Systems Software. Introduction to Information System Components. Chapter 1 Part 2 of 4 CA M S Mehta, FCA

Transcription

1 Systems Software Introduction to Information System Components Chapter 1 Part 2 of 4 CA M S Mehta, FCA 1

2 Systems Software Learning Objects Task Statements 1.1 Identify deployment of different components of IT and their functions Operating system software Knowledge Statements 1.2 Fundamental concepts of different components of IT and their functions Operating System Software 2

3 Topics Covered Systems Software Operating Systems Access Control in Windows Other Types of System Software Software Asset Management 3

4 What Is Systems Software? 4

5 Software Set of instructions Tells the computer what to do Accomplishes desired task when executed in a sequence Most critical function- directs the working of computer hardware and causes a computer to perform useful tasks 5

6 Software Architecture S Y S T E M S O F T W A R E Users interact with Application Packages System Software Operating System Data communication APPLICATION PACKAGES Data Base management software (DBMS) MS-OFFICE (Word, Excel, Access),Payroll, Sales etc System Access software control is a collection of computer programs Tape and used disk in design, management processing systems and Program control of library application management packagesystems DEVLOPMENT PACKAGES Network management software Visual Basic, Java, VC++, etc Program Development Tools UTILITIES etc Job scheduling Middleware Access Control Utility software programs Operating System Hardware - Firmware 6

7 Operating Systems Set of programs which acts as intermediary agent between the user and the computer hardware permits sharing and use of resources. It controls and manages the computer hardware resources among various processes. 7

8 Types of Operating Systems Single User OS Multi User OS Multi Processing OS Real time OS One user uses System at a timesingle or multi tasking Several users use System at a time OS operates on system with more than one processor Used in embedded systems with only small set of tasks 8

9 Need For Systems Software 9

10 OS Capabilities Multitasking allows computing systems to run two or more applications concurrently. Multiprocessing links more than one processor (CPU) Multithreading runs several processes or threads of a program simultaneously. 10

11 Core Tasks of OS Processor Management Memory Management Device Management File Management Secondary Storage Management Networking Application Programme Interface User Interfaces With System 11

12 Operating Systems Resource Manager Perform Hardware Function Providing user interfaces. Hardware independence through API Memory Management, Virtual Memory Networking-Permits users to share hardware and data. Time Sharing-Schedules resources among users. Manage resources and processing. 12

13 User Interface One of the most important functions of OS is to provide user interface Application software What is the price of RIL (RIL$) Operating System software Fetch RIL$ from hard disk,track1 sector 7 Application Program Interface 13

14 Memory and Processor Management 14

15 Core components of an OS OS holds a computer together- Glue binds H/w with S/w Kernel Layer Controls Access to Hardware Schedules System resources.. Memory, CPU,.. Enforces Security to System Resources Shell Layer Surrounds kernel Provides Interface for Applications 15

16 Programming Languages What to do & How to do What to do The instruction ADD 2 and 5 and assign the result to variable y written in different programming languages 16

17 Programming Software Assembler Assembly level code Machine code Language Compiler 3GL Code(As a single unit) Machine code Checks for errors in 3GL code Language Interpreter 3GL Code (Each program statement) Machine code Easier to debug Slow execution SQL Engine SQL Statement Machine code 17

18 Program Development Software Linker Process of combining various pieces of code and data together to form single executable unit that can be loaded in memory. Loader Loads code & data of executable code memory executes program Debugger Identify problem occurring during execution.help locate bugs Editors Allows user to create & Edit files w/out special characters Write source code 18

19 Some more System Software Access Control Software Data Communication Software Utility Programs Tape and Disk Management Software 19

20 Access Control Software Access Control Software is used for Secure access to data, files, system resources Assign ownership of all data for accountability Logging Access Activity 20

21 Data Communication Software Communications software is generally embedded in the computer operating system. Communications software assists Operating System in managing local and remote terminal access to host resources to manage security E.g. terminal emulators, file transfer programs 21

22 Utility Programs Functions To manage a computer's functioning To improve operational efficiency e.g. Defragmenters To understand application systems. To facilitate assessing or testing data quality. To test a program s ability to function correctly and maintain data integrity. To assist in fast program development. 22

23 Security & Controls Relating to Operating System 23

24 OS Security OS should be Robust Reliable, and free of Integrity flaws. Operating system's processes and kernel do the designated task as instructed. A malicious program could make these process do malicious tasks OS can be secured through proper user access and it has to be protected through anti-virus, firewalls, Anti spyware and patch management 24

25 Access Control in OS Access control is the process of authorizing users, groups and computers to access objects on the computer or network Operating system access controls First layer of access controls Rely on hardware features of processor or Associated memory management Basically control which memory addresses a process can access. 25

26 Access Control in OS - ACL ACLs are widely used in environments where users manage their own file security, such as the Unix File is the smallest object in OS Access control deals with files ACL is a matrix of access permissions, with columns for files and rows for users 26

27 Access Control List (ACL) Match User/Role with Object Specifying Capabilities File A File B Prog X Role A Read Write Write Role B Read Read Write Role C Execute 27

28 Access Control in OS ACLs are used in OS with Roles. Role= set of Users Administrator, Guest Assign permissions to roles Each user gets permission through Role 28

29 Access Controls in UNIX Each file(object) has owner and group Permissions set by owner Could be Read, write, execute to Owner, group, other Only owner, root can change permissions 29

30 Access Control in Windows - Steps User Creation Create Password Assign Roles User rights & privilege Permissions Security Auditing 30

31 Create User In Windows 7 Go to Control Panel > User Accounts > Manage accounts 31

32 Create Password In Windows 7 Go to Control Panel > User Accounts > Manage accounts 32

33 Assign Role In Windows 7 Go to Control Panel > User Accounts > Manage accounts Default Roles could Be Standard User or Administrator 33

34 User Rights & Permissions User Rights apply to user accounts, and Permissions attached to objects Assigning User Rights Start> Control Panel>System and security>administrative Tools> Local Security Policy 34

35 User Rights Assigning User Rights Start> Control Panel>System and security>administrative Tools> Local Security Policy Click on User Rights assignment 35

36 Permissions Permissions are attached to objects Right Click on Properties > Security Tab > Advanced or Edit 36

37 Auditing User Access Audit access to Object, Logon, System events Logging User Events Start> Control Panel>System and security> Administrative Tools>Local Security Policy>Local Policies> Audit Policy 37

38 Understanding Software Asset Management 38

39 Software Asset Management ITIL Definition Software Asset Management is all of the infrastructure and processes necessary for the effective management, control and protection of the software assets within an organization, throughout all stages of their lifecycle. 39

40 Software Asset Management Covers: Software from Purchasing Deploying Managing And tracking Purchase to Retirement of the software SAM is a key process for any organisation to meet its legal, financial and reputational responsibilities 40

41 SAM answers the following Questions What is installed in the environment? What is supposed to be installed? Who is using the Software? How much are they using it? Are they supposed to be using it? How are they using it? Can they prove they re allowed to use it? 41

42 Why SAM? Software is an Asset - needs Management Cost Savings Through Standardisation, Volume licensing Reducing Redundancy, Streamlined Operations Risk Management Streamlined Operations Good Governance Reduce business, reputational and legal risks Trouble free Software, peace of mind Better compliance, Good IT Governance Disaster Protection Updated inventory, offsite backups 42

43 Steps to SAM Take Inventory Get organised Policies & Standards Software acquisition Software storage Software Implementation, Use Software Retirement Maintenance 43

44 Inventorisation Make an inventory by viewing the Add/Remove Programs list PC serial number: Inventory date: Department/ Business Unit: PC used by: Employee ID number or position: Employee telephone extension: Software Installations: Publisher Software Title Version Number Number of Installations As suggested by Microsoft 44

45 System Software Acquisition Business, functional and technical needs and specifications Cost and benefit(s) Obsolescence Compatibility with existing systems Security Demands on existing staff Training and hiring requirements Future growth needs Impact on system and the network performance 45

46 System Software Implementation System Software Implementation System Software Change Control Procedures Software Licensing Issues 46

47 Maintain Proof of ownership The global piracy rate for PC software hovers at 42 percent. Proof of ownership When we acquire software, it's important to keep the following: Software License Terms -End User License Agreement (EULA) Certificate of Authenticity (COA) Original media and manuals Purchase invoice and/or receipt 47

48 Application Software Acquisition Considerations Compatibility Reliability Benchmarks Version Support 48

49 Application Software Development Requirement Definition Maintenance Post Implementation Review Changeover & Implementation Requirement Analysis Coding Design Testing 49

50 What is an Endpoint An endpoint device is an Internet-capable computer hardware device on a TCP/IP network. Where an information stream is generated or ends. Could be a: Computer Laptops smart phones Thin clients, POS terminals etc. 50

51 Endpoint Management In any distributed Environment endpoints need to be deployed, configured, patched, secured and supported. Endpoint Management Solutions encompass Patch Delivery Inventory Software distribution OS deployment Remote control capabilities Provide Visibility into the state of endpoints to support 51

52 Why End Point Management Analyse vulnerabilities (patched or insecure configurations) Easily and automatically remediate all the networked endpoints Establish and enforce configuration policies across the endpoints Distribute and update software packages View, modify, and audit properties of the endpoints 52

53 Benefits of End Point Management Cross platform support Understanding what we have and where it is Centralised management for greater control Standardised systems to drive consistency Simplify compliance Improve service levels Optimised client and server software assets Measured and improved IT performance Automated IT processes Enables end user self-service Simplified software license audits 53

54 What is Digital Rights Management (DRM) Technologies and systems that prevent users doing thing with content that the content provider does not want Removes usage control from the person in possession of digital content > Computer program 54

55 Why DRM To protect the property rights of an enterprise s assets To establish the awareness of Intellectual Property Rights (IPR) in society. 55

56 Digital Rights Management Digital Rights Management is the process of defining, tracking and enforcing permissions and conditions through electronic means and throughout the content lifecycle. DIGITAL CONTENT CREATION DISTRIBUTI ON STORAGE RETRIEVAL USE DISPOSAL 56

57 Where is DRM used? E-book server restricts copying of material Software on DVD restricts copying of content not more than twice 57

58 Auditing Software 58

59 Auditing System Software Acquisition Review system software selection procedures As per I S requirements and business plan. Same selection criteria applied to all acquisitions Review cost/benefit analysis Total Cost of Ownership considered while deciding. Impact on data security. Financial stability of the vendor s operations 59

60 Auditing System Software Review controls over the installation of changed system software Changes should be scheduled when they least impact routine working Fall-back or restoration procedures in place, on production failure. Review Configuration Management Review of the pre-defined/default user accounts Review of Services enabled as per business requirements Review of Resources which are accessible by default by all users Review of Procedures for controlling application of patches Whether Admin/Super User accounts accessed through a secured access control mechanism? At a PC level, whether a personal firewall enabled? 60

61 Auditing System Software Review system software maintenance activities Whether changes made to the system software documented. Vendor support for Current versions of the software Whether Vendor s maintenance activities are logged. Review systems documentation Parameter tables. Activity logs/reports. 61

62 Auditing System Software Review authorisation documentation to determine whether: Changes to access authorisation documented. Attempted violation reported and follow-up Review system software security to determine whether: Circumvention of logical security access control restricted. Vendor-supplied installation passwords changed during installation 62

63 We have learnt about Systems Software Operating Systems Access Control in Windows Other Types of System Software Software Asset Management Digital Rights Management 63

64 References Ralph M. Stair, George W. Reynolds, Principles of Information Systems, Cengage Learning IT Asset Management. Net BSA.org 64

65 Systems Software Thank You 65