CND

CND

1. Module 1: Computer Network & Defense Fundamentals

   • what is a computer network?
     • a group of computers connected together to share information & resources
   • What is the OSI Model?
     • standard reference model, which has 7 layers
       • 7. Applications
         • 6. Presentation
           • 5. Session
             • 4. Transport
               • 3. Network
                 • 2. Data Link
                   • 1. Physical
   • what is the TCP/IP Model?
     • a framework for the IP suite
       • 4. Application
         • 3. Transport
           • 2. Internet
             • 1. Network Access
               • Ethernet, FDDI, Frame Relay
             • IP, ICMP, ARP
           • TCP | UDP
         • FTP, SMTP, SNMP, DNS
   • Types of Networks
     • LAN
       • WAN
         • MAN
       • CAN
         • GAN
           • PAN
   • Topologies
     • Bus
       • Ring
         • Tree
           • Star
             • Mesh
   • Network Components
     • NIC: Interface Card
       • Repeater
         • Hubs
           • Switch
             • Firewalls
               • Bridges
                 • Routers
   • Protocols
     • DNS: maps IP to hostnames
       • TCP: connection-oriented
         • UDP: connectionless
           • IP: IPv4 | IPv6
             • ICMP: error reporting
               • ARP: maps IP address to MAC address
                 • Ethernet
                   • FDDI: Fiber Optical
   • IP Addressing
     • 32 bit binary, 0-255
       • Loopback: 127 - network testing
         • Broadcast: 255 - sends messages to all nodes
       • ICANN: assigns IP address
   • CND
     • CND Traid
       • Detection
         • Protection
         • Response
     • CND Attributes
       • Integrity
         • Confidentiality
           • Availability
             • Non-repudiation: can't deny
               • Authentication
     • CND Elements
       • Assest
         • Technology
           • Operations
             • People
     • CND Process
       • Protection
         • Monitoring
           • Dectection
             • Analyzing
               • Responding
     • CND Approaches
       • Preventive: easily avoids the presence of threats
         • Reactive: prevents the attacks
           • Retrospective: examines the reasons

2. Module 2: Network Security Threats, Vulnerabilities & Attacks

   • What is a Threat, Attack & Vulnerability?
     • Threat: an action that can compromise
       • Vul: weakness
         • Attack: an assault
   • why network security concerns arise?
     • hardware or software misconfigurations, poor network designs, technology weakness, careless end users
   • Types of Threats
     • Internal and External
     • Structured and Unstructured
   • Types of Vulnerabilities
     • 1. Technologies
       • HTTP, FTP, SNMP, OS Network devices
     • 2. Configuration
       • User, system accounts, Internet services misconfigurations, default passwords, device misconfigurations
     • 3. Policies
       • unwritten, politics, unawareness
   • Types of Attacks
     • 1. Reconnaissance
       • 1. ICMP
         • 2. DNS Footprinting
           • 3. Port Scanning
             • 4. Social Engineering
     • 2. Access
       • 1. Password
         • 1. Dictionary
           • 2. Brute Force
             • 3. Hybrid
               • 4. Birthday
                 • 5. Rainbow Table
                   • precomputed hash values
                 • cryptographic hash functions
               • dictionary but adds symbols and numbers
             • Combination of every character
           • dictionary files
         • 2. Network Sniffing
           • capturing data
           • 3. MiTM
             • 4. Replay
               • captures token
               • 5. Privilege Escalation
                 • 6. DNS Poisoning
                   • 7. DNS Cache Poisoning
                     • altering records in the DNS resolver
                     • 8. ARP Poisoning
                       • associates their own Mac with the victim's IP
                       • 9. DHCP Starvation
                         • floods the DHCP server with fake request
                         • 10 DHCP Spoofing
                           • rogue DHCP server providing fake IPs
                           • 11. Port stealing
                             • steals the Mac and IP of the victim
                             • 12. MAC Spoofing
                               • re-using the victim's Mac to receive traffic
                   • malicious server, redirected to fake website
     • 3. DoS
       • DDoS
         • Multitude of compromised systems
       • Prevents an authorized user from accessing
     • 4. Malware
       • 1. Virus
         • 2. Trojan
           • 3. Adware
             • 4. Spyware
               • 5. Rootkit
                 • 6. Backdoor
                   • bypass authentication checks
                 • enable access to software that isn't allowed
               • extracts users info
             • tacks browsing patterns
           • hidden malicious code
         • self-replicated program

3. Module 3 Network Security Controls, Protocols & Devices

   • Fundamental Elements of Network Security
     • 1. Controls
       • 2. Protocols
         • 3. Devices
   • Access Controls Mechanism
     • used to ensure Confidentiality, Integrity & Availability of network services
     • Access Control Terminology
       • 1. Subject: User
         • 2. Object: resources
           • 3. Monitor
             • 4. Operations: Action taken
   • Types of Access Controls
     • 1. Administrative
       • 1. Policies
         • 2. Procedures
           • 3. Supervisory
             • 4. Awareness | Training
               • 5. Testing
                 • 6. Job Rotation
                   • 7. Separation of Duties
                     • 8. Information Classification
     • 2. Physical
       • Locks
         • Biometric
           • CCTV
     • 3. Technical
       • 1. System Access
         • 2. Network Access
           • 3. Encryption
             • 4. Auditing
               • 5. Firewalls
                 • 6. Anti-Virus
     • Discretionary Access Control: user gets to decide how to protect
       • Mandatory Access Control: user is not permitted to decide how to protect
         • Role-Based Access
   • Identification
     • Authentication
       • Authorization
         • Accounting