Foundations of Security What Every Programmer Needs to Know | Neil Daswani, Christoph Kern, Anita Kesavan
Physically securing your system and laying down good policies for employees and users is often just as important as using the technological security mechanisms that we cover in this book. All of your servers should be behind locked doors, and only a privileged set of employees (typically system and security administrators) should have access to them. In addition, data centers used to house farms of servers can employ cameras, card reader and biometric locks, and even “vaults” of various kinds, depending upon the sensitivity of data stored on the servers. In addition to mechanisms that limit access to a physical space to prevent asset theft and unauthorized entry, there are also mechanisms that protect against information leakage and document theft. Documents containing sensitive information can be shredded before they’re disposed of so that determined hackers can be prevented from gathering sensitive information by sifting through the company’s garbage. Such an attack is often referred to as dumpster diving.
0 nhận xét:
Đăng nhận xét