登录查看更多内容

What are the best TCP/IP security practices for remote work?

由人工智能和领英社区提供技术支持

Remote work has become more common and convenient, but also more challenging and risky in terms of network security. TCP/IP, the set of protocols that governs how data is exchanged over the internet, is vulnerable to various attacks and threats that can compromise your privacy, integrity, and availability. To protect your data and devices, you need to follow some best TCP/IP security practices for remote work. Here are some of the most important ones.

此文章中的业界达人

由社区从 7 条内容中精选。了解更多

Rohan Naggi

Advancing Networking & Security | Passionate About Simplifying Complex Tech | Expert in Product, Marketing, &…

1 Use encryption

Encryption is the process of transforming data into an unreadable format that can only be decoded by authorized parties. Encryption protects your data from being intercepted, modified, or stolen by malicious actors. You should use encryption for both your data in transit and your data at rest. Data in transit is the data that travels over the network, such as emails, messages, web requests, and file transfers. Data at rest is the data that is stored on your devices, such as documents, passwords, and backups. You can use encryption tools such as VPNs, SSL/TLS, SSH, and PGP to secure your data in transit and at rest.

添加您的观点

Rohan Naggi

Advancing Networking & Security | Passionate About Simplifying Complex Tech | Expert in Product, Marketing, & Enablement | VMware Top 100 Influencer | Author | Father of Two | CyberTechDad on TikTok | Mountain Biker
举报内容
Integrating Zero Trust with top TCP/IP security practices for remote work results in a comprehensive security approach centered around (A) the identity of users and devices, (B) ongoing monitoring, and (C) the idea of "always confirm, never assume." enforcing the principle of least privilege. This method is highly efficient for safeguarding remote work setups, where traditional network boundaries are often absent. Zero Trust is a key element to SASE (Secure Access Service Edge)

已翻译

赞
Ankit Singh

Assistant Vice President Technology, Data and Innovation at Deutsche Bank
举报内容
In my experience Implementing these following TCP/IP security practices for remote work can help safeguard your organization's data. Use Virtual Private Networks (VPNs) Strong Authentication Secure Remote Desktop Protocol (RDP) I Firewall Rules: Patch Management Network Segmentation Endpoint Security Data Encryption Mobile Device Management (MDM) Remote Access Policies Regular Auditing and Monitoring Secure Cloud Services Strong Password Policies Secure Video Conferencing Incident Response Plan Regular Security Updates

已翻译

赞

2 Use authentication

Authentication is the process of verifying the identity of a user, device, or service that wants to access a network or resource. Authentication prevents unauthorized access and ensures that only legitimate parties can communicate with each other. You should use authentication for both your network access and your application access. Network access is the access to the network itself, such as connecting to a router, a server, or a cloud service. Application access is the access to specific applications or services on the network, such as email, web, or database. You can use authentication methods such as passwords, tokens, certificates, and biometrics to verify your network and application access.

添加您的观点

Ankit Singh

Assistant Vice President Technology, Data and Innovation at Deutsche Bank
举报内容
Based on my experience Implementing strong authentication methods, such as multi-factor authentication (MFA), to prevent unauthorized access to your network and systems can play a vital role to prevent unauthorized access and theft. Along with that I strongly recommend to follow AAA (Authentication, Authorization, Accounting) security framework in the Infrastructure, for this purpose TACACS and Radius server can be used for accounting and authentication.

已翻译

赞

3 Use firewall

A firewall is a software or hardware device that monitors and filters the incoming and outgoing traffic on a network. A firewall blocks or allows traffic based on predefined rules and policies. A firewall protects your network from unwanted or malicious traffic that can harm your devices, data, or performance. You should use a firewall for both your network perimeter and your individual devices. Network perimeter is the boundary between your network and the internet, such as a router or a gateway. Individual devices are the devices that connect to the network, such as laptops, smartphones, or tablets. You can use firewall tools such as iptables, Windows Firewall, or ZoneAlarm to configure your network perimeter and individual device firewalls.

添加您的观点

Ankit Singh

Assistant Vice President Technology, Data and Innovation at Deutsche Bank
举报内容
Deploying Firewall and enabling strong policies can be very helpful to safeguard the network and data. Firewalls block unauthorized users from accessing your network. But you can also block certain websites from being accessed by your users. This is useful if you want to prevent your employees from browsing inappropriate websites or those that may have malicious downloads while working on your network. Firewalls are used to protect computers from viruses and other malicious software. They monitor incoming and outgoing data and log any unusual activities. They may be configured to alert you when an attack occurs or when someone tries to gain unauthorized access to your computer system.

已翻译

赞

4 Use updates

Updates are the changes or improvements that are made to a software or hardware system to fix bugs, enhance features, or address vulnerabilities. Updates improve the functionality, performance, and security of your system. You should use updates for both your operating system and your applications. Operating system is the software that manages the basic functions of your device, such as Windows, Linux, or macOS. Applications are the software that perform specific tasks on your device, such as browsers, email clients, or office suites. You can use update tools such as Windows Update, Software Update, or App Store to check and install the latest updates for your operating system and applications.

添加您的观点

Ankit Singh

Assistant Vice President Technology, Data and Innovation at Deutsche Bank
举报内容
Stay informed about the latest security threats and updates in the remote work landscape, and adjust your security practices accordingly. Patch your networking nodes regularly, you can use any tool to patch it agent based or agent less.

已翻译

赞

5 Use backups

Backups are the copies or duplicates of your data that are stored in a separate location or medium. Backups protect your data from being lost, corrupted, or deleted due to hardware failure, human error, or cyberattack. You should use backups for both your critical data and your system data. Critical data is the data that is essential for your work, such as documents, projects, or contacts. System data is the data that is required for your system to function, such as configuration files, drivers, or registry. You can use backup tools such as cloud storage, external hard drives, or DVDs to create and restore your backups.

添加您的观点

Ankit Singh

Assistant Vice President Technology, Data and Innovation at Deutsche Bank
举报内容
In my experience regularly back up critical data, and establish a disaster recovery plan to minimize downtime and data loss in case of security incidents or system failures. Company should have a solid backup plan which can be recovered instantly when needed. I have seen working with the company in past where we lost all the data from a ESXi box when it got rebooted due to high CPU usage. This is where a robust data backup and recovery plan can come in to save the day. It can help you create strong copies of your business information, which can be recovered in the event of data loss. A solid backup and recovery plan can help you survive, or even thrive, in the face of such unexpected events.

已翻译

赞

6 Use awareness

Awareness is the knowledge and understanding of the potential risks and threats that can affect your network security. Awareness helps you to prevent, detect, and respond to security incidents and breaches. You should use awareness for both your technical skills and your behavioral habits. Technical skills are the skills that enable you to use the network and the security tools effectively and efficiently, such as encryption, authentication, or firewall. Behavioral habits are the habits that influence your network and security behavior, such as password management, email etiquette, or phishing awareness. You can use awareness tools such as training, newsletters, or quizzes to improve your technical skills and behavioral habits.

添加您的观点

Ankit Singh

Assistant Vice President Technology, Data and Innovation at Deutsche Bank
举报内容
Using awareness in security has several benefits: Security awareness programs help individuals within an organization understand potential risks and threats, making them more vigilant and cautious. This can reduce the likelihood of security incidents. Many industry regulations and standards require security awareness training. Compliance helps avoid legal issues and fines. It promotes a culture of security where individuals understand that security is everyone's responsibility, not just the IT department's. With awareness, employees are more likely to handle data securely, reducing the risk of data leakage.

已翻译

赞

7 Here’s what else to consider

This is a space to share examples, stories, or insights that don’t fit into any of the previous sections. What else would you like to add?

添加您的观点

Communication Systems

+ 关注

给文章评分

我们借助人工智能创建了此文章。您认为这篇文章怎么样？

很棒不太好

举报此文章

查看全部

What are the best TCP/IP security practices for remote work?

1

2

3

4

5

6

7

1 Use encryption

2 Use authentication

3 Use firewall

4 Use updates

5 Use backups

6 Use awareness

7 Here’s what else to consider

Communication Systems

给文章评分

感谢您的反馈

更多Communication Systems相关文章

更多相关阅读内容