????t???? ?sf??e?a? ?????f???a??? S?st?

1
????t???? ?sf??e?a? ?????f???a??? S?st?µ?t??

• S????af?a? ?a??a ?a??da

2
St???? t?? d???e???

• ? d???e?? a?t? st??e?e? st?? ap??t?s? t?? e???
  e??t?µ?t??
• ?? e??a? ?? ????t???? ?sf??e?a? ?S ?a? ??a p?????
  ?????? t?? ??e?a??µaste
• ??? µp????µe ?a a?apt????µe µ?a ????t???
  ?sf??e?a? ?S ?a? t? ?a p??pe? ?a pe???aµß??e?
• ????? pa?????te? s?µß?????? st?? ap?te?esµat???
  efa?µ??? µ?a? ????t???? ?sf??e?a? ?S

3
??a?e???s? ?sf??e?a? ?S ??ad??as?e? ?a?
??a?t????

• ? ??a?e???s? t?? ?sf??e?a? ?S st??e?e? st??
  p??stas?a t?? ?S, pe????????ta? t??
  ep????d???t?ta se ap?de?t? ep?ped?. ?e???aµß??e?
  s???pt??? t?? a??????e? d?ad??as?e?
• ?p?t?µ?s? t?? ep????d???t?ta? ?a? p??sd????sµ?
  t?? ap?de?t?? ep?p?d?? ep????d???t?ta?
• ???pt??? ?a? efa?µ??? µ?a? ????t???? ?sf??e?a?
• ??µ??????a ?at??????? ???a??t???? p?a?s??? ?a?
  e?asf???s? t?? apa?t??µe??? p???? ??a t??
  efa?µ??? t?? ????t???? ?sf??e?a?
• ??pa?de?s?, e??µ???s? ?a? e?a?s??t?p???s? t??
  ???st?? t?? ?S

4
? ?????a t?? ????t???? ?sf??e?a? ?S

• ? ????t??? ?sf??e?a? t?? ?????f???a??? S?st?µ?t??
  pe???aµß??e? t? s??p? ?a? t??? st????? t??
  asf??e?a?, ?d???e?, d?ad??as?e?, ?a???e?, ??????
  ?a? ?pe?????t?te? p?? af????? t?? p??stas?a t??
  ?S t?? ???a??sµ??
• ? ????t??? ?sf??e?a? d?at?p??eta? se ??a ????af?,
  t? ?p??? ?a p??pe? ?a ????????? ?a? ?a efa?µ?????
  ???? ?? ???ste? t?? ?S

5
??t?a Asf??e?a? ?a? S??d?? ?sf??e?a?

• ?? ?d???e? ?a? ?? d?ad??as?e? p?? pe???aµß????ta?
  st?? ????t??? ?sf??e?a? ???p?????ta? µe t??
  efa?µ??? t?? µ?t??? p??stas?a? ? asf??e?a?
  (security measures, security controls)
• ? ????t??? ?sf??e?a? µa?? µe t? s????? t?? µ?t???
  p??stas?a? ap?te???? t? S??d?? ?sf??e?a?
  (Security Plan) ??a ta p????f???a?? s?st?µata
  e??? ???a??sµ??.

6
G?at? efa?µ????µe µ?a ????t??? ?sf??e?a? (1)

• ??at? ??e?a??µaste ??a s?st?µat??? ?a?
  ????????µ??? p?a?s?? p?? ?a ?a??d???se? t??
  ???p???s? t?? µ?t??? asf??e?a?
• ??at? ?e?t????e? ?? t? µ?s? ??a t?? ep????????a
  t?? eµp?e??µ???? sta ??t?µata asf??e?a? (???ste?,
  d?????s?, d?a?e???st?? s?st?µ?t?? ??p.)
• ??at? de d?a??t??µe ape?????st??? p????? (se
  ???µata, ?????, a????p??? d??aµ???)

7
G?at? efa?µ????µe µ?a ????t??? ?sf??e?a? (2)

• ??at? ?ts? ?eµe????eta? ? s?µas?a t?? asf??e?a?
  t?? ?S ??a ??a ta µ??? t?? ???a??sµ??
• ??at? s?µß???e? st? d?µ??????a ????t???a?
  asf??e?a?
• ??at? se ???sµ??e? pe??pt?se?? ap?te?e? ??µ???
  ?p?????s?
• ??at? ap?te?e? pa?????ta eµp?st?s???? st??
  s??se?? t?? ???a??sµ?? µe s??e??a??µe???? f??e??
  ?a? pe??te?

8
??d? ????t???? ?sf??e?a?

• ?e?????? ????t???? ?sf??e?a? (computer-oriented)
• ????t???? ?sf??e?a? ?????f?????
• ???p????? s???e???µ????? ?a???e? p??sßas?? sta
  ded?µ??a, ?p?? d?a???t? ??e??? p??sp??as??
  (Discretionary Access Control) ? ?p???e?t???
  ??e??? p??sp??as?? (Mandatory Access Control).
• ????t???? ?sf??e?a? ?e?t???????? S?st?µ?t??
• ????t???? ?sf??e?a? ???t??? ?p?????st??
• ???a??s?a??? ????t???? ?sf??e?a? (human-oriented)
  
• ????t???? ?sf??e?a? ?????f???a??? S?st?µ?t??

9
???f?? ????t???? ?sf??e?a? ?S (1)

• ?t?µ???? ????t???? ?sf??e?a? (individual security
  policies) ??? s?st?µa ? efa?µ??? (p.?. ????t???
  ?sf??e?a? ??a t? ???s? t?? e-mail)
• ?p?spasµat??? d?a?e???s? t?? asf??e?a? ?S, µe????
  p???p????t?ta st? s??t???s? t?? p???t????
• ?p?te?esµat???? ?ta? ?p?????? a?t???µe? efa?µ????
  ?a? ?p?????st??? s?st?µata p?? de s??d???ta?
  µeta?? t???

10
???f?? ????t???? ?sf??e?a? ?S (2)

• ??a??t???? ????t???? ?sf??e?a? (Comprehensive
  Security Policies)
• ???a?? ????af? p?? a?af??eta? se ??a ta
  ?p?????st??? s?st?µata, t?? efa?µ???? ?a? t??
  d?ad??as?e? t?? ?S
• ???a? µe???e? se ????, ??? p??? e????ste?
• ?? ?d???e? ?a? d?ad??as?e? p?? pe???aµß????ta?
  e??a? se ?e???? ep?ped?, ????? ?ept?µ??e?e?
• ?????t?? ????t???? ?sf??e?a? (Modular Security
  Policies)
• ???a?? ????af? µe pa?a?t?µata p?? pe?????f??? t??
  ep?µ????? p???t????
• ?p??e? ?a e??a? se µ??f? ?pe??e?µ???? (hypertext)

11
????? ?pa?t?se?? ?sf??e?a?

• ?? apa?t?se?? ??a t?? asf??e?a t?? ?S p?? p??pe?
  ?a ??a??p??e? ? ????t??? ?sf??e?a? p???????ta?
  ap? ????? t??? eµp?e??µe???? st? ???s? ?a?
  ?e?t?????a t?? ?S e??? ???a??sµ??, ?p?? e??a?
• ?? ???ste? ?a? d?a?e???st?? t?? ?S
• ? d?????s? t?? ???a??sµ??
• ?? pe??te? t?? ???a??sµ??
• ?? ??µ???? ?a? ?a????st???? d?at??e?? p?? d??p???
  t? ?e?t?????a t??

12
???pt??? ????t???? ?sf??e?a? (1)

• G?a ?a d?aµ??f?s??µe µ?a ????t??? ?sf??e?a? ?S
  p??pe? ?a a???????s??µe, ?ata????, t? ep?ped?
  t?? asf??e??? t??. G?a t? s??p? a?t?, µp????µe ?a
  ???s?µ?p???s??µe
• ?e??d??? ?????s?? ?p????d???t?ta? (p.?. OCTAVE,
  CRAMM )
• ???t?pa d?a?e???s?? t?? asf??e?a? t?? ?S (p.?.
  ISO27001, ISO 17799, GMITS)

13
???pt??? ????t???? ?sf??e?a? (2)

• ? ????t??? ?sf??e?a? ?S p?? a?apt?ss??µe ?a
  p??pe? ?a pe???aµß??e? apa?t?se?? sta a??????a
  e??t?µata
• ????? e??a? ? s??p?? ?a? p???? ?? st???? t??
  ????t????
• ???a e??a? ta a?a?? (µ???) t?? ?S p?? ??e?????ta?
  p??stas?a
• ????? e??a? ?? ?pe?????? ??a t?? p??stas?a t??
  a?a??? a?t?? ?a? p??e? e??a? ?? a?µ?d??t?t??
  t???
• ???? e??a? t? e???? ?a? p??a ta ???a efa?µ????
  t??
• ??? ?a ???eta? ? ??e???? t?? efa?µ???? t??
• ???a e??a? ta ??????? p?a?s?a p?? ?s??e? ?
  ????t???

14
?e??e??µe?? ????t???? ?sf??e?a? ?S

• ?? ?d???e? ?a? ta µ?t?a p??stas?a? p?? ?a?????e?
  ? p???t??? asf??e?a? ?S ?a p??pe? ?a ?a??pt???
  t?? a??????e? ?at?????e? apa?t?se?? asf??e?a?
• ??t?µata ???s?p????
• F?s??? ?sf??e?a
• ??e???? ???sßas?? st? ?S
• ??a?e???s? ?????? ?a? ????sµ????
• ??µ???? ?p???e?se??
• ??a?e???s? t?? ????t???? ?sf??e?a?
• ???a??t??? ??µ?
• S??d?? S?????s?? ?e?t?????a?

15
?e??e??µe?? ????t???? ?sf??e?a? ?S (1) ??t?µata
???s?p????

• St???? t?? ?d????? ?a? t?? µ?t??? asf??e?a? p??
  a?????? se a?t? t?? ?at?????a e??a? ? µe??s? t??
  ep????d???t?ta? p?? ?fe??eta? se a????p??a ????,
  ap?t?, ???p? ? ?at????s? t?? p???? t?? ?S.
  ??af????ta? ?????? se
• ?????? ?a? ?pe?????t?te? ??a t?? p??stas?a t??
  a?a??? t?? ?S
• ??ad??as?e? ep?????? ???? p??s?p????
• ??pa?de?s? ?a? e??µ???s? t?? ???st??
• ??t?µet?p?s? ?a? a?af??? pe??stat???? pa?aß?as??
  t?? asf??e?a?

16
?e??e??µe?? ????t???? ?sf??e?a? ?S (2) F?s???
?sf??e?a

• ?a µ?t?a p?? ?p?st??????? t? f?s??? asf??e?a
  ????? ?? ????? st??? t?? ap?t??p? t?? µ?
  e???s??d?t?µ???? p??sßas?? st??? ?????? t?? ?S
  ?a? t?? ?atast??f?? t?? a?a??? t??. ??af????ta?
  ?????? se
• ??e??? f?s???? p??sßas?? se ???s?µ??? ??????
  (p.?. Server room)
• ???stas?a t?? ??e?a? t?? ???st?? (safety)

17
?e??e??µe?? ????t???? ?sf??e?a? ?S (3) ??e????
???sßas??

• ? p??sßas? t?? ???st?? t?? ?S st?? p????f???e?,
  ta ?p?????st??? s?st?µata ?a? t?? efa?µ???? ?a
  p??pe? ?a ?a?????eta? µe ß?s? t?? ep??e???µat????
  a????e? ?a? t?? apa?t?se?? asf??e?a?.
• S???? efa?µ??eta? ? a??? need to know ??a t??
  ap???µ? d??a??µat?? p??sßas?? st??? ???ste?.

18
?e??e??µe?? ????t???? ?sf??e?a? ?S (4)
??a?e???s? ?????? ?a? ????sµ????

• ???µ??e?a ?a? S??t???s? ??????
• ?? ?d???e? a?t?? st??e???? st? d?at???s? t??
  ep???µ?t?? ep?p?d?? asf??e?a?, p??sd???????ta?
  t?? d?ad??as?e? ??a t?? a???? ?a? t? s??t???s?
  t?? ?????? (p.?. apa?t?s? p??µ??e?a?
  p?st?p???µ???? p?????t??)
• ???pt??? ?a? S??t???s? ????sµ????
• ?? ?d???e? p?? pe???aµß????ta? p??pe? ?a
  ?a??pt??? t?? a??????e? pe??pt?se??
• ????? ?t??µ?? p?????t?? (pa??t?? ????sµ????) ap?
  e??te?????? p??µ??e?t??
• ???pt??? ?a? s??t???s? ????sµ???? ap? a?ad?????
• ?s?te???? a??pt??? ?a? s??t???s? t?? efa?µ????

19
?e??e??µe?? ????t???? ?sf??e?a? ?S (5) ??µ????
?pa?t?se??

• S?µµ??f?s? µe t? ??µ??? ?a? ?a????st??? p?a?s??,
  ?p??
• ? ??µ?? 2472 t?? 1997 ??a t?? ???stas?a t??
  at?µ?? ap? t?? epe?e??as?a ded?µ???? p??s?p????
  ?a?a?t??a.
• ?? ??µ?? ??a t?? p??stas?a t?? p?e?µat????
  d??a??µ?t??
• ?? ap?f?se?? t?? ??e???t?t?? ??????t???? ?????,
  ?p?? ? ???? ???stas?a? ?ed?µ???? ???s?p????
  ?a?a?t??a, ? ?????? ?p?t??p? ???ep??????????, ?
  ???? ??asf???s?? t?? ?p????t?? t?? ?p??????????

20
?e??e??µe?? ????t???? ?sf??e?a? ?S (6)
??ad??as?e? ??a?e???s?? t?? ????t???? ?sf??e?a?

• ? ????t??? ?sf??e?a? ?a p??pe? ?a p??sd?????e?
  ?a? t?? apa?t??µe?e? d?ast????t?te? ??a t??
  efa?µ??? t??, p?? af?????
• ??? a???????s? ?a? a?a?e???s? t?? ????t????
• ??? ??e??? efa?µ???? t?? ?a? t?? ?a????sµ? t??
  e?e??e??? p?? p??ß??p??ta? st?? pe??pt?se?? µ?
  t???s?? t?? ap? t??? ???ste?

21
?e??e??µe?? ????t???? ?sf??e?a? ?S (7)
???a??t??? ??µ?

• G?a ?a efa?µ?ste? ? ????t??? ?sf??e?a? ?a p??pe?
  ?a ?p???e? ? a?t?st???? ???a??t??? ?a? d?????t???
  d?µ?
• ??µ??????a t?? ?at??????? ????? ?a? ?ata??µ?
  ?pe?????t?t?? (p.?. ?pe?????? ?sf??e?a?)
• ??µ??????a d?ad??as??? ??a t?? e?t?p?sµ? ?a? t??
  a?af??? pe??stat???? pa?aß?as?? t?? asf??e?a?

22
?e??e??µe?? ????t???? ?sf??e?a? ?S (8) S??d??
S?????s?? ?e?t?????a?

• ??d??? st?? pe??pt?se?? ???s?µ?? ?S, ? ????t???
  ?sf??e?a? p??pe? ?a pe???aµß??e? ?d???e? p??
  af????? t?? apa?t??µe?e? e????e?e? µet? t??
  p?a?µat?p???s? e??? s?µa?t???? pe??stat????
  pa?aß?as?? t?? asf??e?a?, ?ste ?? ?e?t?????e? t??
  ???a??sµ?? ?a e?a???????s??? ?a p?a?µat?p?????ta?
  µe ??p????? e?a??a?t????? t??p???, ??? ?t??
  a?t?µet?p?ste? t? p??ß??µa asf??e?a? t?? ?S (p.?.
  ?a ?p???e? efed???? Site).

23
?a?a?t???st??? ????t???? ?sf??e?a? ?S (1)

• ?ta? a?apt?ss??µe µ?a ????t??? ?sf??e?a?,
  ep?d?????µe ta a??????a
• ?? ?d???e? ?a? ta µ?t?a p??stas?a? ?a ?a??pt???
  t? s????? t?? a?a??? t?? ?S ?a? ??e? t??
  ?e?t?????e? t?? (p????t?ta)
• ?a ??ß??µe ?p??? t? s??????? te???????a ?a? t??
  d?afa???µe?e? e?e???e?? (ep??a???t?ta)
• ?e ??p??e? t??p?p???se?? ? p??s???e? ?a µp??e? ?
  ????t??? ?a ?a??pte? µ????? a??a??? ? epe?t?se??
  st? ?S (?e???e?s?µ?t?ta)

24
?a?a?t???st??? ????t???? ?sf??e?a? ?S (2)

• ?a? p??pe? ?a ?aµß????µe ?p??? ?t?
• ? ????t??? ?sf??e?a? ape????eta? st? s????? t??
  µe??? t?? ???a??sµ??, ?a? ?a p??pe? ?a e??a?
  e????a ?ata???t? ap? ????? (saf??e?a ?a? e?????a
  ?ata???s??)
• ? pe????af? t?? µ?t??? asf??e?a? de ?a p??pe? ?a
  desµe?e? t?? ???a??sµ? se s???e???µ??a p?????ta
  ?a? te???????e? (te????????? a?e?a?t?s?a)
• ?? apa?t?se?? asf??e?a? p??pe? ?a ?a??pt??? t??
  a????e? t?? s???e???µ???? ???a??sµ??
  (?ata?????t?ta)
• ta µ?t?a p??stas?a? ?a p??pe? ?a µp????? ?a
  efa?µ?st??? ????? ?a d?s?e?a????? d?sa?????a t??
  d?ast????t?te? t?? ???st?? t?? ?S (efa?µ?s?µ?t?ta)

25
??aµ??f?s? ????t???? ?sf??e?a? ?S ???se???se??

• ??????a µe t?? ???a??sµ? ?a? t? ?S ??a t? ?p???
  a?apt?ss??µe µ?a ????t??? ?sf??e?a?, µp????µe ?a
  a???????s??µe
• ??? p??s????s? t?? ?p???e?t???? efa?µ????
• ep?t?ept?? e????e?e? ?e?????ta? µ??? e?e??e? p??
  p??ß??p??ta? ?a? p??d?a???f??ta? st?? ????t???
  ?sf??e?a?
• ??? p??s????s? t?? d?a???t?? e??????
• ??e? ?? e????e?e? p?? de? pe???aµß????ta? st??
  apa???e?µ??e? ?e?????ta? ep?t?ept?? ?a? s?µf??e?
  µe t?? p???t???
• ??? p??s????s? t?? ?at? pe??pt?s? efa?µ????
• ?? ?d???e? asf??e?a? t?? ????t???? ?e?????ta?
  ?p???e?t????, ?p???e? ?µ?? ? d??at?t?ta ?a
  pa?a?aµf???? ?at? pe??pt?s?

26
?fa?µ??? ????t???? ?sf??e?a? ?S ?a?????te?
?p?t???a? (1)

• ??a ????t??? ?sf??e?a? ?S ep?t?????e? ?a??te?a
  t??? st????? t?? ?ta?
• ?p?st????e? t??? ep??e???µat????? st????? t??
  ???a??sµ??
• ? a??te?? d?????s? t?? ???a??sµ?? ?p?st????e? ?a?
  s?µµet??e? e?e??? st?? efa?µ??? t??
• e??a? ?at?????? ??a t? s???e???µ??? pe??ß?????
  ?p?? efa?µ??eta? (???a??s?a?? ????t???a)
• ?? ???ste? e?pa?de???ta? ?a? e??µe?????ta?
  ?at?????a

27
?fa?µ??? ????t???? ?sf??e?a? ?S ?a?????te?
?p?t???a? (2)

• ?a? ?ta?
• ?p?????? d?ad??as?e? a???????s?? t??
  ap?te?esµat???t?t?? t??, ?ste ?a a?a?e??e?ta?
  a?a?????
• efa?µ??eta? stad?a??, a?????a µe t? ßa?µ? t??
  a??a??? p?? ep?f??e? ? efa?µ??? t?? ????t????
  st?? d?ast????t?te? t?? ???st??
• ????? e????? ?a? ?µes? p??sßas? se a?t?? ???? ??
  ???ste? t?? ?S

28
??a?e???s? t?? ????t???? ?sf??e?a? ?S

• ?? pe??e??µe?? ?a? ?? d?ad??as?e? efa?µ???? t??
  ????t???? ?sf??e?a? ?a p??pe? ?a a?a?e?????ta?
• Se ta?t??? ??????? d?ast?µata (?a?t????
  a?a?e???se??)
• ?pe?ta ap? s?µa?t??? pe??stat??? pa?aß?as?? t??
  asf??e?a?, ??s??de?? a??a??? st? ????? ? t?
  ????sµ???, ep??tas? ? d?as??des? t?? ?S µe ???a
  s?st?µata (??ta?te? a?a?e???se??)

29
S?????

• H ????t??? ?sf??e?a? ?S ap?te?e? t? ßas???
  e??a?e?? ??a t? d?a?e???s? t?? asf??e?a? t?? ?S
• ? a??pt??? µ?a? ????t???? apa?te? t?? ?ata??af?,
  se ??a ????af?, t?? ßas???? st???? t?? asf??e?a?,
  µa?? µe t??? t??p??? ?a? ta µ?sa ep?te???? t??
  st???? a?t??
• ?? pe??e??µe??, ? µ??f? ?a? ? t??p?? efa?µ????
  µ?a? ????t???? µp??e? ?a d?af???p??????? a?????a
  µe t?? ???a??sµ? ?a? t? ?S
• ? ap?te?esµat??? efa?µ??? t?? e?a?t?ta?, µeta??
  ?????, ap? t?? ?p?st????? ?a? s?µµet??? t??
  d?????s??, t? stad?a?? efa?µ??? ?a? t? s?µß???
  t?? ????t???? st?? ep?te??? t?? st???? t??
  ???a??sµ??