Posts Tagged Data Security

Types Of Data Security

Data security refers to a set of standards, protocols, and techniques that are focused on protecting personal or organizational data from intentional or accidental destruction, modification, and disclosure. Different technologies and techniques can be applied to ensure data security. These techniques include administrative controls, physical security, logical controls, organizational standards, etc.

In order to choose the right data security protocols, it is important to understand different types of data security.

Authentication: It is the process of validating a registered user’s identity before allowing access to protected data. It is used in conjunction with authorization; the process of validating that the authenticated user has been granted permission to access the requested resources. Authentication involves a combination of ways to identify a user, such as passwords, PINS, security tokens, a swipe card, or biometrics.

Access Control: Authentication and authorization happen through access control. It is a method of guaranteeing that users are whom they say they are and that they have the appropriate access. Access control systems can include-

  • Discretionary Access Control (DAC) assigns access rights based on user-specified rules.
  • Mandatory Access Control (MAC) assigns user access based on information clearance.
  • Role Based Access Control (RBAC) grants user access based on the user’s role and implements key security principles such as ‘least privilege’ and ‘separation of privilege’.
  • Attribute Based Access Control (ABAC) assigns a series of attributes to each resource and user. The user’s attributes such as time of day, position, location, etc. are assessed to make a decision on access to the resource.

Backups & Recovery: An efficient data security strategy requires a plan for how to access the organization’s data in the event of system failure, disaster, data corruption, or data breach. This puts an emphasis on regular data backups. It involves making a copy of the data and storing it off-site or in the cloud. Also, it is important to formulate proper recovery protocols.

Encryption: Data encryption involves the translation of data into another form, or code so that it is accessible only by the authorized personnel who have the decryption key. However, it is highly important to ensure the security of decryption keys, critical management systems, and off-site encryption backup.

Data Masking: This type of data security involves the masking of original data by obscuring letters or numbers with proxy characters. The data is changed back to its original form by software only when it is received by an authorized user.

Tokenization: In this case, sensitive data is substituted with random characters that cannot be reversed. The relationship between data and its token values is stored in a protected database lookup table.

For more information on types of data security, contact Centex Technologies at (254) 213 – 4740.

, , , , ,

No Comments

5G & Data Security

PDF Version: 5G-and-Data-Security

, , ,

No Comments

Ways To Verify Data Breaches

A data breach is an incident where a hacker gains access to a database that contains the user’s personal details such as login information, financial details, Social Security Number, address, PHI, etc. In the case of an organization, a data breach can result in revealing of trade secrets and other critical business information. Once stolen, this information is then sold on the dark web to cyber criminals who use it for their profit.

The damage caused by a data breach can be minimized if it is detected in time. Here are some ways to verify a data breach:

  • Online Tools: A number of online tools are available to help users in verifying if their email account has been breached. Another way of verifying a data breach is via a data breach database. A data breach database such as HIBP (created by Troy Hunt, a Microsoft regional director, and MVP) contains a list of compromised email accounts and passwords. Users can search these databases for their email to see if their email and password are among the compromised lists.
  • Updated Browsers: Using an updated browser that has special features can help users in knowing if their password has been compromised. Browsers such as Chrome 79 include ‘Password Checkup Feature’. When a user enters a password, the feature warns the user if the password has been compromised without the need of saving the password.
  • Unauthorized Activity: Regularly check your accounts for any unauthorized activity in your account. Keep an eye on your sent emails. If you notice any emails sent to anonymous accounts, this indicates that your email account has been hacked. In case of any social media account, make a note of any unusual posts, messages, etc. Any unauthorized activity indicates a data breach including username and password.

Whilst these methods may be helpful, there is no bulletproof method of verifying a data breach. An ideal way of approach is to employ stringent data protection strategies. Some of the most efficient personal data protection strategies include access controls on the network, use of automated backup system, equip the data storage center with a protective suit, robust monitoring & reporting, and use of a secure password.

For more information on ways to verify data breaches, contact Centex Technologies at (254) 213 – 4740.

, , , ,

No Comments

Data Protection From Malicious VPN Apps

Web users intend to use VPN services with an assumption that VPN keeps their web browsing and personal data safe. However, recent research has thrown light on some vulnerabilities found in common and popular VPN apps.

These vulnerabilities include:

  • Missing encryption of sensitive data.
  • Hard-coded cryptographic keys within the app; thus, even if the data is encrypted, hackers can decrypt it using these keys.
  • Some VPN apps have user privacy breaking bugs such as DNS leaks which expose user DNS queries to their ISPs.

These vulnerabilities of VPN apps allow hackers to intercept user communications including web browsing history, username, passwords, photos, videos, and messages. The privacy breaches include location tracking, access to device status information, use of the camera, microphone access and ability to send SMS secretly. Using these vulnerabilities, hackers can manipulate the users to connect to their malicious VPN servers.

In addition to these vulnerabilities, there are some other concerns associated with free VPN apps:

  • Some free VPN apps sell your bandwidth to paying customers allowing them to use your device’s processing power.
  • Malicious VPN apps incorporate ads that may include malware. These apps may also share the online activity of users to third party marketing professionals.

Some signs that your phone has been affected by malware are:

  • Phone becomes slow.
  • Higher loading time of app.
  • Battery drains faster than usual.
  • Large number of pop-up ads.
  • Unexplainable data usage.

As the number of data breaches is exceeding, it has become important to take necessary measures for safeguarding yourself against malicious VPN apps. Following are some measures that you should take:

  • Check if you have sufficient information about the app developer. Download the VPN apps provided by trusted app developers only.
  • Check the app reviews. You can also search for the app on the search engine to check if there is any controversial news about it.
  • Audit the apps on your phone to check if they were downloaded by you or not.
    Delete apps that you don’t use frequently.
  • Run a malware scan after downloading any app to ensure it is safe.

For more information on ways to protect your data from malicious VPN apps, contact Centex Technologies at (254) 213 – 4740.

, , , , ,

No Comments

Points To Consider While Securing MSPs

PDF Version: Points-To-Consider-While-Securing-MSPs

, , ,

No Comments