Posted by arlene

Data repositories include many types of storage systems that are interlinked in systems for maintenance and protection of data. It is important to discuss the need for protection and hardening of the various types of storage that are maintained. This includes different storage media combinations, methods of connection to the information, consideration of the access implications and configurations, and maintenance of the integrity of the data. When considering tightening and securing the data repository area, file services such as those detailed earlier in the file and print arena and also the Network Attached Storage (NAS) and Storage Area Network (SAN) requirements must be considered.

NAS and SAN configurations may present special challenges to hardening. For example, some NAS configurations used in a local area network (LAN) environment may have different file system access protections in place that will not interoperate with the host network’s OS and NOS. In this case, a server OS is not responsible for the permissions assigned to the data access, which may make configuration of access or integration of the access rules more complex. SAN configuration allows for intercommunication between the devices that are being used for the SAN, and thus freedom from much of the normal network traffic in the LAN, providing faster access. However, extra effort is initially required to create adequate access controls to limit unauthorized contact with the data it is processing.

While discussing data repositories, administrators also need to examine a concept called Directory Enabled Networks (DEN). DEN is a model developed by Microsoft and Cisco to centralize control and management of an entire network, rather than just controlling users and group assignments. It is currently controlled and developed by the Distributed Management Task Force (DMTF), and can be viewed by visiting www.dmtf.org/standards/wbem/den. DEN utilizes the capabilities of various data repository structures and directory services structures to provide a more centralized management and control function for entire networks. By definition, it is a centralized repository for information about networks, applications, and users. For example, when networks were first being constructed and used, it was normal to have a network that contained only one hundred or so computers and users. However, the last decade has seen an explosion of network use and capability, which has led to management problems and high administrative costs. DEN networks, with much refinement, have allowed the development of integrated management solutions and control into the directory services being used. Currently, many hardware vendors and OS and NOS vendors have designed solutions integrating their management capabilities into the directory service in use. For example, Novell has introduced eDirectory services, which are cross-platform capable, and Microsoft has introduced Active Directory. Both of these, and others, allow administrators to integrate control of network services into the directory service arena. This includes the development of services such as Dynamic DNS (and the integration of zone files into the directory for security enhancement and control) and DHCP rogue server detection. Additionally, it allows the delivery of centralized policies for remote access, port, and interface controls, and router and switch configurations from a central repository.

Possibly related posts: (automatically generated)
Data Repositories

• Processes of OS and NOS Hardening continue...
• Network Access Control Databases
• Wired Protected Access (WPA), WPA2, and 802.11i
• Should You Continue to Use Windows 2000 Professional or Move to Windows XP Professional?
• Reservations and Exclusions
• Network and Programming: the .Net framework
• Why your Computers get attacked and how? PC Privacy Security Issues
• Count on Mobile Software
• VBScript and JScript continue...
• Improving Network Performance with Dual-Band Wireless Technology