CCNA 3 - Capitulo 3

CCNA 3 - Capitulo 3

1. NETWORK SECURITY CONCEPTS

   • SECURITY TERMS
     • VULNERABILITY
       • WEAKNESS
         • SYSTEM
         • DESIGN
       • EXPLOITED By THREAT
     • THREAT
       • POTENTIAL DANGER
         • ASSETS
         • DATA
         • NETWORK FUNCIONALITY
     • EXPLOIT
       • MECHANISM THAT TAKES ADVANTAGE
         • VULNERABILITY
     • MITIGATION
       • COUNTER MEASURE
         • REDUCES LIKEHOOD
           • SEVERITY OF A POTENTIAL THREAT OR RISK
     • RISK
       • LIKELIHOOD
         • OF A THREAT EXPLOIT
           • VULNERABILITY
     • ASSETS
       • VALUE OF THE ORGNIZATION
         • PEOPLE , EQUIPMENT
         • RESOURCES ; DATA
   • COMMOM VECTOR OF NETWORK ATTACKS
     • INTERNAL USER - EMPLOYEE
       • CAUSE MORE DAMAGE THAN EXTERNAL THREATS
         • STEAL AND COPY CONFIDENTIAL DATA TO
           • REMOVABLE MEDIA, EMAIL, MESSAGING SOFTWARE ...
         • COMPROMISE INTERNAL SERVERS OR NETWORK
         • DISCONNECT A CRITICAL NETWORK CONNECTION AND
           • CAUSE A NETWORK OUTAGE.
         • CONNECT AN INFECTED USB DRIVE CORPORATE COMPUTER
     • WHATS IS A VECTOR ATTACK ?
       • PATH CAN GAIN ACCESS SERVER , HOST OR NETWORK
         • FROM INSIDE OR OUTSIDE
     • DATA LOSS
       • DATA LOSS OR DATA EXFILTRATION
         • DATA IS INTENTIONALLY OR UNINTENTIONALLY
           • LOST , STEOLEN OR LEAKED
       • DATA LOSS VECTOR
         • EMAIL OR SOCIAL NETWORKING
           • COULD BE INTERCEPTED OR CAPTURED
             • REVEAL CONFIDENTIAL INFORMATION
         • UNENCRYPTED DEVICES
         • CLOUD STORAGE DEVICES
           • WEAK SECURITY SETTINGS
         • REMOVABLE MEDIA
           • UNAUTHORIZED TRANSFER DATA TO A USB DRIVE
         • HARD COPY
           • SHEREDDED WHEN NO LONGER REQUIRED
         • IMPROPER ACCESS CONTROL
           • PASSWORD OR WEAK PASSOWED CAN PROVIDE EASY ACCESS CORPORATE DATA
       • RESULT IN DATA LOSS ?
         • BRAND DAMAGE
         • LOSS OF
           • REPUTATION
           • COMPETITIVE ADVANTAGE
           • CUSTOMERS
           • REVENUE
         • LITIGATION / LEGAL
           • RESULTING IN FINES AND CIVIL PENALTIES
       • DATA LOSS PREVENTION (DLP) MUS BE IMPLEMENTED
   • THREAT ACTOR (HACKER TYPE )
     • WHITE HAT
       • LEGAL PURPOSES
         • ARE REPORTED VULNERABILITIES TO FIX
     • BLACK HAT
       • CYBER CRIMINALS
       • COMPROMISSE COMPUTER FOR PERSONAL GAIN OR MALICIOUS REASONS
     • GRAY HAT
       • VULNERABILITY BROKER
         • DISCOVER EXPLOITS AND REPORT PRIZES OR REWARDS
           • MANAFACTURES
           • VENDOR
       • HACKTIVISTS
         • PUBLIC PROTEST ORGANIZATIONS OR GOVERNMENTS
           • POSTINGS , ARTICLES AND VIDEOS
         • EX : ANONYMOUS , SYRIAN ELETRONIC
       • UNETHICAL THINGS BUT
         • NOT FOR PERSONAL GAIN ; MALICIOUR REASONS
       • MAY DISCLOSE A VULNERABILITY
         • TO AFFECTED ORGANIZATION
     • SCRIPT KIDS
       • INEXPERIENCED ; RUNNING SCRIPTS
     • STATE SPONSORED
       • STEAL
         • GOVERNMENT SECRETS , GATHER INTELLIGENCE ,
           • EX : STUXNET MALWARE IRAN's NUCLERA
       • TARGETS
         • TERRORIST GROUPS AND CORPORATIONS
       • ZERO DAY VULNERABILITIES
       • COULD IT BE
         • WHITE HAT
         • BLACK HAT
     • OLD ATTACKS
       • WAR DIALING
       • PHREAKING