Karteikarten
IT Security
Karten in diesem Stapel (46)
- 1Why Hackers Do ITProfit
Notoriety
Religion/Ethics
Angry
Because it is there. - 2CompromiseGaining access when non was available
- 3ExpoitAnything that can be used to compromise a machine.
- 4Exploit categoriesInternet
LAN/WAN
Local
Offline
Theft
Deception - 5Hacker Attack processReconnaissance
Exploiting the system
Uploading /Installing Programs
Downloading data
Access
Cover Tracks - 6Defense in Depth MethodsSecurity Audit
Physical Security
Protect Sensitive info
Policies, consequences , enforcement - 7Active ReconnaissanceTest for vulnerabiities without setting off alarms.
- 8Protection MechanismsNetwork
Host
Application
Storage
User - 9OSINTOpen Source Intelligence
What is available publicly - 10Threat Agents InternalEmployees
Management
Administrators
Developers
Engineers
Technicians
Contractors... - 11Threat Agents ExternalBusiness Partners
Competitors
Contractors
Suppliers
Nation States
Organized Crime
Hacktivists
Script Kiddies - 12Passive attacksSniffiing for passwords, network traffic, sensitive info
- 13Active AttacksDenial of Service
Breaking into a site
Information Warfare - 14SANS Threat Mapprocess to determine method used
- 15Defense in Depth definedProcess to minimize the probability of malicious hacker success
- 16Defense in Depth ComponentsAntivirus
Firewalls
Anti spyware
... - 17OpsecOperational Security
- 18Security TypesSystem
Communication
Physical
Safety - 19Security attack SurfacesNetwork
Software
Human - 20Risk Management or Threat Risk AssessmentProcess
Preparation
Asset identification
Threat Assessment
Risk Assessment - 21VulnerabilitiesPhysical
Natural
Hardware / Software
Media
Emanations(wireless)
communications
Human - 22Defens in Depth Uniform protectionfiewall seperation
- 23Defense in Depth Protected Enclavessubdividing the internal network into zones and protecting each zone
- 24Defense in Depth Information Centricinform others and centralize data for others to access as required
- 25Defense in Depth Threat Vector AnalysisIdentify asset to protect
Analyse potential threats for access - 26RBAC Role based Access ControlAssigned roles for access to specific tasks required to be performed
- 27Configuration ManagementKeep track of all IT related configurations and put tools in place to notify if changes occur.
- 28Vulnerability testing toolsDumpSec
MBSA (Microsoft Baseline Security Analyzer)
Nessus
Seccubus
GFI Languard
Meta Sploit - 29Types of PoliciesProgram
Issue Specific
System Specific - 30Policies includePurpose
Related Documents / References
Cancellation / Expiration Documents
Background
Policy Statement
Responsibility
Action - 31Good Policy SMARTSpecific
Measurable
Achievable
Realistic
Time Based - 32Internet & Network Security TermsPerimeter
Border Router
Firewall
IDS - Intrusion Detection System
VPN
Software Architecture
DMZ - 33Internet & Network Security Types of AttacksSpoofing
Sessin Hijacking
Denial of Service
Buffer Overflow
Open Port
Password
Misconfig of system
Social Engineering
Human element... - 34Firewall TypesDedicated network Apliances
Add-ons
Software - 35SIEMSecurity Information and Event Management
Collects data to analyze trends.
Centralised
fulfills legal obligation - 36XMAS AttackOS Determining
- 37IDSIntrusion Detection System
(SNORT)
Types
Network / Host
NIDS / HIDS - 38Types of proxiesReverse
Application
Circuit-Level (Gateway) - 39Reverse ProxySecure content server to outside clients
- 40Application ProxyClient / Server programs implemented for each service
- 41Circuit Level ProxyTraffic blocked unless pre-established
Feature of most NAT applications - 42Proxy ToolsSocks
IPSEC
SSL - 43Honey PotsFake system to trap hackers and analyse weakness in setup.
Not legal for prosecution.
Designed to be the victim for attacks. - 44Intrusion Prevention SystemsCan be network or host based
Mix of different tech. - 45UTMAll in one protection.
If it goes down you have no protection. - 46HRIDSHuman Resources IDS
Used to spy on employees