Saturday, June 20, 2015

Host Software Baselining

I appreciate topics in CompTIA Security+ to the point that every time I deal with a computer network,  there's always security in mind involved. It outlines all the best practices from end hosts (i.e. server and mobile device), the network layer devices (router and firewall) and up to the application level. There's a line in the book that says, "The entire network is only as strong as the weakest host." The focus is keeping all hosts' OS and patches updated in terms of malware protection and baseline.

One of the first steps in developing a secure environment is to develop a baseline of the minimum security needs of your organization. A security baseline defines the level of security that will be implemented and maintained. You can choose to set a low baseline by implementing next to no security of a high baseline that doesn't allow users to make any changes at all to the network or their systems. In practice, most implementations fall somewhere between these two extremes; you must determine what is best for your organization.

A security baseline, which can also be called a performance baseline, provides the input needed to design, implemented, and support a Secure network. Developing the baseline includes gathering data on the specific security implementation of the system with which you'll be working. Microsoft Baseline Security Analyzer is a free tool that can be downloaded and run on Windows to create security reports and scans for errors.

Microsoft Baseline Security Analyzer (MBSA) is an easy-to-use tool that helps small- and medium-sized businesses determine their security state in accordance with Microsoft security recommendations and offers specific remediation guidance. Improve your security management process by using MBSA to detect common security misconfigurations and missing security updates on your computer systems.








No comments:

Post a Comment