Windows security implementation for NextGard Technologies network

Window Security Implementation

Scenario

NextGard Technologies specializes in the network consulting services for small, medium and large organizations inside and outside the United States. Currently, NextGard has approximately 250,000 employees in 5 countries and the company corporate headquarter is located at Phoenix, AZ. However, the company decides to secure and upgrade its current network to enhance organization efficiencies. Currently, the company has 5 district offices at the following locations:

New York City, New York,

Atlanta, Georgia,

Los Angeles, California,

Montreal, Canada,

Bangalore, India.

At the district offices, employees have a combination of mobile computers, desktops computers, and wireless devices. Moreover, the company has the mix of computers operating with the Window 7, Window Vista, Window XP and Window 2000. The company also has Window Active Directory located at the Phoenix office and the Phoenix office has two proxy servers to provide Internet access control and Web cache services for the company since majority of the company applications are web based.

Project Objective

Objective of this project is to upgrade and secure the company current network to enhance organizational efficiencies. However, it is critical to design appropriate access control for the Microsoft Windows to enhance their effective security system.

Appropriate Microsoft Windows Access Controls

Vulnerabilities and security holes in Microsoft software programs are common target of security attacks. However, many attacks are focused on the Microsoft Windows due to their wide use by many organizations. (Smith, 2000).Based on wide vulnerabilities against Microsoft Windows, NextGard is required to take preventive measures and set up the following Window Access Control policies:

First, the NextGard should improve its access control using auto-checking to search for passwords that are more complex for the company IT administrator. Typically, the company should formulate policies to ensure that the administrator uses a very complex and strong password to log into his or her administrative account. The use of a strong password is very critical to deter unauthorized access into the company network account. It is very critical for the company administrator to always use a very strong password that unauthorized individuals will find challenging to crack. Moreover, the company should use SmartCards to securely store personal information and enhance authentication. (Mike, 2008).

Additionally, NextGard should make a policy to ensure that all employees are to use the company computers for only the business communication, and all employees must communicate solely with the company emails and the communication should be strictly based on the NextGard business operations.

Cryptography Methods to protect the Company Information

Cryptography policy is the strategy to protect company information through encryption. NextGard needs to develop a cryptographic policy to enhance integrity, confidentiality, and authenticity of the company information. Cryptographic method involves the use of digital signature encoded by the asymmetric cryptography or public key. As part of the security policy, the company should include digital signature with document transferred electronically whether the document is encrypted or not. To decrypt the digital signature, a user should verify the public key using a secured private key of the document sender. However, the company should employ key management to make both the public key and private key highly confidential.

Data encryption should also be established to protect the company information. Encryption is the strategy by which all data within the organization are converted into unreadable form and only authorized users with decrypted key can only convert the data into a readable form. This strategy will assist the NextGard from preventing unauthorized access to the company data. The encryption system will protect all the company data from an unauthorized access because external intruders will not be able to read the data since they do not have access to the decrypted key. (Bruce, 2005). The company should also use the cryptographic system to protect the data transferred electronically from one computer to the other since an intruder could hijack the company data from the network system using strategy such as eavesdropping and sniffing. Thus, the company should use the cryptographic strategy to protect the company data in transit using the encryption form. However, the company needs to keep the decrypted keys very confidential, and under no circumstances should the decrypted key communicated to third parties or unauthorized individuals.

Method to Thwart Malicious Code and Activity

Trojan horse is the malicious program, which looks like a normal program, however, hides malicious code to gain access into confidential information through remote access. Similarly, viruses manipulate a legitimate user by bypassing access control and authentication to spread malicious code. Virus can infect system and damage network system. Similarly, worms are self-replicating program that create series of problems to the affected systems. Logic bombs are the piece of codes intentionally inserted into a software program to trigger malicious code. A programmer could intentionally plant a logic bomb to trigger malicious applications.

NextGard needs to design strategies to implement countermeasures against viruses, logic bombs, worms, and Trojan horses. One of the effective measures against virus is to install antivirus onto all computer systems. An antivirus packages such as AVAST has ability to detect email attachment that contains virus. Typically, worms, and Trojan horse are spread when a user downloads a mail attachment that contains Trojan horse or worms. Thus, the company should provide an IT training for all its employees to possess skills to identify an attachment that contains Trojan horse or worms. Typically, all employees should only download attachments from the company or trusted emails. Moreover, the company should install spam filter program in all computers to filter out all unwelcome emails. Typically, most attachments containing worms, Trojan horse and virus are found in the Spam box. Thus, the company should install anti-spam software that will filter out all the unwanted emails. Moreover, the company should develop a policy to scan all the computer system twice in a week with a powerful antivirus package. The company should only install a trusted application package into the computer system to avoid a logic bomb being planted into the company Microsoft Windows.

6. Best Practices for the Window Security of NextGard's Organization

NextGard is required to design comprehensive Microsoft security policies, which all the company employees should follow. It is critical to realize that strict respect of the company policies is the best strategy to enhance effective security of the company Window system. The company should organize training programs for all the IT and non-IT employees to ensure that all employees follow strictly the company IT policies. Moreover, the company should design enforcement policies to ensure that all employees who do not follow the company rules are punished.

Apart from the Window security policies that the company implements, the NextGard should also employ physical security policies to deter unauthorized access into the company IT department, and other department that may hold sensitive information. Moreover, the NextGard should display banners to display security information and remind all employees that they are obliged to protect the company information from unauthorized access. The banner should also remind employees about their security responsibilities. Using these strategies, the company should be able to protect its Window system from holes and vulnerabilities. (Popa, 2013).

Vulnerabilities of the Microsoft Windows are on the increase because the many organizations use the Microsoft Windows as their operating systems. Despite the wider use of the Microsoft Windows, the systems are still at risks of vulnerabilities. NextGard Technologies is currently envisaging upgrading and providing security to its Microsoft Windows. The proposal provides several Window security guidelines that the company should follow to enhance effective Window security. The paper identifies effective security policies that the employees should follow to prevent vulnerabilities into the company computer systems. The paper also suggests the use of cryptographic method using encryption and digital signature as effective Window security system. The paper also suggests the use of antivirus program against security threats such as virus, Trojan horse, and worms. More important, the proposal suggests the use of firewall to prevent an unauthorized traffic into the company network system.

The paper recommends that the company should carry out effective training program for both experienced and inexperienced employees. Moreover, the company should implement Microsoft Window audit using external IT expert to detect unauthorized access to the company information systems.

Reference

Bruce, S.(2005). Crypto-Gram Newsletter. Counterpane Internet Security, Inc.

Mike, N. ( 2008). Windows 7 Unveiled Today at PDC 2008. Windows Team Blog. Microsoft.

Popa, B. (2013). Windows 8.1 Build 9600 Compiled, RTM Still on Its Way." Softpedia. SoftNews.

Scarfone, K. & Hoffman, P. (2009). Guidelines on Firewalls and Firewall Policy. National Institute of Standards and Technology .

Smith, R.F. (2000).Protecting the NT Security Log, Windows IT Pro.