2010 Security Resolutions

Many people create New Year’s resolutions to motivate themselves to improve on something. Let’s do the same thing for the security of our IT environment. My advice for security would be to keep it simple and remember that security is a process, not an end-point. Everything we do that raises our bar a little higher and makes it more difficult for bad things to happen – whether it’s malicious or unintentional – is a good thing. Here are two resolutions that you should follow to make your environment more secure.

Defense in depth: I know that’s a catchy phrase that you see in many places but it’s a great way to think about security. The opposite, to state the obvious, is a single point of failure. If you have only one way to protect a resource, any time that protection is either compromised or disabled, you are going to be vulnerable. Just like this list, I like to keep things simple. List out three, four, or five things that you care most about protecting in your environment. Do you have at least two ways (three ways?) that each of those resources is protected? If not, take the initiative to add one layer to each one.

In almost all cases, the best protection is an actual mechanism (technology) that enforces the policies you have defined. It’s good to have a policy that states how passwords will be handled, it’s better to have a mechanism that enforces it. If you can add a mechanism to raise the bar on one of those 3-5 resources you just listed, do it. If not, then at least add some type of process or policy that helps you. For example, if a Web application you have is not instrumented to log security exploits (i.e., create an alarm if somebody is injecting cross site scripting text or trying some type of command injection), then create an automated process (script) that periodically reviews the Web logs to look for those events and create an email or some type of event for somebody to follow up on. Don’t be afraid to use simple techniques that make a big difference in either preventing or detecting when things are not going well.

Controlling Network Traffic: I want more people to accept the fact that they need to be just as concerned about what goes “out” of their network as they are about what comes “in.” Almost every organization has spent a lot of time thinking about how they want their routers, gateways, or firewalls setup to filter, forward, route, or block incoming traffic. Unfortunately, most of these same organizations have not spent a lot of time thinking about how to address outgoing traffic. Often, they will allow most if not all traffic “out” to ensure they don’t introduce access issues for people inside the boundaries of these devices.

In a nutshell, most viruses, Trojans, and worms succeed because of this situation! Most of these kinds of problems depend on the ability to get around to other systems near them (because people tend to trust systems on the inside) and then to propagate themselves to other systems and networks. This often succeeds because trust levels are too high within a particular network segment and outbound traffic isn’t managed very well.

A good starting point for defining rules for your outgoing traffic is to start with the same rules you just setup for incoming traffic and adjust only for those ports, services, or protocols that are absolutely essential. Not only will this help to thwart “infections” you do incur on the inside of your perimeter, it will help to minimize unwanted traffic and save more bandwidth for production and work oriented services.

45 replies
  1. tinyurl.com
    tinyurl.com says:

    I truly love your website.. Very nice colors & theme.

    Did you build this web site yourself? Please reply back as I’m wanting to create my very
    own site and would like to know where you got this from or exactly what the theme is named.
    Appreciate it!

  2. http://tinyurl.com/tcvpate
    http://tinyurl.com/tcvpate says:

    Good day! This is kind of off topic but I need some advice from an established blog.

    Is it difficult to set up your own blog? I’m not very techincal but I can figure things out pretty fast.
    I’m thinking about creating my own but I’m not sure where to begin. Do
    you have any ideas or suggestions? Cheers

  3. plenty of fish dating site
    plenty of fish dating site says:

    Superb website you have here but I was curious if you knew of any message boards that cover the same topics
    talked about in this article? I’d really like to be a part of community where I
    can get comments from other knowledgeable people that
    share the same interest. If you have any suggestions, please
    let me know. Bless you!

  4. ps4 games
    ps4 games says:

    Oh my goodness! Amazing article dude! Many thanks,
    However I am encountering difficulties with your RSS.
    I don’t understand why I cannot subscribe to it. Is there anyone else
    having identical RSS problems? Anyone who knows the answer can you kindly respond?

  5. quest bars cheap
    quest bars cheap says:

    I have been surfing online more than 3 hours lately, yet I
    never discovered any fascinating article like yours.
    It’s beautiful worth enough for me. In my view, if
    all site owners and bloggers made just right content as you did, the
    web will be much more helpful than ever before.

  6. quest bars cheap
    quest bars cheap says:

    Yesterday, while I was at work, my cousin stole my iPad and
    tested to see if it can survive a forty foot drop, just so she can be a youtube sensation. My
    iPad is now broken and she has 83 views. I know this is totally off topic but I had to share it with someone!

  7. quest bars cheap coupon twitter
    quest bars cheap coupon twitter says:

    Hi! I could have sworn I’ve been to this web site before but after browsing through a few of the posts I realized it’s new to me.
    Anyways, I’m definitely delighted I discovered it and I’ll be book-marking it and checking back frequently!

  8. quest bars cheap
    quest bars cheap says:

    Wow, marvelous blog layout! How lengthy have you been running a blog for?
    you made blogging glance easy. The full look of your web
    site is excellent, let alone the content!

  9. ps4 games
    ps4 games says:

    Aw, this was a very good post. Taking a few minutes and actual effort to make a good article… but what can I say… I
    hesitate a lot and don’t seem to get nearly anything done.

  10. ps4 games
    ps4 games says:

    I believe this is among the so much important information for me.

    And i’m satisfied reading your article. However should observation on few general things, The site taste is great, the articles is really great :
    D. Good task, cheers

  11. ps4 games
    ps4 games says:

    Thank you for the good writeup. It in fact was a amusement account it.
    Look advanced to more added agreeable from you! However, how could we

  12. quest bars cheap
    quest bars cheap says:

    Thanks on your marvelous posting! I genuinely enjoyed reading it, you might be a great author.I will be sure to bookmark your blog and will eventually come back later
    in life. I want to encourage continue your great posts,
    have a nice afternoon!

  13. ps4 games
    ps4 games says:

    Pretty section of content. I just stumbled upon your
    weblog and in accession capital to assert that I acquire actually enjoyed account your blog
    posts. Anyway I’ll be subscribing to your augment and even I achievement you access consistently

  14. ps4 games
    ps4 games says:

    obviously like your web site however you have to check the spelling on quite a few of
    your posts. Several of them are rife with spelling problems
    and I find it very bothersome to tell the truth then again I’ll certainly
    come again again.

  15. ps4 games
    ps4 games says:

    Nice post. I was checking constantly this blog and I’m
    impressed! Very helpful information specially
    the last part 🙂 I care for such information much. I was seeking this certain information for
    a long time. Thank you and best of luck.

  16. coconut oil
    coconut oil says:

    I do not even know how I finished up right here, but I assumed this
    put up was great. I don’t understand who you might be but certainly you are going to a
    well-known blogger if you happen to are not already. Cheers!

  17. match.com free trial
    match.com free trial says:

    Wow that was unusual. I just wrote an incredibly long comment but after I clicked submit my comment
    didn’t show up. Grrrr… well I’m not writing all that over again. Regardless, just wanted
    to say superb blog!

  18. plenty of fish vs match.com free trial
    plenty of fish vs match.com free trial says:

    I was wondering if you ever considered changing the structure of
    your blog? Its very well written; I love what youve got to say.
    But maybe you could a little more in the way of content so people could
    connect with it better. Youve got an awful lot of text for only having one or two images.
    Maybe you could space it out better?

  19. sling tv
    sling tv says:

    I have read some just right stuff here. Definitely price bookmarking for revisiting.
    I surprise how a lot attempt you set to make any such
    great informative website.

  20. sling tv
    sling tv says:

    Awesome issues here. I’m very satisfied to look your article.
    Thanks so much and I’m taking a look forward to contact you.
    Will you kindly drop me a e-mail?

  21. sling tv
    sling tv says:

    Wow, marvelous blog layout! How long have you been blogging for?
    you made blogging look easy. The overall look of your website is magnificent, as well as the content!

  22. sling tv
    sling tv says:

    I’m impressed, I must say. Rarely do I come across a blog that’s both equally educative and engaging,
    and without a doubt, you have hit the nail on the head. The problem is something that too few folks are speaking intelligently about.
    Now i’m very happy I came across this in my search for something regarding this.

  23. sling tv
    sling tv says:

    Hi it’s me, I am also visiting this website regularly,
    this website is really fastidious and the people are
    actually sharing pleasant thoughts.

  24. sling tv
    sling tv says:

    whoah this weblog is great i like studying your posts.
    Stay up the good work! You recognize, many individuals are searching round for this info, you could
    aid them greatly.

  25. sling tv best package 2020
    sling tv best package 2020 says:

    Greetings from Florida! I’m bored to death at work so I decided to browse your blog
    on my iphone during lunch break. I really like the information you provide
    here and can’t wait to take a look when I get home.
    I’m amazed at how quick your blog loaded on my mobile .. I’m not even using WIFI, just
    3G .. Anyhow, superb site!

  26. dog app
    dog app says:

    I just couldn’t depart your web site before suggesting
    that I extremely loved the standard info an individual supply on your visitors?
    Is gonna be back continuously in order to check up on new

Leave a Reply

Want to join the discussion?
Feel free to contribute!

Leave a Reply

Your email address will not be published.