Posted: August 29th, 2022

Dealing with Bad Practices

Dealing with Bad Practices

Shared accounts
Shared accounts check with any useful resource that makes use of a sole pair of credentials to authenticate many customers. Shared accounts will not be thought of good observe; as such, they’re unhealthy observe. It is because they make it arduous to determine the precise consumer they usually make it potential for people with malicious intent to make the most of them with anonymity (Anderson & Mutch, 2011). Additionally, accounts utilized by a shared group of customers often have poor passwords that malicious people can simply guess. Extra so, customers don’t modify these accounts’ passwords recurrently or when a bunch member leaves. This places a number of methods prone to being compromised within the occasion the members who left the group share the passwords with outsiders.
Distinctive consumer accounts, no password required
This can be a unhealthy observe as a result of it poses many risks to a number of IT methods. For one, the shortage of a password could put the confidentiality, integrity and availability of an organization’s information and sources prone to being compromised. As an example, unauthorized individuals can simply get entry to those accounts, pay money for confidential data and steal it (Afonin & Katalov, 2016). In some situations, these individuals could alter the unique information thus compromising its integrity. The shortage of a password additionally places an organization prone to being a sufferer of fraud. Folks with malicious intents can simply entry these accounts and use them to defraud individuals, transfer cash and so forth. after which depart.
Distinctive consumer accounts, password by no means must be modified
Distinctive consumer accounts the place password by no means must be modified are a foul observe. That is so as a result of to start with, this observe will increase the danger of fixed entry by hackers. As soon as a hacker is aware of the password of the account, he/she could try and entry these accounts greater than as soon as over a time frame and do what they’ll with the account. This observe additionally serves to extend entry gained by keystroke loggers. A keystroke logger refers to a know-how that focuses on surveillance, and it’s utilized in recording keystrokes (Kim & Solomon, 2016). By no means altering the password will increase the keylogger’s success in figuring out the password and different login particulars getting used within the distinctive consumer accounts. As such, the hacker can leverage this to steal necessary data from the pc methods. Furthermore, by no means altering the password makes it extra doubtless that passwords obtained via this method will likely be helpful to attackers for a protracted time frame.
Directors have used their privileged accounts to carry out primary consumer actions
The observe of directors utilizing their privileged accounts to hold out primary consumer actions may be very harmful. This observe makes it simpler for hackers to introduce malware to the accounts via a phishing assault or acquire the credentials of the administrator by using impersonation; that is significantly a frequent assault within the Microsoft Home windows surroundings. On this regard, the following phishing assault can result in theft of firm data, and a consequence, the corporate can expertise important monetary losses, and harm to its popularity. Gaining the administrator’s credentials may make it potential for attackers to infiltrate the corporate’s methods and instigate extra assaults in order to steal extra data. This observe will increase the danger of unintended errors as properly. Privileged entry permits the administrator to bypass entry controls, and because of this, errors made by the administrator could have catastrophic outcomes, resulting in lack of information or substantial downtime. As an example, on a Unix system, an extra house could change “rm –Rf /tmp/olddata” into “rm –Rf / tmp/olddata”, deleting the entire file system. This can be a type of error that results in information loss.

References
Afonin, O., & Katalov, V. (2016). Cell forensics – Superior investigative methods. Packt Publishing.
Anderson, B., & Mutch, J. (2011). Stopping good individuals from doing unhealthy issues: Implementing least privilege. Apress.
Kim, D. & Solomon, M. G. (2016). Fundamentals of knowledge methods safety. Jones & Bartlett Publishers.

Order | Check Discount

Tags: Dealing with Bad Practices