Hardening Target
- •
def
- •
the category of system or device a hardening guide applies to — no system is secure with default configuration
- •
- •
targets
- •
mobile devices — hardening checklists from manufacturers; updates are critical; segment company vs. user data; control with a Mobile Device Management (MDM) platform
- •
workstations — constant monitoring/updates (OS, apps, firmware), automated monthly patches, connect to policy management (e.g., Active Directory group policy), remove unnecessary software
- •
network infrastructure devices — purpose-built with embedded, limited OS access; configure authentication (don't use defaults); check with the manufacturer for updates, which aren't usually frequent but are important
- •
cloud infrastructure — secure the cloud management workstation, apply least privilege, configure EDR on all devices accessing the cloud, always have backups (cloud-to-cloud)
- •
servers — OS/service pack updates, minimum password requirements, limited network access, anti-virus/anti-malware
- •
SCADA - ICS — requires extensive segmentation, no outside access
- •
Embedded Systems — can be difficult to upgrade; correct vulnerabilities via patches where possible; segment and firewall
- •
Real-Time Operating System (RTOS) — isolate the system, run minimum necessary services, use secure communication with a host-based firewall
- •
Internet of Things (IoT) devices — change weak default credentials, deploy updates quickly, segment onto their own VLAN
- •
- •
related