BYOD - Revision history

Digitaltinker at 02:56, 5 January 2023

2023-01-05T02:56:44Z

← Older revision		Revision as of 19:56, 4 January 2023
Line 126:		Line 126:
	==Guest >< Production Zone Routing Policies Similar to Internet Firewall==		==Guest >< Production Zone Routing Policies Similar to Internet Firewall==
	* (To Do)		* (To Do)

			[[Category:Project]]

Ajstadlin: /* BYOD PROJECT */

2014-01-09T05:03:36Z

BYOD PROJECT

← Older revision		Revision as of 22:03, 8 January 2014
Line 3:		Line 3:

	<b><span style="font-size:large;">IMPORTANT NOTE: This is a <I>Project</i>, IT IS NOT UAS POLICY</span></b>		<b><span style="font-size:large;">IMPORTANT NOTE: This is a <I>Project</i>, IT IS NOT UAS POLICY</span></b>

			This is an Open Project that anyone may contribute to.

	<hr />		<hr />
	==General Description==		==General Description==
Line 14:		Line 17:

	<hr />		<hr />

	=PART 1 - DESCRIPTION, DEFINITIONS, AND SCOPE=		=PART 1 - DESCRIPTION, DEFINITIONS, AND SCOPE=
	==BYOD = Bring Your Own Devices==		==BYOD = Bring Your Own Devices==

Ajstadlin at 04:59, 9 January 2014

2014-01-09T04:59:40Z

← Older revision		Revision as of 21:59, 8 January 2014
Line 1:		Line 1:
	=BYOD PROJECT=		=BYOD PROJECT=
	<span style="font-size:small;">Revised Jan 7, 2014</span>		<span style="font-size:small;">Revised Jan 8, 2014</span>

	<b><span style="font-size:large;">IMPORTANT NOTE: This is a <I>Project</i>, IT IS NOT UAS POLICY</span></b>		<b><span style="font-size:large;">IMPORTANT NOTE: This is a <I>Project</i>, IT IS NOT UAS POLICY</span></b>
			<hr />
	==General Description==		==General Description==
	Build a model for implementing BYOD (Bring Your Own Devices) Policies and Procedures in a Production Workplace Environment. In this case, it will be a hybrid BYOD environment where the following apply:		Build a model for implementing BYOD (Bring Your Own Devices) Policies and Procedures in a Production Workplace Environment. In this case, it will be a hybrid BYOD environment where the following apply:
Line 14:		Line 14:

	<hr />		<hr />

	=PART 1 - DESCRIPTION, DEFINITIONS, AND SCOPE=		=PART 1 - DESCRIPTION, DEFINITIONS, AND SCOPE=
	==BYOD = Bring Your Own Devices==		==BYOD = Bring Your Own Devices==
Line 82:		Line 81:
	* The Systems Administrator may use any means of detection to determine the presence of BYOD devices on the Production Network.		* The Systems Administrator may use any means of detection to determine the presence of BYOD devices on the Production Network.

	Definition: <b>An Unauthorized BYOD Device that succeeds in connecting to the Production Network is considered ~~and~~ INTRUDER and considered a high risk security threat.</b>		Definition: <b>An Unauthorized BYOD Device that succeeds in connecting to the Production Network is considered an INTRUDER and considered a high risk security threat.</b>

	* The Systems Administrator may use any means of penetration testing to determine the identity and functional features of any INTRUDER (Unauthorized and Connected) ~~device whose capabilities may impact the performance or reliability of the Production Network are prohibited~~.		* The Systems Administrator may use any means of penetration testing to determine the identity and functional features of any INTRUDER (Unauthorized and Connected).
	* The Systems Administrator may aggressively use any security measures or tools to protect the Production Network from Unauthorized Devices attempting to connect or INTRUDERS.		* The Systems Administrator may aggressively use any security measures or tools to protect the Production Network from Unauthorized Devices attempting to connect or INTRUDERS.
	* The Systems Administrator is not responsible for problems that an Unauthorized ~~INTRUDER~~ BYOD device may experience as the result of penetration testing or security measures.		* The Systems Administrator is not responsible for problems that an Unauthorized BYOD device may experience as the result of penetration testing or security measures.

	==Penalties for Unauthorized Use and BYOD Intrusion==		==Penalties for Unauthorized Use and BYOD Intrusion==
Line 119:		Line 118:
	<hr />		<hr />
	=PART 5 - SECURITY IMPLEMENATION - GUEST NETWORK=		=PART 5 - SECURITY IMPLEMENATION - GUEST NETWORK=
	~~(To Do)~~		==Physical Separation of Guest and Production Network Zones==
	===Physical Separation of Guest and Production Network Zones===		* (To Do)
	===Guest >< Production Zone Routing Policies Similar to Internet Firewall===		==Guest >< Production Zone Routing Policies Similar to Internet Firewall==
			* (To Do)

Ajstadlin: /* BYOD PROJECT */

2014-01-07T19:04:24Z

BYOD PROJECT

← Older revision		Revision as of 12:04, 7 January 2014
Line 1:		Line 1:
	=BYOD PROJECT=		=BYOD PROJECT=
	<span style="font-size:small;">Revised Jan 7, 2014</span>		<span style="font-size:small;">Revised Jan 7, 2014</span>

			<b><span style="font-size:large;">IMPORTANT NOTE: This is a <I>Project</i>, IT IS NOT UAS POLICY</span></b>

	==General Description==		==General Description==
	Build a model for implementing BYOD (Bring Your Own Devices) Policies and Procedures in a Production Workplace Environment. In this case, it will be a hybrid BYOD environment where the following apply:		Build a model for implementing BYOD (Bring Your Own Devices) Policies and Procedures in a Production Workplace Environment. In this case, it will be a hybrid BYOD environment where the following apply:

Ajstadlin: /* BYOD PROJECT */

2014-01-07T18:56:05Z

BYOD PROJECT

← Older revision		Revision as of 11:56, 7 January 2014
Line 1:		Line 1:
	=BYOD PROJECT=		=BYOD PROJECT=
			<span style="font-size:small;">Revised Jan 7, 2014</span>
	==General Description==		==General Description==
	Build a model for implementing BYOD (Bring Your Own Devices) Policies and Procedures in a Production Workplace Environment. In this case, it will be a hybrid BYOD environment where the following apply:		Build a model for implementing BYOD (Bring Your Own Devices) Policies and Procedures in a Production Workplace Environment. In this case, it will be a hybrid BYOD environment where the following apply:
Line 10:		Line 11:

	<hr />		<hr />

	=PART 1 - DESCRIPTION, DEFINITIONS, AND SCOPE=		=PART 1 - DESCRIPTION, DEFINITIONS, AND SCOPE=
	==BYOD = Bring Your Own Devices==		==BYOD = Bring Your Own Devices==

Ajstadlin: /* PART 5 - SECURITY IMPLEMENATION - GUEST NETWORK */

2014-01-07T18:54:26Z

PART 5 - SECURITY IMPLEMENATION - GUEST NETWORK

← Older revision		Revision as of 11:54, 7 January 2014
Line 114:		Line 114:
	<hr />		<hr />
	=PART 5 - SECURITY IMPLEMENATION - GUEST NETWORK=		=PART 5 - SECURITY IMPLEMENATION - GUEST NETWORK=
			(To Do)
	===Physical Separation of Guest and Production Network Zones===		===Physical Separation of Guest and Production Network Zones===
	===Guest >< Production Zone Routing Policies Similar to Internet Firewall===		===Guest >< Production Zone Routing Policies Similar to Internet Firewall===

Ajstadlin: /* PART 5 - SECURITY IMPLEMENATION - GUEST NETWORK */

2014-01-07T18:54:03Z

PART 5 - SECURITY IMPLEMENATION - GUEST NETWORK

← Older revision		Revision as of 11:54, 7 January 2014
Line 114:		Line 114:
	<hr />		<hr />
	=PART 5 - SECURITY IMPLEMENATION - GUEST NETWORK=		=PART 5 - SECURITY IMPLEMENATION - GUEST NETWORK=
	==Physical Separation of Guest and Production Network Zones==		===Physical Separation of Guest and Production Network Zones===
	==Guest >< Production Zone Routing Policies Similar to Internet Firewall==		===Guest >< Production Zone Routing Policies Similar to Internet Firewall===

Ajstadlin at 18:52, 7 January 2014

2014-01-07T18:52:35Z

Show changes

Ajstadlin at 18:44, 6 January 2014

2014-01-06T18:44:11Z

← Older revision		Revision as of 11:44, 6 January 2014
Line 1:		Line 1:
	=BYOD PROJECT=		=BYOD PROJECT=
	==General Description==		==General Description==
	Implement BYOD Policies and Procedures in a Corporate Environment. In this case, it will be a hybrid BYOD environment where the following apply:		Implement BYOD (Bring Your Own Devices) Policies and Procedures in a Corporate Environment. In this case, it will be a hybrid BYOD environment where the following apply:

	* BYOD usage is permitted (e.g. a guest with their own cell phone and their own 3G service, disconnected from the corporate network (LAN side)).		* BYOD usage is permitted (e.g. a guest with their own cell phone and their own 3G service, disconnected from the corporate network (LAN side)).

Ajstadlin: Created page with "=BYOD PROJECT= ==General Description== Implement BYOD Policies and Procedures in a Corporate Environment. In this case, it will be a hybrid BYOD environment where the following ..."

2014-01-06T18:35:22Z

Created page with "=BYOD PROJECT= ==General Description== Implement BYOD Policies and Procedures in a Corporate Environment. In this case, it will be a hybrid BYOD environment where the following ..."

New page

=BYOD PROJECT=
==General Description==
Implement BYOD Policies and Procedures in a Corporate Environment. In this case, it will be a hybrid BYOD environment where the following apply:

* BYOD usage is permitted (e.g. a guest with their own cell phone and their own 3G service, disconnected from the corporate network (LAN side)).

* Authorized BYOD is permitted (e.g. the President wants to access corporate resources when he brings his laptop in)

* Unauthorized BYOD is prohibited (e.g. an employee brings their own wireless router in and connects it to the corporate LAN so they can have a wireless access point to surf the Internet).

<hr />
=1.0 PROPOSED BYOD POLICY AND SCOPE=
==1.A. List of BYOD Device Characteristics for which this Policy's Scope Applies (To Do)==
==1.B. Examples of BYOD Devices for which this Policy's Scope Applies (To Do)==
==1.C. Allow Only AUTHORIZED Devices==
* 1.C.1) Authorization is obtained from the Sys Admin
* 1.C.2) Requirements for Authorization = Check List (To Do)
* 1.C.3) Scope of Permitted Activities and Access Privileges for Authorized Devices. (To Do)
==1.D. Prohibit UNAUTHORIZED Devices==
* 1.D.1) Scope of Unauthorized BYOD Usage (To Do)
*    1.D.1.a) All BYOD devices that attempt to access corporate network (LAN side) resources are classified as Unauthorized by default.
* 1.D.2) Enforcement Policies Regarding BYOD Detection (To Do)
* 1.D.3) Penalties for Unauthorized BYOD usage (To Do)
==1.E. Allow guests==
* 1.E.1) Guests may use their BYOD devices as long as they do not attempt to connect to the corporate network.
* 1.E.2) Guests that want to use a corporate printer will need to bring a USB or LPT cable and use non-networked printers.
* 1.E.3) If a separate "Guest Network" is available, Device Authorization with minimal requirements is required to use it. (e.g. the owner must obtain a WPA2 key).

<hr />
=2.0 IMPLEMENTING BYOD INTRUSION DETECTION=
==2.A. Detection Requirements==
* 2.A.1) Detect and Uniquely Identify BYODs attempting to connect to the LAN
* 2.A.2) Log BYOD connection attempts and successes
==2.B. Action Requirements==
* 2.B.1) Determine if a BYOD connection is Authorized or Unauthorized
* 2.B.2) Transmit an email/text notification to the Sys Admin alerting to unauthorized connections
==2.C. Detection Software Candidates Required Features / Product Matrix (To Do)==
===2.C.1) PADS===
===2.C.2) [http://blog.securityonion.net Security Onion]===
===2.C.2) ...(To Do)===

<hr />
=3.0 SECURITY IMPLEMENTATION - PRODUCTION NETWORK=
* (To Do)

<hr />
=4.0 SECURITY IMPLEMENATION - GUEST NETWORK=
==4.A. Physical Separation of Guest and Production Network Zones==
==4.B. Guest >< Production Zone Routing Policies Similar to Internet Firewall==