课程: ISC2 Certified Information Systems Security Professional (CISSP) (2024) Cert Prep

免费学习该课程！

今天就开通帐号，24,600 门业界名师课程任您挑！

Secure defaults

Secure defaults

课程: ISC2 Certified Information Systems Security Professional (CISSP) (2024) Cert Prep

开始一个月试用 购买团队方案

Secure defaults

“

- [Instructor] As we wrap up our discussion of secure design, let's talk about a few more important security design principles. The first of these is secure defaults. The secure defaults principle simply says that the systems we design should default to a secure mode if we don't do anything else. Configuration settings should default to secure options and require intervention to modify those options rather than defaulting to a weak configuration. You already know at least one example of secure defaults. The implicit deny rule used by firewalls is an example of a secure default. If you take a firewall out of the box and pop it on a network, it has only one rule, deny everything. The firewall won't allow any traffic to pass until it's configured with rules explicitly allowing that access. That's an example of a secure default. Engineers across all disciplines are familiar with another basic design principle that's summed up by the acronym KISS. That stands for Keep It Simple and Small…

内容