Flashcards
Security + Defionitions part 2
Cards in this deck (60)
- 1What is EAP MD5Basicalley MSCHAP. Takes the passwords and hashes them into a MD5 hash.
- 2Types of Authentication for Network Access ControlEAP MD5
EAP PSK - 3What is EAP PSK in terms of Network Access Controls?A system of authentication that uses pre determined symmetric keys
- 4What is EAP TLS in terms of Network Access Controls?Handles authentication, but requires a server that uses certificates
TLLS means only server has the certificate. - 5What is 802.1XFull blown authentication standard between a client system or supplicant and network.
- 6What is a statefull vs. stateless firewallStateless will filter and block no matter the situation which creates an ACLS (Access control lists) and implicit denial . Statefull firewall looks at the data flow and makes decisions .
- 7Forward Proxy Servers?Proxy: something running a on a computer that acts as an intermediary between two different devices having a session.
Forward Proxy: Client>Proxy>Firewall>Internet> Server
Must attempt to protect the client
VPNs - 8What are proxies for?A filtering system that works at the application level.
- 9Reverse Proxy ServerServer > Proxy > Firewall > Internet > Client
Protects the server
High Security
Handle DOS attacks
Load Balancing
Caching
Encryption Acceleration - 10What does a VPN do?Directly connects into the network from a remote, fully functional. It keeps the actual computer within the same network, IP, and Broadcast. It 'part' of the network. Shares same IP Address. Generally pretty slow because all data is routed through the VPN, unless you are split tunneling.
- 11What is L2TP or Layer 2 Tunneling ProtocolCisco proprietary
uses IPsec encryption and uses UDP ports 500, 4500 - 12What is OpenVPN ProtocolCreates a unique tunnel with SSL/TLS Protocol. Port 1194
- 13What are IPSEC headers?[AuthenHeader]-[TCP]-[Data]-[IP Address]
Provides authentication only. Provides HMAC - 14What is IPSEC Encapsulating Security Payload or ESP[AH]-{Encryption}-[TCP]-[Data]-[IP Address]
Uses some form of encryption, either 3Des or AES, etc. - 15IPSEC tunnel mode[New IP Header]-[AH]-{Encryption}-[TCP]-[Data]-[IP Address]
Normally used with VPNs - 16What is ISAKMP?It proctors security measures
- 17Tell me about NIPS, or Network Intrusion Prevention SystemAn active, or inline system that from the router
Can use behavioral, anomaly, or signature based algorithm to detect threats. Can also use Rule-Based
Most systems use Heuristic based detection or all of them - 18Tell me about NIDS, or Network Intrusion Detection SystemPassive system, usually out of band and generally in the position of the DMZ. The tool that does the actual checks is called a correlation engine.
- 19What is Security Information and Event managment, or SIEM AggregationPerforms Aggregation (storage of data), Time Synchronization, event De-duplication and normalization. Manages logs, using WORM (Write Once, Read Many)
- 20What is Security Information and Event managment, or SIEM CorrelationPerforms alerts and triggers
- 21What is 802.11A bridge between the 802.11 network and ethernet point. Has a MAC address built into it.
- 22What is SSID for? or Service Set Identifier?Associates MAC address with SSID to create a BSSID for authentication. Once authenticated gets on the associated list.
It's the name of the network. - 23Wireless Protected Access in the 802.11 network (technically, 802.11i)Uses AES encryption, temporarily used TKIP which is better known as WPA or WPA2.
- 24What is another name for replay attacks?SSL Stripping
- 25What can you do with an evil twin access point with a jammerYou can use a jammer to shut down a channel and then re-rotue data back to your wireless access point (Evil Twin), to serve as a man in the middle.
- 26What can you do with a DE authentication attack with an evil twin?Can use software system to get authentication list. You can then send a 'deauth' message based on the authentication message. Clients then drop off network and reconnect to an evil twin.
- 27How do you hack WPA or WPA2 authenticationBy stealing the 4 way handshake, normally used in conjunction with dictionary files
- 28How to attack WPSBrute force attack using the 8 digit WPS key. It's still very difficult to do since internal firmware makes challenging the system shut down or block traffic.
- 29What does a WIDS, or Wireless Intrusion Detection System do?Works like an IDS but it also works with wireless 'things', such as wireless radios, watches for rogue access points, Knows MAC addresses of authorized equipment.. REQUIRES SENSORS, that send to WIDS server
- 30What is a Hyper Visor for?Manages virtualization of machines. Includes system resource allocation. Two types, you can run on host workstation or ones that can serve as boot machines.
- 31How to harden a VMRemove remnant data
Make good policies
Define user privileges
Patch everything - 32What is a container?Runs isolated instances of programs/services
Are self contained applications that can communicate with network resources when explicitly allowed.
Can depend on other containers. - 33What is a IIASWhen a 3rd party sets up a virtual server as a service.
- 34What is virtual desktop environment, or VDEUses a terminal to access your desktop. Think taking remote control of your personal computer via a cellphone, or whatever.
- 35Difference between VDE and VDI?VDEs take control of desktop, VDIs take control of a operating system.
- 36What is NFC or near field communication?Think bank payment, like less than a foot. Has no imbedded security
- 37What is ANT or ANT+Think smart devices that attach to your phone, watches etc. Has imbedded security.
- 38What is SSH protocol for?It's a wedge encryption system that helps to create security/crypto within an otherwise unsecured application. Determines crypto format. IT IS AN APPLICATION.
- 39What is TLSAn intermediary between the client and the sever to determine how crypto works.
- 40What is OSI Seven Layer Models1. Physical - Cables
2. Data Link - MAC Address/Switch/NIC
3. Network - Addresses/IP Address/Routers
4. Transport - Manages data connection
5. Session - Coms between 2 clients
6. Presentation - Think format... PDF etc.
7. Application - - 41What is TCP/IP Model1. Network interface - MAC/Net work, etc.
2. Internet - IP Addresses/routers
3. Transport - Assembly/dis TCP/UDP
4. Application - Everything that has to do with application. - 42What to know about IP AddressNAT is the server of IP addresses
If IP starts with a 10, its private IPV4
172-173 Private IP addresses
192.168 - 43What is TCP? Or Transmission Control Protocol.connection oriented type of protocol. Has a 3/way handshake. Packet based type of connection
- 44What is UDP or User Data protocolA connectionless protocol, no acknowledgement. Sends lots of packets.
- 45What doe ICMP do?It's the TCP handyman that runs pings, etc.
- 46Tell me about SSL/TLSOrignally designed for websites.
Is what is used to establish a secure link
Four aspects are:
1. Encryption, 2. Key Exchange, 3. Authentication, and 4, HMAC - 47Coding security into databasesProper error handling, Proper input validation, Normalization (no replication), Stored Procedures, Encryption, Obfuscation code, Code Reuse
Remove Dead code, Client Side and server side validation, third party libraries, data exposure. - 48What do static code analyzers do?They look at code to determine if you are using good error handling and security protocols. Does not read code, just analyzes.
- 49Dynamic analysisRuns code to look for errors and security errors within code.
- 50what is cross site scriptingClient side script injected into trusted web sites
- 51What is XML injectioninserts XML information that shouldn't be there altering the logic of the program.
- 52Pen test stepsGet authorization
Discover Vulnerabilities
Exploit vulnerabilities - 53Race Condition attackSomething that is running out of control. During race conditions means denied usage to device or software and can begin to impact physical performance of the system
- 54in bedded systemattacks to cameras, peripherals etc.
- 55Memory buffer over flowResource exhaustion or memory leak
buffer/integer overflow - 56What to know about DLL injectionDon't have obvious performance symptoms
Usually use backdoors - 57What is CIRT? or Cyber Incident response teamA group of people whose job is to respond to all incidents, usually has IT security team, IT Department, HR and Legal/Publication relations.
- 58Order of volatilityMemory
Data on Disc (Think cache/temp)
Remotely logged data
Backups - 59Order of restorationPower
Wired LAN
ISP Link
Active Director/DNS/DHCP server
servers - 60—