Please enable JavaScript.
Coggle requires JavaScript to display documents.
Network Secuirty (OSI Layers (Open Systems Interconnection) (Application…
Network Secuirty
OSI Layers
(Open Systems Interconnection)
Network
Data link
Transport
Session
Physical
Presentation
Application
FTP
(File Transfer Protocol)
Active Mode
port 21(For TCP control connection)
port 20(For data channel)
Passive Mode
port 1024~(For data channel)
Vulnerability
tFTP Attack
(Trivial File Transfer Protocol)
Anonymous Attack
Bounce Attack
Transport Layer Security / Secure Sockets Layer
(TLS / SSL)
TLS record
Fragmentation
Compression
MAC
(Message Authentication Code)
Encryption
TLS handshake
Defense Technique
SIEM
(Security Information and Event Management)
Capabilities/Components
Log management
로그분류
(Log rotation)
로그변환
로그분석
(Log analysis)
로그수집
(Log collection)
IDS
(Intrusion detection system)
HIDS
(Host based IDS)
NIDS
(Network based IDS)
Firewall
Types
Bastion Host
Screening Router
Router
filtering Implementations
ACL Policy
(Access Control List)
Egress Filtering
Blackhole Filtering
)
Hacking Technique
DDoS
(Distributed Denial-of-Service)
Smurf Attack
Send Broadcast using Echo request
ICMP Echo Request
Directed broadcast
Mitigation
not respond to ICMP requests or broadcasts
not forward packets directed to broadcast addresses
Sniffing
Switch Jamming
Technical Terms
IP Fragmentation
Control field
Fragment ID(Identification)
Fragment Size
Fragment Offset
Promiscuous Mode
Linux
ifconfig eth0 -promisc
(disable promiscuous mode)
/var/log/messages
(this file is need when i find to exact time)
Window
NMS
(Network Management System)
Related Terms
http://www.omsar.gov.lb/ICTSG/102NW/7.3_Network_Management_System_(NMS).htm
Polling
Event Reporting or Trap, Interrupt
Relevant Program
Made by Trustwave
ModSecurity
(related to Apache, IIS)
(firewall for web)
Snort
options
nocase
(대ㆍ소문자를 구분하지 않는다)
threshold
Port Scan
Types
TCP Scanning
SYN Scanning
UDP Scanning
ACK Scanning
Window Scanning
FIN Scanning
Stealth Scan
X-MAS Scan
Null Scan
ACK or TCP FIN Scan
TCP
TCP Control Flag
(Transmission Control Protocol)
URG
(Urgent)
ACK
(Acknowledgement)
PSH
(Push)
RST
(Reset)
SYN
(Synchronize)
FIN
(Finish)