2KKUU7ita

90
Part II: Putting Ethical Hacking in Motion
✓ Are safes used to protect backup media? Are they specifically rated for
media to keep backups from melting during a fire? Who can access the
safe?
Safes are often at great risk because of their size and value. Also, they
are typically unprotected by the organization’s regular security controls.
Are specific policies and technologies in place to help protect them? Are
locking laptop bags required? What about power-on passwords? Also,
consider encryption in case these devices get into a hacker’s hands.
✓ How easily can someone connect to a wireless access point (AP) signal
or the AP itself to join the network? Rogue access points are also something
to consider. I cover wireless networks in more detail in Chapter 9.
✓ Are network firewalls, routers, switches, and hubs (basically, anything
with an Ethernet connection) easily accessible, which would enable a
hacker to plug in to the network easily?
✓ Are all cables patched through on the patch panel in the wiring closet so
all network drops are live as in the case of the unmonitored lobby area I
mention earlier?
This set-up is very common but a bad idea because it allows anyone to
plug in to the network anywhere and gain access.
Countermeasures
Network and computer security countermeasures are some of the simplest
to implement yet the most difficult to enforce because they involve everyday
actions. Here’s a rundown of these countermeasures:
✓ Make your users aware of what to look out for so you have extra sets
of eyes and ears helping you out.
✓ Require users to lock their screens — which usually takes a few clicks
or keystrokes in Windows or UNIX — when they leave their computers.
✓ Ensure that strong passwords are used. I cover this topic in Chapter 7.
✓ Require laptop users to lock their systems to their desks with a locking
cable. This is especially important for remote workers and travelers
as well as in larger companies or locations that receive a lot of foot
traffic.
✓ Require all laptops to use whole disk encryption technologies, such as
a PGP Whole Disk Encryption product (www.symantec.com/wholedisk-encryption)
and WinMagic SecureDoc Full Disk Encryption (www.
winmagic.com/products/securedoc-full-disk-encryption).
✓ Keep computer rooms and wiring closets locked and monitor those
areas for wrongdoings.