Please enable JavaScript.

Coggle requires JavaScript to display documents.

security fundementals - Coggle Diagram

- - - - the posibisity of something bad happening
      - fire, flood, natural desasters
      - hackers
      - users
      - technical falure of hardware or software
      - Common Security threats
        
        Attacks that spoof addresses
        
        ARP
        
        DNS
        
        DHCP
        
        DoS - Denile of Servise
        
        Reflection and Amplification
        
        reconnaissance attocks
        
        buffer overflow
        
        malware
        
        human vuln - social engineering
        
        phishing
        
        spear
        
        whaling
        
        pharming
        
        wattering hole
        
        password vulnerabilities
      - Types of attackers
        
        white hact
        
        black hat
        
        grey hat
        
        phreaker
        
        script kiddy
        
        ...
- - - - installing unauthorized devices
      - downloading and installing malicious software
      - using weak or nonexistent password
    - - Comprehensive list of job roles
      - level of training required for each role
      - delivery mechanism
      - Frequency of delivery
    - - Posters showing threats and countermeasurs
      - newsletters and blogs describing emerging issues and best practices
    - - Veryfy that training is effective
      - Identify gaps...
  - - - natural events
        
        fire
        
        flood
        
        etc
      - Deliberate or accidental events
      - unauthorized access
  - - - Making sure the user is who they say they are
    - - verifies en entity's identity
      - assigns tha appropriate permissions
      - logs every transaction to provide an audit trail
    - - What the user can do
    - - logging what they are doing
  - - - ACL's can be configed to use
        
        cource ip address
        
        destination IP address
        
        ICMP message type
      - The ACL can also extract upper layer info and test it agenst rules
        
        ...
    - - Per protocol
      - Per interface
      - per direction
    - - Work at layer 3 with IP addresses only
      - Access-list deny 192.168.13.0 0.0.0.255
      - list numbers 1-99 and 1300-1999
    - - Filters at layer 3 and 4
      - source, or destination IP...
      - access-list 100 deny tcp any host 172.16.30.2 eq 23
      - Extended list numbers 100-199 and 2000-2699
      - eq - equal to port number
    - - ip access-list standard nameOfList ...
  - - - sits in the forwarding path of tall packets
      - makes decisions what packets get through or not
      - similar to ACL on a router but hove more options
      - firewall fetures
        
        ...
- - - - switchport port-security mac-address [MAC ADDREESS] interface
    - - learned, or manually set, stored in the address table, and added to the running config. Can be saved to the NVRAM
    - - Only be static access ports or trunk ports not a dynamic access port
      - cannot use a secure port as a destination port for port mirrining also known as SPAN
      - Secure prot can't belong to a fast etherchannel or gig etherchannel prot group
      - Static or sticy ...
  - - - All devices connect to a layer 2 device
      - Function needs to be pereformed between a DHCP client and end device and the DHCP server
    - - Turn on DHCP snooping
        
        ip dhcp snooping
      - tell witch VLAN to snoop on
        
        ip hgtp snooping vlan [vlan-id]
      - tell wich port to trust
        
        config-if# ip hgtp snooping trust
      - option configuration
        
        config# no ip snooping information option
        
        this turns off the DHCP option...