Home

Category Blog

Public Main Menu

CellStream Resources

CellStream Learning

CellStream Consulting

Example of Category Blog layout (FAQs/General category)

Do you have a Corporate Security Policy?

Written by Andrew Walding

Monday, 27 February 2012 20:44

CellStream, Inc.

Corporate Security Statement/Policy

PURPOSE

CellStream, Inc. is committed to meeting the Security requirements of the Telecommunications Industry to insure security of our customer information, our students, and our co-workers. To that end, we have adopted the following security policies.

OUR EMPLOYEES

This policy applies to all employees of CellStream, Inc. (CSI) and to all others given use of, or having access to, sensitive data.

This policy applies to sensitive data stored, processed and transmitted within or among any and all CSI information systems, whether individually controlled or shared, stand-alone or networked, and all computer systems and communication facilities owned, leased and operated by or on behalf of CSI. This includes, at minimum, networking devices, mainframes, workstations, personal computers, smart phones, telephones, wireless devices and any associated peripheral equipment and software.

OUR DOCUMENTS

CSI maintains a variety of documents in the course of conducting daily business. Some of these documents may contain sensitive data or references to information that could provide access to sensitive data. Access to these documents is explicitly restricted to a “need to know” basis, and all unauthorized access or sharing of restricted information may be met with disciplinary and/or legal action.

OUR NETWORK

Install and Maintain a Firewall Configuration to Protect Data

Use a firewall at each Internet connection point on the company network.

We maintain a firewall configuration that denies all traffic from nontrusted networks and hosts, except for those protocols necessary for the secure transmission of data;
We maintain a list of network services and ports required for business purposes;
We strictly control access to remote systems via username and password limitations.

We do not use Vendor-Supplied Defaults for System Passwords and Other Security Parameters

We prohibit the use of vendor-supplied default settings and remove unnecessary functionality supplied by vendors and prepackaged software solutions that could create a security vulnerability.

We always change vendor-supplied default settings before installing a system on the company network, including passwords, simple network management protocol (SNMP) community strings and deletion of unnecessary system accounts;
We remove any unnecessary functionality, such as features, scripts, drivers, file systems and unnecessary Web servers

OUR COMPUTERS

We encrypt Transmission of Data and Sensitive Information Across Public Networks

Transmission of data across open, public networks must be encrypted, including the use of e-mail encryption software by employees. Cryptography is to be applied as defined by the PCI DSS 1.2 Glossary.

We use and Regularly Update Anti-Virus Software

We use anti-virus software or programs and regular anti-virus signature updates, and document this use.

We currently prefer AVAST! but will regularly review what software is used and change if necessary
Installed anti-virus programs can detect and protect against other forms of malicious software (malware), including spyware and adware

We Restrict Access to Data to a Need-to-Know Basis

Access to all data must be restricted strictly on a need-to-know basis, limiting access to only those employees who must access the data to perform their job duties.

We install and maintain access controls that restrict computer user access to only those systems and resources required for performing their jobs.
We maintain access logs that show which employees had access to what data, and when, for all computer systems.

We Assign a Unique ID to Each Person With Computer Access

Each person with computer access MUST be assigned a unique account ID with a password known only to that individual.

Passwords must changeroutinely.
Passwords must be a minimum of 7 characters, containing numeric, alphabetic and special characters.
New passwords cannot be the same as previous passwords.
If a user tries to log in but is unsuccessful after six attempts, that user account must be automatically locked out for 30 minutes or until a system administrator is contacted to manually unlock the account.
We set a computer idle lock out time of 15 minutes and require a password to gain access to the computer again.
We remove any inactive accounts.
We keep a copy for six months of all employees with computer access.
We ensure that no shared accounts and passwords exist on any computer systems.

OUR DATA

We Protect Stored Data

Stored data must be protected from unauthorized use at all times.

We do not allow the display of personal account numbers in full; display of the first six and/or the last four digits is permissible.

OUR SERVICE PROVIDERS

We closely manage all third-party service providers and partners to ensure that all business conducted on CSI’s behalf is performed to our strict requirements and standards.

All new contracts are reviewed from a security perspective to ensure that services provided by third parties will be rendered in a compliant manner.
All existing contracts are reviewed at least annually and updated as needed to ensure that third-party services continue to meet requirements.
Where possible, we conduct an on-site inspection of any potential new third party or partner and document the state of secure data practices.

OUR SECURITY PROGRAM

We Regularly Test Security Systems and Processes

All CSI systems must be tested quarterly to ensure that security systems and processes are in place and performing as needed.

Develop and maintain a security-breach-response plan, and test the plan at least
Perform internal and external vulnerability scans of all systems connected to the cardholder data environment, per current requirements.
Ensure that all data is completely destroyed (degauss disks, shred paper) once the data or the medium that the data resides upon is no longer needed for clear business

We Maintain a Policy That Addresses Information Security

The CSI information security policy is to be reviewed and updated as needed at least annually by CSI management.

CSI will train all new employees on data security practices to a level appropriate for their job positions.
All employees will receive security awareness training at least annually, and all employees must sign this policy to indicate that the policy is understood and will be abided by.
When an employee moves to a new position within CSI, a review of the employee’s new role and what sensitive data access that the new role requires will be conducted. Access to sensitive data may be granted or revoked based on need-to-know basis according to the new job duties. A background check may also be required for a current employee moving from a role where no access to sensitive data was required to a role that necessitates access to sensitive data.

Add new comment

What commands can you run from the Windows Start> Run> CMD?

Written by Andrew Walding

Tuesday, 07 February 2012 22:01

Here is my quick list of commands you can run from the Windows Command Line: (START> RUN> CMD)

ADDUSERS Add or list users to/from a CSV file

ARP Address Resolution Protocol

ASSOC Change file extension associations

ASSOCIAT One step file association

AT Schedule a command to run at a later time

ATTRIB Change file attributes

BOOTCFG Edit Windows boot settings

BROWSTAT Get domain, browser and PDC info

CACLS Change file permissions

CALL Call one batch program from another

CD Change Directory – move to a specific Folder

CHANGE Change Terminal Server Session properties

CHKDSK Check Disk – check and repair disk problems

CHKNTFS Check the NTFS file system

CHOICE Accept keyboard input to a batch file

CIPHER Encrypt or Decrypt files/folders

CleanMgr Automated cleanup of Temp files, recycle bin

CLEARMEM Clear memory leaks

CLIP Copy STDIN to the Windows clipboard.

CLS Clear the screen

CLUSTER Windows Clustering

CMD Start a new CMD shell

COLOR Change colors of the CMD window

COMP Compare the contents of two files or sets of files

COMPACT Compress files or folders on an NTFS partition

COMPRESS Compress individual files on an NTFS partition

CON2PRT Connect or disconnect a Printer

CONVERT Convert a FAT drive to NTFS.

COPY Copy one or more files to another location

CSCcmd Client-side caching (Offline Files)

CSVDE Import or Export Active Directory data

DATE Display or set the date

Dcomcnfg DCOM Configuration Utility

DEFRAG Defragment hard drive

DEL Delete one or more files

DELPROF Delete NT user profiles

DELTREE Delete a folder and all subfolders

DevCon Device Manager Command Line Utility

DIR Display a list of files and folders

DIRUSE Display disk usage

DISKCOMP Compare the contents of two floppy disks

DISKCOPY Copy the contents of one floppy disk to another

DNSSTAT DNS Statistics

DOSKEY Edit command line, recall commands, and create macros

DSADD Add user (computer, group..) to active directory

DSQUERY List items in active directory

DSMOD Modify user (computer, group..) in active directory

ECHO Display message on screen

ENDLOCAL End localisation of environment changes in a batch file

ERASE Delete one or more files

EXIT Quit the CMD shell

EXPAND Uncompress files

EXTRACT Uncompress CAB files

FC Compare two files

FDISK Disk Format and partition

FIND Search for a text string in a file

FINDSTR Search for strings in files

FOR /F Loop command: against a set of files

FOR /F Loop command: against the results of another command

FOR Loop command: all options Files, Directory, List

FORFILES Batch process multiple files

FORMAT Format a disk

FREEDISK Check free disk space (in bytes)

FSUTIL File and Volume utilities

FTP File Transfer Protocol

FTYPE Display or modify file types used in file extension associations

GLOBAL Display membership of global groups

GOTO Direct a batch program to jump to a labelled line

HELP Online Help

HFNETCHK Network Security Hotfix Checker

IF Conditionally perform a command

IFMEMBER Is the current user in an NT Workgroup

IPCONFIG Configure IP

KILL Remove a program from memory

LABEL Edit a disk label

LOCAL Display membership of local groups

LOGEVENT Write text to the NT event viewer.

LOGOFF Log a user off

LOGTIME Log the date and time in a file

MAPISEND Send email from the command line

MEM Display memory usage

MD Create new folders

MKLINK Create a symbolic link (linkd)

MODE Configure a system device

MORE Display output, one screen at a time

MOUNTVOL Manage a volume mount point

MOVE Move files from one folder to another

MOVEUSER Move a user from one domain to another

MSG Send a message

MSIEXEC Microsoft Windows Installer

MSINFO Windows NT diagnostics

MSTSC Terminal Server Connection (Remote Desktop Protocol)

MUNGE Find and Replace text within file(s)

NETDOM Domain Manager

NETSH Configure network protocols

NETSVC Command-line Service Controller

NBTSTAT Display networking statistics (NetBIOS over TCP/IP)

NETSTAT Display networking statistics (TCP/IP)

NOW Display the current Date and Time

NSLOOKUP Name server lookup

NTBACKUP Backup folders to tape

NTRIGHTS Edit user account rights

PATH Display or set a search path for executable files

PATHPING Trace route plus network latency and packet loss

PAUSE Suspend processing of a batch file and display a message

PERMS Show permissions for a user

PERFMON Performance Monitor

PING Test a network connection

POPD Restore the previous value of the current directory saved by PUSHD

PORTQRY Display the status of ports and services

PRINT Print a text file

PRNCNFG Display, configure or rename a printer

PRNMNGR Add, delete, list printers set the default printer

PROMPT Change the command prompt

PsExec Execute process remotely

PsFile Show files opened remotely

PsGetSid Display the SID of a computer or a user

PsInfo List information about a system

PsKill Kill processes by name or process ID

PsList List detailed information about processes

PsLoggedOn Who’s logged on (locally or via resource sharing)

PsLogList Event log records

PsPasswd Change account password

PsService View and control services

PsShutdown Shutdown or reboot a computer

PsSuspend Suspend processes

PUSHD Save and then change the current directory

QGREP Search file(s) for lines that match a given pattern.

RASDIAL Manage RAS connections

RASPHONE Manage RAS connections

RECOVER Recover a damaged file from a defective disk.

REG Registry: Read, Set, Export, Delete keys and values

REGEDIT Import or export registry settings

REGSVR32 Register or unregister a DLL

REGINI Change Registry Permissions

REM Record comments (remarks) in a batch file

REN Rename a file or files.

REPLACE Replace or update one file with another

RD Delete folder(s)

RDISK Create a Recovery Disk

RMTSHARE Share a folder or a printer

ROBOCOPY Robust File and Folder Copy

ROUTE Manipulate network routing tables

RUNAS Execute a program under a different user account

RUNDLL32 Run a DLL command (add/remove print connections)

SC Service Control

SCHTASKS Create or Edit Scheduled Tasks

SCLIST Display NT Services

ScriptIt Control GUI applications

SET Display, set, or remove environment variables

SETLOCAL Control the visibility of environment variables

SETX Set environment variables permanently

SHARE List or edit a file share or print share

SHIFT Shift the position of replaceable parameters in a batch file

SHORTCUT Create a windows shortcut (.LNK file)

SHOWGRPS List the NT Workgroups a user has joined

SHOWMBRS List the Users who are members of a Workgroup

SHUTDOWN Shutdown the computer

SLEEP Wait for x seconds

SOON Schedule a command to run in the near future

SORT Sort input

START Start a separate window to run a specified program or command

SU Switch User

SUBINACL Edit file and folder Permissions, Ownership and Domain

SUBST Associate a path with a drive letter

SYSTEMINFO List system configuration

TASKLIST List running applications and services

TIME Display or set the system time

TIMEOUT Delay processing of a batch file

TITLE Set the window title for a CMD.EXE session

TOUCH Change file timestamps

TRACERT Trace route to a remote host

TREE Graphical display of folder structure

TYPE Display the contents of a text file

USRSTAT List domain usernames and last login

VER Display version information

VERIFY Verify that files have been saved

VOL Display a disk label

WHERE Locate and display files in a directory tree

WHOAMI Output the current UserName and domain

WINDIFF Compare the contents of two files or sets of files

WINMSD Windows system diagnostics

WINMSDP Windows system diagnostics II

WMIC WMI Commands

XCACLS Change file permissions

XCOPY Copy files and folders

Add new comment

How do I get Ubuntu to show interfaces in Wireshark?

Written by Andrew Walding

Wednesday, 07 September 2011 10:15

Ah - a common problem. Wireshark has installed and does not see any of the computer interfaces so you can do captures.

The answer to your problem is simple!

You need to give the Wireshark application root priviledges.

The best way to fix this (and any other application that needs root priviledges) is to change the way the program launches.

Right click on Applications
Now click on Edit Menus
Look in the Internet Tab and find Wireshark
Double click on Wireshark. The launcer applet will appear.
In the field labeled Command: add gksudo in front of wireshark:

Now try launching Wireshark again and all the Interfaces will be there!!

Add new comment

How fast is the Internet for the average user worldwide?

Written by Andrew Walding
Tuesday, 29 March 2011 22:03
This is a great question - and great news - there is an app for that!! Well, at least there is a web site. Based on millions of recent test results from Speedtest.net, there is an index that compares and ranks consumer download speeds around the globe. Also plotted is the value is the rolling mean throughput in Mbps over the past 30 days where the mean distance between the client and the server is less than 300 miles. The following screenshot is from the web site called Net Index by Ookla. Who has the fastest Internet? The US does not even make the top 10! Add new comment
Last Updated on Tuesday, 29 March 2011 22:15

Where can I find information on writing secure code?

Written by Andrew Walding

Tuesday, 04 January 2011 10:34

Great question received just before the holidays.

The security of software is paramount, especially in any communications systems (routers, switches, servers). We are all fimiliar with "patch Tuesdays" as efforts to thwart security holes in software are a constant.

Surprisingly, few Computer Science majors include skills on secure coding. Furthermore, policies and procedures to ensure secure coding practices may not even exist. Just look at the lacking entry at Wikipedia!

Thus, it is a sesitive area for all of us in the communications business.

There is a great site created by OWASP (Open Web Application Security Project) that attempts to document the appropriate Secure Coding Practices in the form of a wiki. This is a great starting point. Hundreds of Universities and Corporations are jumping on board.
The CERT team also has a page on Secure Coding.
There is an old site called Secure Coding.org that has a reference to a book and some other materials.

We hope that starts you off in the right place. If you have any additions you think we should make, please let us know.

Add new comment

More Articles...

«StartPrev1234Next End»

Page 1 of 4

Joomla! is Free Software released under the GNU/GPL License.

Public Main Menu

CellStream Resources

CellStream Learning

CellStream Consulting

CellStream, Inc.

Corporate Security Statement/Policy

We closely manage all third-party service providers and partners to ensure that all business conducted on CSI’s behalf is performed to our strict requirements and standards.

Login Form

Visitor Map

Testimonials