Please enable JavaScript.

Coggle requires JavaScript to display documents.

Cybersecurity, Configuration management, The telemetry - Coggle Diagram

- - - - edge router
  - - - Identification and authentication policies
      - Password policies
      - Remote access policies
      - acceptable use policies
        
        identify network applications and network usage that are allowed within the organization
  - - - confidentiality, integrity, and availability
  - - - The Public Key Infrastructure
    - - Explanation:
        
        There are three Digital Signature Standard (DSS) algorithms that are used for generating and verifying digital signatures:Digital Signature Algorithm (DSA)
        
        Rivest-Shamir Adelman Algorithm (RSA)
        
        Elliptic Curve Digital Signature Algorithm (ECDSA)
    - - symetric
        
        DH
      - ASYMETRIC
    - - services
        
        Integrity
        
        Authenticity
        
        Nonrepudiation
    - - DNS
      - subordinate CA
- - - - Risk avoidance: Stop performing the activities that create risk.
        
        Risk reduction: Decrease the risk by taking measures to reduce vulnerability.
        
        Risk sharing: Shift some of the risk to other parties.
        
        Risk retention: Accept the risk and its consequences.
  - - - Base, Temporal, and Environmental
- - - - SPAN is a port mirroring technology supported on Cisco switches that enables the switch to copy frames and forward them to an analysis device.
- - - - components
        
        a payload
        
        What the worm leaves behind is the payload–the code that results in some action.
        
        a propagation mechanism
        
        The worm attack not only affects one computer, but replicates to other computers
        
        an enabling vulnerability
        
        A computer can have a worm installed through an email attachment, an executable program file, or a Trojan Horse.
    - - proxy trojan horse
    - - A virus typically requires end-user activation.
- - - - reducing the volume of event data by consolidating duplicate event records
  - - - ELK
- - - - created by
        
        buffer overflow
        
        verwhelming amount of data so no other devices can access the attacked device
    - - hide methods
        
        domain generation
        algorithms
        
        Domain generation algorithms randomly generate domain names to be used as rendezvous points.
        
        fast flux
        
        ast flux is a technique used to hide phishing and malware delivery sites behind a quickly-changing network of compromised DNS hosts (bots within botnets).
  - - - DHCP
        
        Wrong default gateway that is used to create a man-in-the-middle attack and allow the attacker to intercept data
- - - - Antivirus scans are performed on hosts from a centralized system.