Please enable JavaScript.

Coggle requires JavaScript to display documents.

Section 4: Security of Networks, Systems Applications and Data (Topic 4:…

- - - - Types of Vulnerabilities
        
        Technical
        
        Process
        
        Organizational
        
        Emergent
- - - - Repeaters
      - Hubs
      - Layer 2 Switches
      - Routers
      - Layer 3 and 4 Switches
      - Layer 4 - 7 Switches
  - - - Control Access to a network using policies
  - - - Radio waves
      - Electromagnetic signals
    - - Wi-Fi Protected Access ( WPA )
        
        Dynamic keys & Authentication server with credentials
      - Wi-Fi Protected Access II ( WPA2 )
        
        Dynamic keys & Authentication server with credentials
      - Wired Equivalent Privacy ( WEP )
  - - - Layer 2 Tunneling Protocol ( L2TP )
      - Secure Sockets Layer VPN
      - Point-to-point tunneling protocol ( PPTP )
      - IPSec VPN
- - - - Code Reviews
      - Team Review / Code Inspections
  - - - Separate development, testing & production environments should be use to minimize compromise or misconfigurations
      - Different access controls should be used between these different environments
    - - Agile
        
        Flexible, Iterative
        
        Allows a quicker response to changes during a project
      - DevOps
        
        Breaks large projects into smaller & manageable deliverable & multiple deployments
        
        Easier to debug during development process
- - - - Type of data accessed
      - Type of accesses allowed