Summary

Chapter 9: Fundamental Security 15Table 9-1PortPorts and ProtocolsProtocol20 File Transfer Protocol (FTP) data21 FTP25 Simple Mail Transfer Protocol (SMTP)53 Domain Name System (DNS)80 Hypertext Transfer Protocol (HTTP)Data BackupsYou should include data backup procedures in a security plan. Data can be lost or damagedin circumstances such as theft or equipment failure, or in a disaster, such as a fire or flood.Backing up data is one of the most effective ways of protecting against data loss. Here aresome considerations for data backups:■■■Frequency of backups: Backups can take a long time. Sometimes it is easier to makea full backup monthly or weekly and then do frequent partial backups of any data thathas changed since the last full backup. However, spreading the backups over manyrecordings increases the amount of time needed to restore the data.Storing backups: Backups should be transported to an approved offsite storage locationfor extra security. The current backup medium is transported to the offsite locationon a daily, weekly, or monthly rotation, as required by the local organization.Security of backups: Backups can be protected with passwords. These passwords haveto be entered before the data on the backup media can be restored.File System SecurityAll file systems keep track of resources, but only file systems with journals can log accessby user, date, and time. FAT32, which is used in some versions of the Windows file system,lacks both journaling and encryption capabilities. As a result, situations that require goodsecurity are usually deployed using a file system such as NTFS, which is part of Windows2000 and Windows XP. When increased file system security is needed, it is possible to runcertain utilities, such as CONVERT, to upgrade a FAT32 file system to NTFS. The conversionprocess is not reversible. It is important to define your goals clearly before making thetransition. Table 9-2 compares the FAT32 and NTFS file systems.