How to Implement Encryption & Security in Information Systems
Security in a computer is vital to the protection of the information it contains. Information systems can be servers or desktop machines with private information. Security on the machine and the network prevents hackers and thieves from retrieving private information. Encryption jumbles the data communicated over the Internet or on the network, so theft of the data stream leaves the hacker with unintelligible information. Combining these two security measures protects private data, reducing the chance of identity theft or the loss of sensitive information.
Other People Are Reading
Instructions
-
-
1
Add passwords to any shared drive or resource. This includes passwords when logging into workstations or servers, and limiting access to directories. Only allow access to users who are a part of the domain, and restrict the access for the local machine account.
-
2
Use encryption on outgoing data such as email. Encryption can be implemented at the server level, or you can purchases a copy of PGP, which is a software that encrypts files, emails and other documents. PGP encrypts data using a key generated on the machine. Users are given a public key to decrypt the information upon receipt. PGP integrates well into email clients like Outlook.
-
-
3
Implement a proxy server for outgoing Internet connections. A proxy server allows you to filter and funnel all outgoing Internet connections. This blocks access to sites that pose a risk to the information system security. It also allows you to monitor Internet usage.
-
4
Use encryption on wireless connections. Wireless routers have several options for connectivity. If data is not encrypted, the data packets sent over the airways can be hijacked by anyone within range of the signal. The two main wireless encryption options are WPA and WEP. WEP has been found to be less secure than WPA, so set wireless routers to WPA encryption.
-
5
Use routers that provide firewall capabilities. A firewall is a software application that runs on a router. It blocks incoming communication from anonymous Internet users while allowing internal workstations to access the Internet. For the best security, set your router to block all incoming requests on the router.
-
1
