\section{Local System Security}
\begin{frame}
   {Local System Security}

   \begin{itemize}
      \item Need to secure against both \textbf{internal} and
      \textbf{external} threats
      \item Threats may be expected, or unexpected
      \item Local security policy must be carefully designed and
      carried through
      \item Systems should be properly maintained and updated
      \item Systems should be physically secured
      \item Only appropriate users should have potentially
      dangerous privileges, only those absolutely needed
      \item All users should be aware of security policies and
      good security hygiene, and rules must be enforced
   \end{itemize}

\end{frame}

\cprotect\note{

   Computers are inherently insecure and need protection
   from the people who would intrude in on or attack them.
   This can be done to simply harm the system, deny
   services, or steal information.

   No computer can ever be absolutely secure.  All we can
   do is slow down and/or discourage intruders so that they
   either go away and hunt for easier targets, or so we can
   catch them in the act and take appropriate action.

   Security can be defined in terms of the system's ability
   to regularly do what it is supposed to do, integrity and
   correctness of the system, and ensuring that the system
   is only available to those authorized to use it.

   The biggest problem with security is to find that
   appropriate mix of security and productivity; if
   security restrictions are tight, opaque, and difficult,
   especially with ineffective measures, users will
   circumvent procedures.

   The four areas we need to protect include physical,
   local, remote, and personnel.  In this section we will
   not concentrate on network security, we will concentrate
   on the local factors.

}



