your thoughts on computer security

[zimu]

hey guys!

just hoping that you guys can give me some ideas as to what you perceive to be a "secure computing environment"-- as in what would make YOU feel secure?

this specifically relates to some storage of information on some remote computer, and deals with anything from server storage encryption to encrypted communications to the client and what not.

nothign specific needed, it's more just to get a "general consensus from an online computing community" (i'll cite ATOT!)

 

[vi edit]

From a network standpoint:

1) a well managed firewall (basically restrict all with only required services being opened to specific machines that need them)
2) all current and up todate security patches on the respective operating system
3) installed and up to date virus scanning on the machine
4) gateway level antivirus scanner (mail server scanning)
5) gateway level intrusion prevention (security device actively scanning for exploits and hacks)
6) nothing more than required software on the servers (no email clients, added programs, ect)
7) if you *really* wanted to get uber-secure you'd go so far as to encrypt the data residing on the machine, but most places don't go that far
8) SSL (or similar) encrypted traffic between client & server

From a physical standpoint, the server should be in a locked and secured room physically bolted or locked down to the rack with proper security measures in place on the console (log out of admin accts when done, don't leave passwords laying around, ect).

Also make sure that backups(tapes, disks, cd's, ect) are handled securely and that they don't get lost or in the wrong hands.