Ethical Hacking and Countermeasures v6 Preventing Data Loss Exam 312-50 Certified Ethical Hacker Ethical Hacking and Countermeasures Version Module LV Preventing Data Loss Ethical Hacking and Countermeasures v6 Module LV: Preventing Data Loss Exam 312-50 Module LV Page | 3877 Ethical Hacking and Countermeasures v6 Copyright © by EC-Council All Rights Reserved Reproduction is Strictly Prohibited Ethical Hacking and Countermeasures v6 Preventing Data Loss Exam 312-50 Certified Ethical Hacker News Source: http://ap.google.com/ Copyright © by EC-Council All Rights Reserved Reproduction is Strictly Prohibited EC-Council News Personal Data Lost on 650,000 Credit Card Holders A data loss has been reported by GE Money, which maintains credit card operations for JC Penney and many other retailers The missing information includes Social Security numbers of more than 150,000 people The credit card information that was stored on a backup computer tape, stored at a warehouse run by Iron Mountain Inc., was found missing But according to Richard C Jones, a spokesman for GE Money, there was "no sign of theft or anything of that kind happened," and no proof of fraudulent activity on the accounts has been found Module LV Page | 3878 Ethical Hacking and Countermeasures v6 Copyright © by EC-Council All Rights Reserved Reproduction is Strictly Prohibited Ethical Hacking and Countermeasures v6 Preventing Data Loss Exam 312-50 Certified Ethical Hacker Module Objective This module will familiarize you with: • • • • • Data Loss Causes of Data Loss How to Prevent Data Loss Impact Assessment for Data Loss Prevention Tools to Prevent Data Loss Copyright © by EC-Council All Rights Reserved Reproduction is Strictly Prohibited EC-Council Module Objective This module will familiarize you with: Data Loss Causes of Data Loss How to Prevent Data Loss Impact Assessment for Data Loss Prevention Tools to Prevent Data Loss Module LV Page | 3879 Ethical Hacking and Countermeasures v6 Copyright © by EC-Council All Rights Reserved Reproduction is Strictly Prohibited Ethical Hacking and Countermeasures v6 Preventing Data Loss Exam 312-50 Certified Ethical Hacker Module Flow Data Loss Causes of Data Loss How to Prevent Data Loss Impact Assessment for Data Loss Prevention Tools to Prevent Data Loss EC-Council Copyright © by EC-Council All Rights Reserved Reproduction is Strictly Prohibited Module Flow Module LV Page | 3880 Ethical Hacking and Countermeasures v6 Copyright © by EC-Council All Rights Reserved Reproduction is Strictly Prohibited Ethical Hacking and Countermeasures v6 Preventing Data Loss Exam 312-50 Certified Ethical Hacker Introduction: Data Loss Data loss refers to the unexpected loss of data or information Backup and recovery schemes must be developed to restore lost data EC-Council Copyright © by EC-Council All Rights Reserved Reproduction is Strictly Prohibited Introduction: Data Loss Data loss refers to the unexpected loss of data or information Data can be lost by any one number of issues, such as application errors in the software, configuration errors, physical damage of the system, or the accidental deletion of data by the user Organizations should follow the policy of backing up their critical data at regular intervals A backup and recovery policy should be implemented within the organization so that employees follow the procedure to safely retrieve the lost data in the event of a disaster Module LV Page | 3881 Ethical Hacking and Countermeasures v6 Copyright © by EC-Council All Rights Reserved Reproduction is Strictly Prohibited Ethical Hacking and Countermeasures v6 Preventing Data Loss Exam 312-50 Certified Ethical Hacker Causes of Data Loss Intentional Action • Intentional deletion of a file or program Unintentional Action • Accidental deletion of a file or program • Misplacement of CDs or floppies • Administration errors Failure • • • • Power failure, resulting in data not being saved to permanent memory Hardware failure, such as a head crash in a hard disk A software crash or freeze, resulting in data not being saved Software bugs or poor usability, such as not confirming a file delete command • Data corruption, such as filesystem corruption or database corruption Copyright © by EC-Council All Rights Reserved Reproduction is Strictly Prohibited EC-Council Causes of Data Loss (cont’d) EC-Council Disaster Crime • Natural disaster, earthquake, flood, tornado, etc • Fire • Theft, hacking, sabotage, etc • A malicious act, such as a worm, virus, hacker, or theft of physical media Copyright © by EC-Council All Rights Reserved Reproduction is Strictly Prohibited Causes of Data Loss Intentional Action: A disgruntled employee my intentionally delete critical data to mark his protest Unintentional Action: When data is unrecognizable, overridden by other data, or deleted by other human error, a user can accidentally or unintentionally delete data Failure: The data can be lost due to some failures in the system or any corruption in the files Data can be lost due to the following failures in the system: When the data is in the process of saving and the power is off Hardware failure when there is a headcrash in the hard disk An operating system failure that results in file system corruption or invalid file directories Any software failure due to some bugs or improper installation Module LV Page | 3882 Ethical Hacking and Countermeasures v6 Copyright © by EC-Council All Rights Reserved Reproduction is Strictly Prohibited Ethical Hacking and Countermeasures v6 Preventing Data Loss Exam 312-50 Certified Ethical Hacker Data corruption of file system or database corruption Disaster: Data can be lost due to earthquakes, floods, and some natural disasters, for example when a fire explosion takes place near the system and the system catches the fire Crime: Data can be lost if the system in which the data resides is compromised Hackers may steal data from the compromised system and delete them Hackers may install Time Bombs/Logic Bombs that are programmed to delete the data of the target system A Time Bomb is software that is executed at the particular time set by the hacker Logic Bomb is software triggered automatically when the predefined conditions are met Module LV Page | 3883 Ethical Hacking and Countermeasures v6 Copyright © by EC-Council All Rights Reserved Reproduction is Strictly Prohibited Ethical Hacking and Countermeasures v6 Preventing Data Loss Exam 312-50 Certified Ethical Hacker How to Prevent Data Loss Tips to prevent Data loss: • Back-up critical files: Backup regularly using windows in-built backup utilities or use any backup tool • Run Anti-Virus Program: Install Anti-Virus Software and run them regularly to cleanup your Computer System from Viruses & Trojans • Use power surge protectors: A power surge, is one of the most common occurrences that can damage data and potentially cause a hard drive failure • Experience required: Never attempt any operation, like hard drive installations or hard drive repairs, if you not have such skills • Shut down your computer: Always quit programs before shutting down the computer • Never shake or remove the covers on hard drives or tapes • Store your backup data offsite: Use Tape Drives, Compact Disk(CD),and Floppy Drives to Store your backups • Be aware of your surroundings: Keep your computers and servers in safest and secure locations EC-Council Copyright © by EC-Council All Rights Reserved Reproduction is Strictly Prohibited How to Prevent Data Loss When the data is lost, there are some recovery techniques, which, if followed, will help in retrieving the lost data The tips to prevent data loss are as follows: Backup the critical files: Backup critical files at regular intervals using inbuilt software in the OS or external third party applications Run antivirus to check for viruses and Trojans: Run antivirus programs to check the sanity of the data and other system files Use power surge protectors: There is a chance of hard disk being corrupted incase of power fluctuations Use power surge protectors to protect the computer from such power failures Experience required: Always seek expert advice while installing any applications or modifying the files It is recommended that an expert should be called in to sort out issues related to operating systems Shut down your computer: Ensure that the programs/applications running on the system are closed before you shut down the computer Avoid physical shocks on the system while it is switched on Store your backup data offsite: An alternative of storing the backup data other than system are devices such as compact disks (CDs), floppy drives, or removable devices Be aware of your surroundings: Keep the system and server in a secured and safe location away from the heat Module LV Page | 3884 Ethical Hacking and Countermeasures v6 Copyright © by EC-Council All Rights Reserved Reproduction is Strictly Prohibited Ethical Hacking and Countermeasures v6 Preventing Data Loss Exam 312-50 Certified Ethical Hacker Impact Assessment for Data Loss Prevention Copyright © by EC-Council All Rights Reserved Reproduction is Strictly Prohibited EC-Council Impact Assessment for Data Loss Prevention Source: http://www.informationweek.com/ Module LV Page | 3885 Ethical Hacking and Countermeasures v6 Copyright © by EC-Council All Rights Reserved Reproduction is Strictly Prohibited Ethical Hacking and Countermeasures v6 Preventing Data Loss Exam 312-50 Certified Ethical Hacker Tools to Prevent Data Loss EC-Council Module LV Page | 3886 Copyright © by EC-Council All Rights Reserved Reproduction is Strictly Prohibited Ethical Hacking and Countermeasures v6 Copyright © by EC-Council All Rights Reserved Reproduction is Strictly Prohibited ... Preventing Data Loss Exam 312-50 Certified Ethical Hacker Module Flow Data Loss Causes of Data Loss How to Prevent Data Loss Impact Assessment for Data Loss Prevention Tools to Prevent Data Loss. .. will familiarize you with: Data Loss Causes of Data Loss How to Prevent Data Loss Impact Assessment for Data Loss Prevention Tools to Prevent Data Loss Module LV Page | 3879 Ethical... Data Loss Exam 312-50 Certified Ethical Hacker Module Objective This module will familiarize you with: • • • • • Data Loss Causes of Data Loss How to Prevent Data Loss Impact Assessment for Data