Professor Messers Security+ 1.2 Videos

What are the fundamentals of IT Security also known as?

AIC

What does AIC stand for?

“A’ stands for availability, ensuring all systems are up & running

“I” stands for integrity, be sure you messages are sending without third party modification

“C” stands for confidentiality, to prevent access from outsiders

How do we provide Confidentiality?

You may encrypt data, allow limits on you may access what information & two factor authen.

How do we provide Integrity?

You may use digital signatures, certificates & hash data

How do we provide Availability?

Having redundancy within your system & patching any holes

What is Proof Of Integrity?

This means we could verify our data hasn’t been tampered with, using hashing to ensure our intended person received our message

What is Proof Of Origin?

This means through integrity we know nothing has changed & has reached our sender, using signatures & private keys to verify

Steps of system verification

Identification: Claiming you are someone (Ex. Username)

Authentification: Proves we are who we claim to be (Ex. Passwords)

Authorization: What we get accessed to based on our login (Ex. Sales only sees profits)

Accounting: A log of what happened when we were logged in (Ex. login/logout)

What must you do to Authenticate a system?

You must use certificates that are signed

What is Certificate Authority?

Also known as CA, this is the system that is responsible for managing certificates & create/sign them

How do you Authorize a system?

You may use an authorization model, roles & organization

What is Abstraction?

Creating groups/relationship if we are unable to use a model (Ex. creating a group with only access to shipping information & adding selected users to said group)

What is a Gap analysis?

A study of where we are vs. where we want to be

What is a baseline?

This is needed prior to your analysis, your goals you are trying to achieve depending on your company

Is a baseline of employees needed?

Yes, you need an understanding of their experience, training & knowledge of policies

Why do you compare & contrast systems during a gap analysis?

You must be aware of the differences & weaknesses from your system to your goal system then break those issues up into smaller groups to better understand

What’s the final document?

This summarizes everything found, through this you make a path of how these goals may be achieved then a final report to submit

What’s a honeypot?

This attracts attackers & keeps them in the system to see what technique they are using (NOT A REAL SYSTEM)

What’s a honeynet?

A workstation that looks real to attackers & has routers and switches

What is a honeyfile?

Having fake files labeled as important information then once attackers access it the system is alerted

What are honey tokens?

This is traceable data within a honeynet & if this data is shared you are aware where it came from (FAKE INFORMATION)

What are the 7 types of physical security?

Barricades: To prevent access & allows people to get to one point without interferring with another

Access control vestibules: A room you must past through to get to another part of a building

Fencing: Most common form, but very obvious

Video surveillance: Also known as CCTV a good replacement to physical guards

Access Badges: Front desk & visual ID cards

Lighting: More light helps prevent attackers since they dont want to be seen

Sensors: Radiation & motion detectors

Are most networks open?

Yes, you just need to pass the firewall

What does Zero trust mean?

You have to prove yourself everytime you login

What is seperate functional planes?

Smaller groups within a network that you can implement zero trust on

What is the data plane?

this performs the actual security process, moving data from one part to another

What is the control plane?

The plane that manages what happens in the data plane (Ex. policies & rules)

Adaptive identity

This helps us exam who is trying to gain access & what controls they get

Threat scope reduction

Limiting how many places you can access on a network

Policy driven access control

This checks all data points puts them together & decides what process should be used

Security zones

Where users are trying to connect from & what they are trying to connect to ( Untrusted vs. Trusted) Not only meant to deny people but to allow access to users who match the system ( A worker login or connecting to wifi)

Policy enforcement point

Subjects users & systems to an evaluation known as PEP before connecting to the network

Policy decision point

Also known as PDP, collects all the data examines it & decides whether you get access or not

Policy engine

Looks at all request & compares it to a set of security policies then makes a decision

Policy Administrator

Takes the decision & gives it to PEP (Policy enforcement point)