GoConqr hat ein neues Design! Sag uns, wie es dir gefällt.

Kostenlos registrieren

Karteikarten

Network Security Flash Cards

Allison Mernka Information Security CISSP Englisch 200 Karten

Karten in diesem Stapel (200)

  1. 1PacketA block of data that is passed between layers
  2. 2Packet HeaderThe part of the packet that is added by a layer to enable the protocol to function
  3. 3ProtocolA set of rules that govern the interaction between two peer layers in the network architecture. It is used to carry out the functions of the layer.
  4. 4ReassemblyA function provided by a layer that combines packets that were segmented by a peer layer back into the original data element.
  5. 5RouterA network device that is responsible for moving data from one network to another network. This device understands the path the data needs to take to get from the sender to the receiver.
  6. 6SegmentationA function provided by a layer that divides the data received from an upper layer into multiple smaller data elements.
  7. 7Service Access Points (SAPs)The set of services provided by a network layer. These services are often defined as a series of subroutine calls.
  8. 8Network LayerA functional component of a network architecture that has a defined set of inputs and outputs and provides a set of functions that aid in the operation of the network.
  9. 9MultiplexingWhen a layer provided SAPs to multiple upper layer and in turn only uses SAPs from one lower layer to send and receive the packets for the multiple upper layers.
  10. 10Layered Network FunctionsA set of operations provided by a layer in coordination with its peer layer on another device in the network designed to provide network services. Functions enable the services provided by the layer to work and rely on the services provided by the lower layer.
  11. 11Flow ControlA function provided by a layer that will slow the sender's packet transmission rate when the receiver starts to get behind.
  12. 12Error ControlA function provided by a layer that will detect and try to correct packet loss and packet corruption.
  13. 13EncapsulationAdding layer headers to the data to create a new packet.
  14. 14Connection OrientedBefore data can be transferred, the two communicating parties must agree to communicate by establishing a connection.
  15. 15ConnectionlessNo connection is needed to transfer data.
  16. 16UserThe individual using a computer application that utilizes the network, or a general computer user.
  17. 17TargetThe device, host, user, or object that the hacker is trying to attack.
  18. 18Network DeviceA device connected to the network. This is more generic than a host or computer in that it can be any network-enabled device.
  19. 19NetworkA group of interconnected devices that can communicate with each other.
  20. 20InternetA global collection of networks of interconnected network devices.
  21. 21HostA term used to describe a computer connected to the Internet.
  22. 22HackerSame as an attacker
  23. 23AttackerA person or persons that use the network to attack computer systems, networks, or other devices connected to the Internet.
  24. 24ApplicationA computer program that allows a user to connect to the network and perform a task.
  25. 25Protocol DiagramA diagram used to show the interaction between two entities using a protocol. The diagram shows the information flow and the timing between information exchanges.
  26. 26FrameThe name used to describe the packet used by the data link layer in the OSI networking model.
  27. 27Nonlayered ServicesUsed to describe network services that need access to one or more layers directly, without using other layers. Often used in network management.
  28. 28OSI ModelA seven-layer model that describes the high-level functions that should be provided by each of the layers that make up a complete network implementation.
  29. 29TCP/IP ModelA four-layer model that describes the high-level functions that are implemented to support the Internet.
  30. 30User SpacePrograms that run in user space have the same access rights as the user that is running them, which can limit the access the program has to system files.
  31. 31EthernetA standard maintained by the Institute of Electrical and Electronics Engineers (IEEE) that describes the common local area network used by most computers today.
  32. 32Open-source protocolA protocol specification that is made public and is often reviewed and discussed by many people before adoption.
  33. 33Proprietary protocolA protocol specification that is not public
  34. 34Protocol SpecificationA document that describes the services, functions, packet formats, and other information needed to implement a protocol layer
  35. 35Request for Comment (RFC)A protocol standard that is created by individuals or groups associated with the Internet Engineering Task Force (IETF)
  36. 36StandardA protocol specification that has gone through a process of review and verification and then is published so multiple vendors can use it to interoperate.
  37. 37American National Standards Institute (ANSI)A private organization whose membership is made up of professional societies, government groups, and other associations. It develops standards that help groups compete in the global market. (http://www.ansi.org)
  38. 38Institute of Electrical and Electronics Engineers (IEEE)An international professional society that creates international standards in many different areas. (http://www.ieee.org)
  39. 39International Standards Organization (ISO)A group whose membership is standards committees from across the world. ANSI represents the United States on ISO (http://www.iso.org)
  40. 40International Telecommunications Union-Telecommunications Standards Sector (ITU-T)A group created by the United Nations that creates standards primarily for the phone system (http://www.itu.int)
  41. 41Internet Engineering Task Force (IETF)This group develops standards for the Internet and consists of members from various organizations and is open to any person that has an interest. (http://www.ieft.org)
  42. 42AddressUsed to identify a computer, network device, application, protocol layer, or any other entity within a network.
  43. 43Application AddressThe address used to identify and distinguish between different network applications running on a computer.
  44. 44Domain Name Service (DNS)A system used to convert the name of a computer on the Internet to the address of the computer.
  45. 45Dynamic AddressAn address that can change and is often obtained during system start-up, or by asking a third party.
  46. 46Hardware AddressThe address used to identify the hardware interface connected to the physical network.
  47. 47Internet Service Provider (ISP)An organization, typically for profit, the provides access to the Internet for commercial or private users.
  48. 48Port NumberAn address used to identify an Internet application within a computer system. The port number is the name given to the application address in the Internet.
  49. 49Static AddressAn address that does not change unless someone changes it. This address is often set during the initial configuration of the computer system.
  50. 50Fixed Form Packet HeaderA packet header where the fields are fixed in both location and size within the header.
  51. 51Freeform HeaderA header where the data is not in a fixed format, and therefore the header must be interpreted.
  52. 52Packet PayloadThe data part of the packet, where the data is defined as the information received or sent to the upper layer.
  53. 53Address SpoofingChanging the source address of the packet to a value that does not belong to the device that is sending the packet.
  54. 54Domain NameThe name of an organizational unit that consists of one or more networks with one or more hosts attached. Must be unique within the Internet.
  55. 55Domain Name Service (DNS)A collection of distributed servers that is responsible for converting full domain names into IP addresses.
  56. 56Full domain nameThe combination of the host name and domain name used to create a unique device identifier within the Internet
  57. 57Host NameThe name of the device in a domain. Must be unique within the domain
  58. 58IP AddressThe address used to uniquely identify every device on the Internet
  59. 59NetmaskA 32-bit value that is used to indicate which part of an IP address represents the network and which part represents the host.
  60. 60Network layer IDAn identifier place in the header of the physical network layer to indicate which upper-layer protocol is contained in the payload
  61. 61SubnetThis occurs when a range of IP addresses are divided into multiple networks using a router.
  62. 62Default RouteThe route that is taken when the destination address does not match any of the destinations in the route table.
  63. 63Dynamic RouteA route table or route table entry that changes based on external information obtained using special protocols.
  64. 64Route TableA list of possible destinations for a packet to be sent by a device. The destinations are typically either a device or a router.
  65. 65RoutingThe act of moving packets from one device to another through a series of networks interconnected with routers.
  66. 66Static RouteA route table or entry in a route table that only changes when the system is configured or reconfigured.
  67. 67ClientThe application that initiates the connection to a waiting server.
  68. 68Connection 4-tupleFour addresses that uniquely identify each connection in the Internet. It consists of the source and destination IP addresses and the source and destination port numbers.
  69. 69Ephemeral PortThe port number provided by the operating system typically to a client as its source port number
  70. 70Listening PortThe port number used by a server application to wait for a connection from a client
  71. 71ServerThe application that waits for a client application to connect with it. Typically provides services to the client.
  72. 72SocketA connection between the application layer and the TCP layer that allows a server to specify the IP address and port number to wait on, and allows a client to specify the destination IP address and port number.
  73. 73Well-known portThe same as the listening port, but a port number that is the default port number of the server application and is known by all client applications that interact with the server. For example, port 80 is the well-known port for web traffic.
  74. 74Attack CodeA program or other implementation of an exploit used to attack the vulnerability in a system.
  75. 75AttacksThe use of the attack code against a device
  76. 76ExploitA method to take advantage of the vulnerability in a device; the method has not been implemented
  77. 77ImpactA measure of what would happen if the device or object was compromised as the result of a security breach
  78. 78RiskA measure of how critical something is based on several metrics
  79. 79Risk AssessmentA process or procedure to determine the level of risk associated with a device or object.
  80. 80ThreatA measure of how likely it is that a device or object will be attacked
  81. 81VulnerabilityA weakness in a protocol, application, or other aspect of the network that can be used to attack the device.
  82. 82Zero-day ExploitWhere the attack code is used to attack a system before the vulnerability or exploit is known outside the developers of the attack code.
  83. 83AuthenticationProof of identity
  84. 84Authentication-based vulnerabilityA vulnerability in the authentication between applications, hosts, or network layers
  85. 85Broadcast PacketA single packet that can be sent to every host on a network.
  86. 86Header-based vulnerabilityA vulnerability caused by an invalid header or invalid values in the header
  87. 87Host-to-host authenticationWhen an application, host, or network layer proves its identity to another application, host, or network layer.
  88. 88Host-to-user authenticationWhen an application, host, or network layer proves its identity to a user.
  89. 89PingA name given to a protocol that is used to query a device on the network to see if it will respond.
  90. 90Ping of DeathA well-known header-based attack that uses invalid values in the header of a ping packet
  91. 91Protocol-based vulnerabilityA vulnerability using valid packets in a way that violates the protocol between layers.
  92. 92SYN flood attackA well-known attack that violates the three-way handshake, which disables network access for the target system.
  93. 93Three-way handshakeAn exchange of three packets between a client and server that is often used for establishing a connection.
  94. 94Traffic-based authenticationA vulnerability based on the network traffic volume or capturing of network traffic.
  95. 95User-to-host AuthenticationWhen a user proves his or her identity to an application, host, or network layer.
  96. 96User-to-User AuthenticationWhen one user proves his or her identity to one or more other users.
  97. 97EthernetThe most common protocol used in a local area network. Ethernet defines the physical medium and the method that multiple devices can use to share the physical media
  98. 98Hardware Address SpoofingCreating packets with a source hardware address that is different than the source address of the sending device. Often the spoofed address is the same as another device on the network.
  99. 99Network Access ControllerThe hardware part of the network device that interfaces the device with the physical network.
  100. 100Network SniffingCapturing the packets on a network independent of their destination address. When a device is configured for this, it is placed in what is often called a promiscuous mode.
  101. 101Wired NetworkA network of devices that are interconnected using physical cabling that can be twisted pair, coaxial cable, fiber optics, etc.
  102. 102Wireless NetworkA network of devices that are interconnected using a transmitter and receiver that operate in free space. The most common transmission method is radio waves. Other methods include microwave and light.
  103. 103Broadcast AddressAn address used to send a packed to all devices within a network.
  104. 104Broadcast DomainThe set of devices that can receive a broadcast address from a device within the same domain.
  105. 105CSMA/CDCarrier Sense Multiple Access with Collision Detection. The protocol used by Ethernet to manage access to the shared media. Often called a "listen before talk" protocol b/c device waits for silence on the network before talking, and if multiple devices talk at once, they all quit and wait until the media is free again.
  106. 106Collision DomainThe set of devices that can be part of a give Ethernet collision
  107. 107EthernetA local area network protocol used to allow multiple devices to share access to the same physical network. The protocol was developed in 1973 and is the most widely used LAN protocol.
  108. 108Ethernet HubA network device that is used to interconnect Ethernet devices using twisted pair cabling. This creates a large shared network.
  109. 109Ethernet SwitchA network device that is used to interconnect Ethernet devices. This treats each connection (called a port) as a separate Ethernet collision domain. A switch will only send traffic to the port where the destination device is located, thus reducing the overall traffic to each device.
  110. 110Ethernet TapA device that sits between two Ethernet devices and copies all traffic onto another Ethernet segment. This can only read traffic.
  111. 111Hardware Address DomainThe set of devices that are interconnected via a network where the hardware addresses need to be unique in order to identify each possible device.
  112. 112Local Area NetworkA network of devices within a small space, typically a room or a small number of rooms. Interconnected via routers.
  113. 113Multicast AddressAn address used to send a packet to a group of devices.
  114. 114Promiscuous ModeA state in which a hardware controller can be placed to force it to read all packets that appear on the network. Used for sniffing of network traffic.
  115. 115Spanning or Mirrored PortA port on an Ethernet switch that is designed to allow monitoring of traffic. The switch will copy traffic from one or more standard ports to this port.
  116. 116Unicast AddressAn address used to identify a single device. Always used as a source address.
  117. 117Wide Area NetworkWAN - A network typically used to interconnect LANs. These networks span a larger geographic area.
  118. 118Access PointA wireless device that connects other wireless devices to a wired network. The wireless devices share the media under the control of the this.
  119. 119Access Point AutheniticationProving the access point is the correct one.
  120. 120Access Point Configuration AuthenticationAuthorizing access to the control software of the access point.
  121. 121Ad hoc wireless networkA wireless network where each device is a peer, and they create a network among themselves.
  122. 122CSMA/CACarrier Sense Multiple Access with Collision Avoidance. This protocol is used by wireless Ethernet protocol to allow multiple devices to share access to the media.
  123. 123Fake Access PointAn access point set up by an attacker to mimic the access points installed within an organization
  124. 124Hidden rogue access pointA rogue access point that is not broadcasting its SSID.
  125. 125JammingTransmitting signals to interrupt the communications between an access point's wireless devices.
  126. 126Rogue Access PointAn access point that is installed inside a network without the knowledge of the organization.
  127. 127SSIDService Set Identifier. This is a name used by the access point to identify the network. The access point will use the SSID to know which network a wireless device wishes to connect to.
  128. 128WardrivingUsing a wireless computer and software to find wireless access points and logging the SSID, access point type, and location of the computer when the access point is found.
  129. 129WEPWired Equivalent Privacy. A protocol designed to provide authentication and encryption between an access point and wireless device. It uses a shared key.
  130. 130Wireless device authenticationProving the wireless device wishing to connect with the access point is authorized to use the access point.
  131. 131Wireless RouterAn access point that is connected to a router. Together they create a wireless network that is separated from the wired network via a router.
  132. 132WPAWi-Fi Protected Access. A protocol designed to provide authentication and encryption between an access point and wireless devices. The authentication is based on shared information, but the encryption key is negotiated for every association.
  133. 133VLANVirtual Local Area Network. A system using switches to segregate devices into separate local area networks even when they share switches.
  134. 134Dynamic VLANA VLAN where the virtual local area networks are created based on information provided by the devices. Typically this is the hardware address of the device.
  135. 135NACNetwork Access Control. A system where access to the network is controlled and is based on user authentication, system configuration information, or both. Unauthorized devices are either denied access to the network or are segregated into isolated networks.
  136. 136Static VLANA VLAN where the virtual local area networks are created based on the network ports of the switches and often do not change.
  137. 137Internetwork LayerA network layer that is common across all devices connected to the same global network. An example is the IP layer in the Internet
  138. 138Network Access LayerA network layer that is used to connect devices or networks to a private end-to-end network.
  139. 139Private end-to-end NetworkA network controlled and managed by a single organization like a telephone company. Access to the network is controlled along with the physical devices that comprise the network.
  140. 140ARP Cache PoisoningWhen an attacker uses ARP spoofing to put bogus values in the victims ARP table
  141. 141ARP SpoofingWhen an attacker detects an ARP request packet on the network and responds pretending to be the host with the IP address in question.
  142. 142Classless Interdomain Routing (CIDR)Like a netmask, but uses a number to indicate the number of bits in the network like part of the address.
  143. 143Default NetworkThe network where all packets are sent when the destination IP address does not appear in the router table.
  144. 144Direct NetworkThe network the device is connected to, and therefore it is responsible for delivering any packets to devices on the direct network.
  145. 145IP Loopback AddressThis is a reserved address (127.0.0.1 typically) that is used to test the internal IP protocol stack. A packet sent to this address is returned to the application by the IP stack. This address is not a valid address for packets on the network.
  146. 146IP SpoofingSending a packet with a false IP source address.
  147. 147NetmaskUsed to indicate which part of the IP address represents the network. For example, 255.255.255.0 indicates the first 24 bits identifying the network.
  148. 148Next-door networkNetwork that appears in the routing table, and therefore the device knows which router to send the packet to.
  149. 149PingA program that sends and receives ICMP echo packets and is used to determine if a device is active on the network.
  150. 150Route TableEvery device on the Internet has this and it is used to determine where to send the packet next to get it to the destination.
  151. 151SubnetworksWhen a network is divided into smaller networks using routers, the resulting smaller networks are called subnetworks of the larger network.
  152. 152TracerouteA program that determines the IP addresses of the routers used to get a packet from the source to the destination.
  153. 153DHCP LeaseAn IP address is given to a client for a period of time called a lease time. The client must request renewal of the address before the lease time has expired.
  154. 154Dynamic DHCP PoolA set of IP addresses that are assigned to any device that requests a packet.
  155. 155Rogue DHCP ServerA DHCP server that answers DHCP requests and provides invalid answers.
  156. 156Static DHCP PoolA set of IP addresses that are assigned to devices based on their hardware address.
  157. 157IPv6 Base HeaderThe primary header for IPv6 that is used by the routers to move the packets through the Internet.
  158. 158IPv6 Extension HeaderA header used to identify the payload of the IPv6 packet. There may be multiple of these headers in a packet.
  159. 159Provider-based IPv6 AddressThe primary IPv6 address format for the Internet.
  160. 160DMZA network that is outside the security perimeter.
  161. 161IP address blacklistA list of IP addresses to be blocked by the router.
  162. 162IP FilterA process carried out by the routers of filtering-out packets based on the contents of the IP header and some of the transport header.
  163. 163NAT TunnelA method to allow inbound packets to be routed to internal devices inside the private network.
  164. 164Private NetworkA network whose address range is one of the three reserved private addresses ranges. A NAT is needed to connect the private network to the Internet.
  165. 165Sacrificial HostsHosts that sit outside the security perimeter.
  166. 166Passive network filterA device that sniffs traffic from the network and will insert packets to either hijack a connection or terminate a connection based on criteria set by the user. Often used to filter web requests.
  167. 167TCP Abrupt Connection TerminationA connection that is terminated with possible loss of data
  168. 168TCP Graceful Connection TerminationA packet exchange that causes the connection to close without any loss of data.
  169. 169TCP MultiplexingTCP allows multiple applications to share the IP protocol stack by assigning a port number to each application.
  170. 170TCP Port NumberA unique number assigned to each application using the TCP layer on a given device.
  171. 171TCP Session HijackingWhen an open TCP connection is taken over by a third party and one side of the connection is terminated and the third party pretends to be the device whose connection was terminated.
  172. 172TCP SocketA combination of the port number assigned to the application and the IP address of the device creates a socket.
  173. 173TCP Three-Way HandshakingA three packet exchange that consists of a request, a response with acknowledgment, and an acknowledgment.
  174. 174DNS Cache PoisoningSending false information to a DNS server or to a resolver to get it to put that information into the cache. This will cause future requests to return the false information
  175. 175DNS ResolverThe client process that sends a query to the DNS server.
  176. 176DNS ServerThe application that handles requests and returns the IP-to-name or name-to-IP mapping.
  177. 177Domain Name SpaceA hierarchical naming convention used to uniquely identify devices within the Internet.
  178. 178Fully Qualified Domain Name (FQDN)A domain name that includes every label from the root to the final device.
  179. 179Partially Qualified Domain Name (PQDN)A domain name often used within a domain that contains only part of the FQDN. It is typically used by a device within the domain to identify other machines in the domain.
  180. 180Email RelaySending email messages with a new return address that matches the return address of the organization's email server. This allows multiple internal MTA's and clients look like they are using just one MTA
  181. 181Email SpoofingThe process of creating an email message where the sending address is not the same as the address of the actual sender.
  182. 182Message Transfer Agent (MTA)The application that handles the reception and delivery of email messages. Its operation is similar to the postal system.
  183. 183Simple Mail Transfer Protocol (SMTP)The protocol used to transfer email messages between MTAs and from an email client to an MTA.
  184. 184User Agent (UA)The name given to the client application that is used to create and read email messages
  185. 185Internet Message Access Protocol (IMAP)A protocol used by a user agent to transfer email from an MTA to the user computer. It also allows for the creation and maintenance of mailboxes on the MTA.
  186. 186Post Office Protocol (POP)The protocol used by a user agent to transfer email from an MTA to the user's computer.
  187. 187Email BugA method of embedding a link to a web site inside an email message to enable the sender to see if the email was opened.
  188. 188MIME Transfer EncodingThe encoding method used by MIME to convert the non-ASCII data to ASCII text.
  189. 189Multipurpose Internet Mail Extensions (MIME)A message format used to support nontext content in email messages.
  190. 190Email BlacklistA method of filtering email where the filter maintains a list of bad email servers.
  191. 191Email Content FilterA method of filtering email where the filter examines the contents of the email and determines if the email should be filtered, altered, or quarantined.
  192. 192Email FilterA device that examines email messages and determines if the email should be delivered or modified based on a set of rules.
  193. 193Email ForensicsA process of analyzing email headers to determine the actual sender of the email messages.
  194. 194Email GreylistA method of filtering email where all unknown incoming email messages are temporarily rejected until they retry. This is designed to stop programs that send email messages without the use of an MTA.
  195. 195Email PhishingEmail messages that are designed to trick the reader into providing information to the attacker.
  196. 196Email WhitelistA method of filtering email where the filter maintains a list of good email servers that it will only accept email from, called a whitelist.
  197. 197PGP EmailA method to encrypt and sign email messages between users.
  198. 198HTTPSAn encrypted version of the HTTP protocol that uses Secure Socket Layer (SSL)
  199. 199HyperinkA URL that is embedded inside a web document
  200. 200Hypertext Transfer ProtocolHTTP - The protocol used by the World Wide Web to transfer data to and from the web servers.

Informationen

Beschreibung
CISSP Information Security Karteikarten am Network Security Flash Cards, erstellt von Allison Mernka am 27/08/2021.
Erstellt von
Allison Mernka · Aug 2021
Aktualisiert
14 Dez 2021
Aufrufe
2
Bewertung

Feedback

Worum geht es?

Wie gefällt dir das neue Design?

Dein Eindruck