00000cmm a22000004a 4500 UP-99796217611236434 Buklod 20230215085534.0 m go j cr |n |||auu|a 111206s2011 xxu u | eng d 9781430239222 (eBook) 1430239220 (eBook) (iLib)UPD-00215705699 DLC DML eng DMLUC TK 5105.59 M855 2011eb Mutch, John Preventing good people from doing bad things implementing least privilege [electronic resource] John Mutch, Brian Anderson. Berkeley, CA Apress Imprint: Apress 2011. 1 online resource (xii, 197 p.) IP-based subscription, access limited to within on-campus computer network. Access via Electronic Resources of the UPD University Library Website. In today's turbulent technological environment, it's becoming increasingly crucial for companies to know about the principle of least privilege. These organizations often have the best security software money can buy, with equally developed policies with which to execute them, but they fail to take into account the weakest link in their implementation: human nature. Despite all other efforts, people can sway from what they should be doing. Preventing Good People from doing Bad Things drives that concept home to business executives, auditors, and IT professionals alike. Instead of going through the step-by-step process of implementation, the book points out the implications of allowing users to run with unlimited administrator rights, discusses the technology and supplementation of Microsoft's Group Policy, and dives into the different environments least privilege affects, such as Unix and Linux servers, and databases. Readers will learn ways to protect virtual environments, how to secure multi-tenancy for the cloud, information about least privilege for applications, and how compliance enters the picture. The book also discusses the cost advantages of preventing good people from doing bad things. Each of the chapters emphasizes the need auditors, business executives, and IT professionals all have for least privilege, and discuss in detail the tensions and solutions it takes to implement this principle. Each chapter includes data from technology analysts including Forrester, Gartner, IDC, and Burton, along with analyst and industry expert quotations. Electronic reproduction. New York SpringerLink 2011. Available via World Wide Web through SpringerLink. Computer networks Security measures. Computer security. Hackers. Data protection. Electronic books. Anderson, Brian. SpringerLink (Online service). Electronic Resource Available for University of the Philippines Diliman via SpringerLink. Click here to access http://dx.doi.org/10.1007/978-1-4302-3922-2 FO Monograph UPD DMLR Electronic Resource