CompTIA® Security+® SY0-501 Review Guide by James Michael Stewart

Author:James Michael Stewart [Stewart, James Michael]
Language: eng
Format: epub
ISBN: 9781119416937
Published: 2017-12-06T14:30:00+00:00

The real issue is that software isn’t trusted. Software (services, applications, components, and protocols) is written by people, and therefore, in all likelihood, it isn’t perfect. But even if software lacked bugs, errors, oversights, mistakes, and so on, it would still represent a security risk. Software that is working as expected can often be exploited by a malicious entity. Therefore, every instance of software deployed onto a computer system represents a collection of additional vulnerability points that may be exposed to external, untrusted, and possibly malicious entities.

From this perspective, you should understand that all nonessential software elements should be removed from a system before it’s deployed on a network, especially if that network has Internet connectivity. But how do you know what is essential and what isn’t? Here is a basic methodology:

Plan the purpose of the system.

Identify the services, applications, and protocols needed to support that purpose. Make sure these are installed on the system.

Identify the services, applications, and protocols that are already present on the system. Remove all that aren’t needed.

Download

Copyright Disclaimer:
This site does not store any files on its server. We only index and link to content provided by other sites. Please contact the content providers to delete copyright contents if any and email us, we'll remove relevant links or contents immediately.