Please enable JavaScript.

Coggle requires JavaScript to display documents.

CISSP (Security Assessment & Testing (Assessment and Test Strategies,…

- - - - vs. Real User Monitoring (RUM)
      - Microsoft’s System Center Operations Manager
      - Website Monitoring
      - Database Monitoring
      - TCP Port Monitoring
    - - Black box
      - White Box
      - Grey Box
      - Pivoting
    - - Positive Testing
      - Negative Testing
      - Use Cases
      - Misuse Cases
  - - - Security
      - Availability
      - Confidentiality
      - Processing Integrity
      - Privacy
- - - - SDLC
        
        Functional requirements definition
        
        System design specifications
        
        Development and implementation
        
        Documentation and common program controls
        
        Testing and evaluation control (certification and accreditation)
        
        Transition to production (implementation)
        
        Initiation and planning
      - SLC
        
        +Operation and maintenance support (post installation)
        
        +Revisions and system replacement
    - - ISO/IEC 90003:2004
      - CMM
    - - Develop and test against production-like systems
      - Deploy with repeatable, reliable process
      - Monitor and validate operational quality
      - Amplify feedback loops
  - - - Waterfall
      - Iterative Development
      - Other
        
        Computer-Aided Software Engineering (CASE)
        
        Component-Based Development
        
        Reuse Model
        
        Extreme Progarmming
- - - - Detective
      - Deterrent
      - Preventive
      - Compensating
      - Detective
      - Corrective
      - Recovery
    - - Administrative
        
        Policies and procedures
        
        Personnel security, evaluation, and clearances
        
        Security policies
        
        Monitoring
        
        User management
        
        Privilege management
      - Logial (Technical)
        
        Network access
        
        Remote access
        
        System access
        
        Application access
        
        Malware control
        
        Encryption
      - Physical
    - - Vulnerability Assessment
      - Penetration Testing
        
        Strategy
        
        Methodology
      - Application Security Testing
      - Denial-of-Service (DoS) testing
      - War Dialing
      - Wireless Network Testing
      - Social Engineering
      - PBX and IP Telephony Testing