Security Recommendations

When setting up the developed system and selecting software/hardware, one must pay special attention to ensuring security and control of access to the system and the data that will be stored in the system. Since Foresight Analytics Platform work is based on interaction with DBMS, full control cannot be ensured by the platform alone. The platform provides the following security measures:

License activation and control. It is used to control access to the platform and its tools.
Administration and access control method. It provides various settings to determine the operating principle of the entire security mechanism in the repository. Some settings are determined, stored and controlled at a platform level. Other settings directly determine the processes at a DBMS level. There are also the means for integrity control of Foresight Analytics Platform and security policy backup.

When installing and setting up DBMS, one must set up security parameters: network connection restrictions, password encryption, backup, and so on. In client applications, it is recommended to use protected protocols (HTTPS, TLS 1.3) and check digital signatures of executable files.

An important aspect of ensuring security is setting up the operating system. It is recommended to use built-in kernel-level access control mechanisms that restrict process permissions and prevent unauthorized access to resources. For security auditing at the operating system level one should activate the logging system that registers all critical user and process actions. It is recommended to regularly check logs for suspicious activity. One must also set up policies that minimize user and service permissions by denying startup of unnecessary applications and disabling unused network ports. Additionally, it is important to use strong passwords and, if possible, two-factor authentication.

Use hardware and software to prevent DDoS, XSS, MITM, and other attacks.

Security and Performance

The software in use can directly or indirectly affect the performance of the developed system. To optimize and select appropriate settings, see the performance improvement recommendations.