Please enable JavaScript.

Coggle requires JavaScript to display documents.

CC (Chapter 4 - Network Security, Chapter 1 - Security Principles, Chapter…

- - - - Limited geographical Area
    - - Remote Networks
  - - - Smarter than Hub.
      - Wired the devices that know the addresses of the devices connect to them.
      - Route traffic to that port/device rather than retransmitting to all devices
      - Create separate "broadcast" (one-to-many) domains when used to create VLANs
    - - Used to control traffic flow on networks.
      - Used to connect similar networks.
      - Wired or wireless.
      - connect multiple switches.
      - Smarter than Hub and Switches.
      - Determine the most efficient "route" for traffic to flow across networks.
    - - Used to connect multiple devices in network.
    - - Essential tools in managing and controlling network traffic.
      - Protecting the network.
      - Network device used to filter traffic. (based on defined set of rules)
      - Deployed between a private network and internet.
      - Deployed between departments (segmented networks) within an organization (overall network).
    - - Computer that provides information to other computers on a network.
      - Usually secured differently than workstations to protect the information they contain.
    - - Ends of a network communication link.
      - One ends is often at a server.
        
        Other end is often a client.
      - Such as server, laptop, mobile phone.
  - - - Session
        
        Logical ports such as NetBIOS
      - Presentation
        
        Image files
      - Application
        
        End user layer such as HTTP
    - - Network
        
        Routers sending packets such as IP, ICMP
      - Data Link
        
        Switches, bridges, WAPs sending frames
      - Physical
        
        Bits to frames
      - Transport
        
        TCP/UDP
  - - - Every network device
      - The first 3 bytes denote the vendor or manufacturer of the physical network interface.
      - No two devices can have same MAC address in the same local network.
    - - The Logical IP address represents the network interface within the network
      - Useful to maintain communications when a physical device is swapped with new hardware.
  - - - Networking
        
        Create/inserts packets.
      - Application
        
        Defines the protocols for the transport layer.
      - Datalink
        
        How data moves through the network.
      - Transport
        
        Permit data to move among devices.
    - - Telnet
      - File Transfer Protocol (FTP)
        
        Internet protocol that transfer files between hosts.
      - Simple Mail Transport (SMTP)
      - TCP
      - UDP
      - Domain Name Service (DNS)
        
        elements
        
        Physical Server
        
        Network Protocol
        
        Service
- - - - Configuration (IT System, IT Environment)
    - - Managing
    - - Hardware devices or security actions by people
  - - - used by governance teams to provide a framework
    - - put in place by organizational governance, such as executive management, to provide guidance in all activities
    - - issued in the form of laws, usually from government
    - - detailed steps to complete a task
  - - - Integrity
      - Availability
      - Confidentiality
- - - - List of the BCP team members
      - Immediate response procedures and checklists
      - Notification systems and call trees for alerting personnel
      - Contact numbers for critical members of the supply chain
      - Guidance for management
      - How/when to enact the plan
  - - - Full copies of the plan for critical disaster recovery team members
      - Department-Specific Plans
      - Checklists for certain individuals
        
        Recovery team members will have checklists to help guide their actions amid the chaotic atmosphere
        
        IT personnel will have technical guides helping them get the alternate sites up and running
        
        Managers and public relations personnel will have simple-to-follow
      - Executive Summary Providing a High-Level Overview of The Plan
      - Technical guides for IT personnel responsible for implementing and maintaining critical backup systems
  - - - Implement any necessary recovery procedures to restore security
      - Supervise the implementation of security measures necessary to improve security and prevent recurrence
      - Determine whether any confidential information was compromised
      - Determine the amount and scope of damage
- - - - Environmental Design
        
        Crime Prevention through Environmental Design (CPTED)
      - Badge Systems and Gate Entry
        
        Card types
        
        Bar code
        
        Magnetic stripe
        
        Proximity
        
        Smart
        
        Hybrid
      - Biometrics
        
        Primary Forms
        
        Physiological
        
        Such as fingerprint, iris scan
        
        Behavioral
        
        Such as voiceprints, keystroke
        
        Processes
        
        Verification
        
        Enrollment
    - - Camera
      - Log
      - Security Guards
      - Alarm Systems
  - - - Mandatory Access Control (MAC)
        
        only properly designated trusted subjects can modify any of the security rules within the system
        
        Passing the information to unauthorized subjects or objects
        
        Granting its privileges to other subjects
        
        Changing one or more security attributes on subjects, objects, the information system or system components
        
        Changing one or more security attributes on subjects, objects, the information system or system components
        
        Changing the rules governing access control
      - RBAC
        
        sets up user permissions based on roles
      - Discretionary Access Control (DAC)
        
        Grant its privileges to other subjects
        
        Change security attributes on subjects, objects, information systems or system components
        
        Choose the security attributes to be associated with newly created or revised objects
        
        Change the rules governing access control
        
        mandatory access controls restrict this capability
        
        Pass the information to other subjects or objects
        
        specific type of access control policy that is enforced over all subjects and objects in an information system
    - - Passwords
      - Biometrics (implemented on a system, such as a smartphone or laptop)
      - Badge/token readers connected to a system
  - - - Rules
        
        Compare multiple attributes to determine appropriate access.
        
        Allow access to an object.
        
        Define how much access is allowed.
        
        Deny access to an object.
        
        Apply time-based access.
      - Subjects
        
        The initiator of a request for service such as workstation, program, client
        
        Requests a service from an object.
        
        Is active: It initiates a request for access to resources or services.
        
        Should have a level of clearance (permissions) that relates to its ability to successfully access services or resources.
      - Objects
        
        Is anything that provides service to a user.
        
        Is passive.
        
        Responds to a request.
        
        May have a classification.
        
        Is a building such as a computer, a file, a database
    - - Privileged User Account
        
        Has the highest level of logging associated with actions.
        
        Should require the use of MFA.
        
        Often has the ability to create users and assign permissions.
        
        Has access to interact directly with servers and other infrastructure devices.
        
        Uses the most stringent access control.
      - Regular Account permissions
        
        Full-time Employee
        
        Temporary Employee
        
        Remote Employee
        
        Manager/Team Lead
        
        Part-time Employee
- - - - Destroy
      - Archive
      - Share
      - Use
      - Store
      - Create