Security+ Certification/Application, Data and Host Security

Application, Data and Host SecurityEdit

Explain the importance of application securityEdit

  • Fuzzing
  • Secure coding concepts
    • Error and exception handling
    • Input validation
  • Cross-site scripting prevention
  • Cross-site Request Forgery (XSRF) prevention
  • Application configuration baseline (proper settings)
  • Application hardening
  • Application patch management

Carry out appropriate procedures to establish host securityEdit

  • Operating system security and settings
  • Anti-malware
    • Anti-virus
    • Anti-spam
    • Anti-spyware
    • Pop-up blockers
    • Host-based firewalls
  • Patch management
  • Hardware security
    • Cable locks
    • Safe
    • Locking cabinets
  • Host software baselining
  • Mobile devices
    • Screen lock
    • Strong password
    • Device encryption
    • Remote wipe/sanitation
    • Voice encryption
    • GPS tracking
  • Virtualization

Explain the importance of data securityEdit

  • Data Loss Prevention (DLP)
  • Data encryption
    • Full disk
    • Database
    • Individual files
    • Removable media
    • Mobile devices
  • Hardware based encryption devices
    • TPM
    • HSM
    • USB encryption
    • Hard drive
  • Cloud computing
Last modified on 11 April 2012, at 13:00