2o&icy7
Aut3entic'tion contro&7 4n6er 2rint( retin'( 2'++)or*"PIN
F'r* *rie 2rotection7 com2re++e* )it3 2'++)or*"PIN 'n* encry2te*)it3 Pu/&ic Key In1r'+tructure -PKI0. O1ten nee* +econ* 'ut3ori;'tion)it3 One Time P'++)or* -OTP0
8/16/2019 0.Protecting Doc
11/31
Com2uter O2er'tion
U+e u2*'te* &e6'& O2er'tin6 Sy+tem -OS0 'n* '22+
U2*'te* &e6'& Anti Hiru+"M'&)'re"ire)'&& i+ ' mu+t
Perio*ic'&&y u2*'te*( c&e'nin6 '22+ tr'+3( /'c
8/16/2019 0.Protecting Doc
12/31
Wor
8/16/2019 0.Protecting Doc
13/31
J'c
8/16/2019 0.Protecting Doc
14/31
Di+2o+'& 'n* S'nit'tion
Em2&oy +tron6 *i+2o+'& 2o&icy 'n* 2roce*ure+ in 'ny &ee& o1 'ctiity
A&& 23y+ic'& co2y in 'ny me*i' mu+t 3'e e@2ir'tion *'te( *i+c&o+ure&imit'tion 'n* 3'+ to /e 23y+ic'&&y +3re**e*"'rc3ie* in 'ave va<
A&& *i6it'& *'t' mu+t /e compre''ed 'n* pa''0ord protected 'n*encrypted )it3 'tronge't algorit-m ''i&'/&e /e1ore it i+ '-redde)it3 t3e mo't 'op-i'ticated *i6it'& 'ec&re 0ipe mec3'ni+m i.e. 5!2'++ NSA or DOD +t'n*'r* in or*er to com2&ete&y +'niti;e t3e *'t'
Any 2ort'/&e 'n* mo/i&ity *i6it'& *eice+ mu+t /e returne* to t3e o9c/e1ore 2er+onne& &e'e 'n*"or retirement. Inc&u*in6 +to&en( ne)*eice"e@c3'n6e*( etc. mu+t /e re2orte* to t3e 'ut3ority
Acce++ 'n* &imit'tion 1or Jrin6 Your O)n Deice+ -JYOD0 i++ue+
$or.'-op7 Do you nee* JYOD contro& 'n* 3o) to m'n'6e itB
8/16/2019 0.Protecting Doc
15/31
Port'/&e Deice+
P'++)or* 2rotecte* 'ny o1 your re)rit'/&e 2ort'/&e *eice+ -'+*i+
8/16/2019 0.Protecting Doc
16/31
/ROTECTION
8/16/2019 0.Protecting Doc
17/31
Cry2to6r'23y7 T3eory
M'n*'tory 2rotection to tr'n+1orm u+'/&e in1orm'tion into ' 1ormt3't ren*er+ it unu+'/&e /y 'nyone ot3er t3'n 'n 'ut3ori;e*u+er t3i+ 2roce++ i+ c'&&e* encry2tion
In1orm'tion encry2te* -ren*ere* unu+'/&e0 c'n /e tr'n+1orme*/'c< /y 'ut3ori;e* u+er( )3o 2o++e++e+ t3e cry2to6r'23ic
8/16/2019 0.Protecting Doc
18/31
Cry2to6r'23y7 Wor
8/16/2019 0.Protecting Doc
19/31
P'++)or*7 M'n'6ement
C3'n6e 2'++)or* 2erio*ic'&&y( more o1ten /etter 'n* neer +3'r2'++)or* to 'ny/o*y 1or 'ny re'+on+
Lon6er com2&ic'te* com/in'tion i+ more +tron6er. Not e'+y toremem/er"ree'&. Un2re*icte* 23r'+e
Kee2 in +'1e +ecret 2&'ce+. No/o*yQ+ )i&& eer
8/16/2019 0.Protecting Doc
20/31
P'++)or*7 Wor
8/16/2019 0.Protecting Doc
21/31
ACTI3IT#
8/16/2019 0.Protecting Doc
22/31
Pu/&ic Acce++
M'uic< iru+ 'n* m'&)'re +c'nnin6 c3ec<)it3 your o)n tru+te* 'n* +ecure 2rotecte* portale tool'
Je)'re o1 3i'c
8/16/2019 0.Protecting Doc
23/31
Secure Tr'n+mittin6
Neer tru+t )ire&e++ tr'n+mi++ion7 J&uetoot3( DLNA( Wi8i( Ce&&u&'r I1 you 3'e to 6o )ire&e++( m'
8/16/2019 0.Protecting Doc
24/31
Wire&e++ Acce++
A&)'y+ '+< Wire&e++ SSIDQ+ 'n* neer tru+t Free $IFI Acce'''&i
8/16/2019 0.Protecting Doc
25/31
U+in6 Em'i&
A&)'y+ u+e 2&'in te@t not ric3 te@t -FTML( MIME etc.0 Turn o? 'uto o2en 4&e+ -'tt'c3ment( FTML0 mo*e 'n* '&)'y+ u+
&'te+t 'n* u2*'te* em'i& 'nti iru+"SPAM
Neer tru+t 'ny 'tt'c3ment 4&e+( +c'n it( '&)'y+ '+< con4rm'tio1rom t3e +en*er /e1ore you o2en it
A&)'y+ u+e em'i& c&ient 't o)n tru+te* com2uter or u+e 2ort'/&e
em'i& c&ient )it3 2ort'/&e *eice
U+e PKI -i.e. GPG0 to m'
8/16/2019 0.Protecting Doc
26/31
Me++'6in6
U+e &'te+t mo+t +ecure u2*'te* me++'6in6 '22+ 'n* neer+2re'* ID to ot3er+ 2eer+ t3't youQre not tru+t
Neer tru+t un
8/16/2019 0.Protecting Doc
27/31
W3i&e Sur4n6
U+e on&y FTTPS( c3ec< '&i*ity o1 CA No +cri2t( no 2o2 u2( re'* /e1ore c&ic
8/16/2019 0.Protecting Doc
28/31
Tr'n+'ction
Neer u+e un+ecure*"2u/&ic 'cce++ termin'&. I1 you +3ou&* m'
8/16/2019 0.Protecting Doc
29/31
Soci'& Net)or<
Neer '** unue+tion+ me++'6e to+u+2ecte* 'ccount 1or 2rec'ution 'n* i*enti4c'tion
Je con+er'tie. Limitin6 2ri'cy e@2o+ure( *eci*e 3o) muc3 to+3're. Not eery/o*y nee*+ your+
Neer u+e 1ree m'i&. U+e 2ri'te *om'in 'n* em'i& '**re++e+ or
cor2or'te 'ccount -i1 itQ+ '&&o)e*0 I1 +omet3in6 3'22en+( re2ort to '*min( /ro'*c'+t '&ert to '&& o1
your 1rien*+( 3o2e you 3'e /'c
8/16/2019 0.Protecting Doc
30/31
ATM 'n* SMS
Kno)in6 &'te+t u2*'te* tec3no&o6y 'n* 2roce*ure+ toun*er+t'n* )e'
8/16/2019 0.Protecting Doc
31/31
T3'n< You:
ID4SIRTII5CC RAHINDO To)er $t3 &oor
KEJON SIRIF RAYA !
Centr'& '