Modern Network Security Threads

Modern Network Security Threads

1. Vectors of Network Attacks

   • External
   • Internal

2. Data Loss

   • Email / Social Networking
   • Unencrypted Devices
   • Improper access control
   • Hard Copy
   • Removable Media
   • Cloud Storage Devices

3. Data Center Physical Security

   • Outside perimeter security
     • Fences and Gates
     • continuous video surveillance
     • security breach alarms
   • Inside perimeter security
     • electronic motion detectors
     • security traps
     • biometric access and exit sensors
     • HVAC

4. VM- Specific Threats

   • Hyperjacking
   • Instant On Activation
   • Antivirus Storms
   • Cisco Secure Data Center Solution
     • Secure Segmentation
     • Visibility
     • Threat Defense

5. The Evolving Network Border

   • BYOD Network
   • Mobile Device Management (MDM)
     • Data Encryption
     • PIN Enforcement
     • Data Wipe
     • Data Loss Prevention
     • Jailbreak / Root Detection

6. The Hacker

   • White Hat Hacker
     • State-Sponsored
   • Grey Hat Hacker
     • Vulnerability Broker
     • Hacktivist
   • Black Hat Hacker
     • Script Kiddies
     • Cyber Criminals

7. Penetration Testing Tools

   • Password Crackers
   • Wireless Hacking Tools
   • Network Scanning and Hacking Tools
   • Packet Crafting Tools
   • Packet Sniffers
   • Rootkit Detectors
   • Fuzzers to Search Vulnerabilities

8. Network Hacking Attacks

   • Eavesdropping Attack
   • Data Modification Attack
   • IP Address Spoofing Attack
   • Password Based Attacks
   • Denial of Service Attack
   • Man in the middle attack
   • Compromised Key Attack
   • Sniffer Attack
   • Three Major Categories
     • Reconnaissance Attacks
     • Access Attacks
       • Social Engineering
     • DoS Attacks

9. Malware

   • Virus
   • Worm
     • Payload
     • Propagation mechanism
     • Enabling vulnerability
   • Trojan Horse
     • Remote-access
     • Data-sending
     • Destructive
     • Proxy
     • FTP
     • Security software disabler
     • DoS
   • Ransomware
     • Spyware
       • Adware
         • Scareware
           • Phishing
     • Rootkits

10. David Aarón Roa Hernández

11. Mitigating Threats

    • Network security professionals
      • Network Security Organizations
        • 12 network security domains
          • Security Policy
        • The Security Artichoke
      • Cryptography
        • Confidentiality
        • Integrity
        • Availability