Please enable JavaScript.

Coggle requires JavaScript to display documents.

Module 3: Network Security Concepts - Coggle Diagram

- - - - The virus hides by attaching itself to computer code, software, or documents on the computer. When opened, the virus executes and infects the computer.
    - - A Trojan horse is a program that looks useful but also carries malicious code. Trojan horses are often provided with free online programs such as computer games. Unsuspecting users download and install the game, along with the Trojan horse.
- - - - Password Attacks
        
        In a password attack, the threat actor attempts to discover critical system passwords using various methods.
      - Spoofing Attacks
        
        In spoofing attacks, the threat actor device attempts to pose as another device by falsifying data.
- - - - Confidentiality
      - Integrity
      - Availability
    - - VPN
      - ASA Firewall
      - IPS
      - ESA/WSA
      - AAA Server
    - - A system or group of systems that enforces an access control policy between networks. Click Play in the figure to see an animation of how a firewall works.
  - - - Cisco Email Security Appliance (ESA)
      - Cisco Web Security Appliance (WSA)
- - - - Securing DNS is often overlooked. However, it is crucial to the operation of a network and should be secured accordingly.
      - DNS attacks include the following:
      - DNS open resolver attacks
      - DNS stealth attacks
      - DNS domain shadowing attacks
      - DNS tunneling attacks
  - - - In the figure, a client broadcasts a DHCP discover message. The DHCP server responds with a unicast offer that includes addressing information the client can use. The client broadcasts a DHCP request to tell the server that the client accepts the offer. The server responds with a unicast acknowledgment accepting the request.
- - - - Guarantees that the message was not altered. Any changes to data in transit will be detected.
    - - Guarantees that the message is not a forgery and does actually come from whom it states.
        
        HMAC Hashing
        Algorithm
        
        Creating the HMAC
        Value
        
        Verifying the HMAC
        Value
        
        Cisco Router HMAC
        Example
    - - Guarantees that only authorized users can read the message.
        
        Symmetric Encryption
        
        Symmetric algorithms use the same pre-shared key to encrypt and decrypt data. A pre-shared key, also called a secret key.
        
        Asymmetric Encryption
        
        Asymmetric algorithms, also called public-key algorithms, are designed so that the key that is used for encryption is different from the key that is used for decryption
    - - Guarantees that the sender cannot repudiate, or refute, the validity of a message sent.
    - - MD5 with 128-bit Digest
      - SHA Hashing Algorithm
      - SHA-2
      - SHA-3