User Account Security Theory

Info Level: Beginner Presenter: Eli the Computer Guy Date Created: December 16, 2010 Length of Class: 44 Minutes Tracks Computer Security /Integrity Prerequisites None Purpose of Class This class discusses the concepts required to understand how to protect user accounts from hackers. Chapters Introduction (00:00) Username Security (04:16) Password Security (12:48) Session Security (23:30) Final Thoughts (34:56) Class Notes Username and Login Name The Username and Login Username do not have to be the same many times. xYYY113 can equal eli.etherton For security do not allow Login Username to be displayed automatically at login prompt. Password Password complexity At least 8 characters Use Numbers, Capital and Lowercase Letters in passwords Put the Capital Letter somewhere other then the first Character of a Password Put the Number somewhere other then the last Character of the Password Redrider1 is less secure then reDr1D3r Complex passwords are harder for people to remember Routinely change your passwords. Preferably every 30 days Use different passwords for different accounts There's no shame in having a password book Session Length Time of Day -- You can restrict access to user accounts based on time of day Length of Sessions -- You can have sessions automatically closed after a period of inactivity Location of Sessions -- You can restrict access to user accounts based on geographic location of person logging in Physical Tokens -- You can require use of physical tokens such as USB dongles to create sessions Final Thoughts User Account Security used to mean knowing about Windows Authentication. Now an average business user may have over 10 accounts that they have to log into in order to do there job. By understanding the Theory behind User Account Security you can do a better job of securing your users and organization from hackers.