User Account Security Theory

Info

Level: Beginner
Presenter: Eli the Computer Guy
Date Created: December 16, 2010
Length of Class: 44 Minutes
Tracks

Computer Security /Integrity
Prerequisites

None
Purpose of Class

This class discusses the concepts required to understand how to protect user accounts from hackers.
Chapters

Introduction (00:00)
Username Security (04:16)
Password Security (12:48)
Session Security (23:30)
Final Thoughts (34:56)
Class Notes

Username and Login Name
The Username and Login Username do not have to be the same many times.
xYYY113 can equal eli.etherton
For security do not allow Login Username to be displayed automatically at login prompt.
Password
Password complexity
At least 8 characters
Use Numbers, Capital and Lowercase Letters in passwords
Put the Capital Letter somewhere other then the first Character of a Password
Put the Number somewhere other then the last Character of the Password
Redrider1 is less secure then reDr1D3r
Complex passwords are harder for people to remember
Routinely change your passwords. Preferably every 30 days
Use different passwords for different accounts
There's no shame in having a password book
Session Length
Time of Day -- You can restrict access to user accounts based on time of day
Length of Sessions -- You can have sessions automatically closed after a period of inactivity
Location of Sessions -- You can restrict access to user accounts based on geographic location of person logging in
Physical Tokens -- You can require use of physical tokens such as USB dongles to create sessions
Final Thoughts
User Account Security used to mean knowing about Windows Authentication. Now an average business user may have over 10 accounts that they have to log into in order to do there job. By understanding the Theory behind User Account Security you can do a better job of securing your users and organization from hackers.

Show more