Security Operations Chapter 11 Part 2 Pages 1262 to 1279

Data Leakage Data Breaches – Target, Anthem – Costs Investigation, penalties and fines, credit reporting, reputation Inappropriate removal of information – Insecure home computer so employee can work at home – Theft of a laptop

Data Leakage Security awareness training – Employees know that security is part of their job. Employees using latest computer technology – BYOD – USB drives

Network and Resource Availability Redundant hardware for “hot swapping” Fault-tolerant technologies Service level agreements Solid operational procedures to maintain availability

MTBF/ MTTR MTBF - Mean time between failures – Either based on historical data or scientifically estimated by vendors. – Higher MTBF usually has a higher price. MTTR – time to get device fixed and back into production – Replacing a failed drive – If MTTR is too high for critical devices, then redundancy should be used.

RAID Redundant array of independent disks. Figure on page 1269 If a drive fails, the parity is used to rebuild the lost drive. Most RAID systems have hot-swapping, which means they can replace a drive while the system is running. Table 11-2 on page 1270

MAID Massive Array of Inactive Disks Medium-scale storage arena up to several terabytes of data. All inactive disks are powered down with only the disk controller active When an application asks for data, the controller powers the appropriate disk drive(s) and transfers the data.

RAIT Redundant Array of Independent Tapes For very large writ-mostly storage applications Similar to RAID but uses tapes

SAN Storage Area Networks Large amount of storage devices linked together by a high-speed private network SAN software finds the file Provides redundancy, fault tolerance, reliability, and backups For large companies with lots of data

Clustering Cluster = group of servers that are viewed logically as one server to users and can be managed as a logical system. If one of the server fails, processing continues because the rest can pick up the load. All are used. None sit idle waiting for something to faile.

HSM Hierarchical Storage Management Figure 11-3 on page 1275 Faster media hold data accessed most often Can save money

Contingency Planning When an incident strikes, detailed procedures to keep critical systems available. On site, in a fireproof safe, offsite location Tested by exercises For small incidents such as power outage or disk failure BCP for disasters

Mainframes Expensive engineering means highly reliable and high software quality Designed for massive I/O Vast amount of processors, I/O processors, network processors Mainframes often perform batch processing