Cybersecurity Devices, Protocols, and Network Topologies for Independent Learners (copy)

Host/Client

Any node that can be connected to a network, and allow users to interact with it and utilize its resources.

Application Server

A server with the specific purpose of providing services to users from a centralized source.

Hub

Layer 1 network device that allows for computers to be connected to share data. This device does not separate collision domains.

Switch

Layer 2 network device that allows for computer to be connected to share data. This device separates each host onto its own collision domain allowing for fast, reliable communication between hosts.

Router

Layer 3 network device that interconnects two or more computer networks together.

WAP

Wireless Access Point, a layer 2 network device that functions similarly to a switch.

Proxy Server

Allows for multiple hosts to share a single internet connection. Has the ability to filter web traffic, as well as cache commonly used internet pages to speed up internet activity.

Firewall

Can be either layer 4 or layer 7, and can be comprised of either hardware or software, or a combination of both.

VPN Concentrator

Built specifically for creating a remote-access VPN. They provide high availability, high performance and scalability.

Back-up

Refers to making copies of data so that these additional copies may be used to restore the original after a data loss event.

LAN

Local Area Network, a computer network covering a small area and contained behind a router.

WAN

Wide Area Network, a computer network that covers a broad area or services multiple groups of people by linking LANs together.

MAN

Metropolitan Area Network, a large computer network that usually spans a city or a large campus.

GAN

Global Area Network, a computer network that spans the globe.

Topology

The logical layout of the network.

VLAN

Virtual Local Area Network.

Repeater

A layer 1 device used to amplify signals transmitted between network nodes.

OSI Model

A logical layout of the interoperability of devices, systems, and applications used for troubleshooting.

TCP/IP Model

A logical layout of the interoperability of devices, systems, and applications that utilize networking.

IPv4

A 32-bit address and has no unique identifiers.

IPv6

A 128-bit address where the last 48 bits is the device's full MAC address.

NIPRNET

Non-classified Internet Protocol Router Network is used to exchange sensitive but unclassified information.

SIPRNET

Secret Internet Protocol Router Network is a system of interconnected computer networks to transmit classified information.

JWICS

Joint Worldwide Intelligence Communications System, is a system of interconnected computer networks cleared up to Top Secret and SCI.

CANES

Consolidated Afloat Networks and Enterprise Services provide a common computing network and common operating system for C4I systems onboard Navy ships.

DoDIN (GIG)

Department of Defense Information Network, is defined as a globally interconnected, end-to-end set of information capabilities.

DISN

Defense Information Systems Network, has been the United States Department of Defense's enterprise network for providing data, video and voice services.

NMCI

Navy/Marine Corps Intranet, is an Information System provided to allow interoperability between CONUS Navy and Marine commands.

ONE-NET

OCONUS Navy Enterprise Network; OCONUS version of NMCI.

FTP

File transfer protocol using ports 20/21.

SSH

Secure Shell protocol using port 22.

Telnet

Unsecure Shell protocol using port 23.

SMTP

Simple Mail Transfer protocol using port 25.

DNS

Translates Domain name to IP using port 53.

DHCP

Dynamic Host Configuration Protocol, used to assign IPs using ports 67/68.

HTTP

Hypertext Transfer protocol used for internet connection on port 80.

HTTPS

HTTP combined with SSL or TLS using port 443.

POP3

Retrieve Mail protocol using port 110.

IMAP4

POP3 with more support for remote mailboxes using port 143.

TCP

A connection-oriented protocol that checks to make sure information was delivered successfully.

UDP

A connectionless protocol that checks for integrity at the arrival time.

Access Control

The operating system or database constrains the ability of a subject or initiator to access or perform operations on an object or target.

Discretionary Access Controls (DAC)

Means of restricting access to objects based on the identity of subjects and/or groups to which they belong.

Role Based Access Controls (RBAC)

Restricting system access to only authorized users.

Separation of Duty

Divides critical functions among different staff members to ensure that no one individual has enough information or access privilege to perpetrate damaging fraud.

Least Privilege

Must be able to access only the information and resources that are necessary.

Network Address Translation (NAT)

The translation of a private IP address to a public IP address.

Port Address Translation (PAT)

An extension of NAT that permits multiple devices on a LAN to be mapped to a single public IP address.

Demilitarized Zone (DMZ)

A perimeter network that protects an organization's internal local-area network from untrusted traffic.

Virtualization

Process of creating a software-based, or virtual, representation of something, such as virtual applications, servers, storage, and networks.

Active Directory

Provides Domain Services, Rights Management Services, Federation Services, Certificate Services, and Lightweight Directory Services.

Cybersecurity

Protect information and information systems from unauthorized access, use, disclosure, disruption, modification, or destruction.

Virus

A computer program that can copy itself and infect a computer using a host file.

Worm

A self-replicating malware program that uses a computer network to send copies of itself to other nodes.

Trojan

Malware that appears to perform a desirable function for the user but facilitates unauthorized access.

Backdoor

A method of bypassing normal authentication to obtain access while remaining undetected.

Network Enumeration

The process of scanning and compiling information of the layout of a network, its users, and its resources.

Buffer Overflow

A Denial-of-Service attack that overloads a system's input capacity, crashing the program.

Phishing

The process of attempting to acquire sensitive information by masquerading as a trustworthy entity.

SQL Injection

Overloads the input sector of an SQL database to execute arbitrary code.

Dictionary Attack

Attempts to crack passwords based on a list of words or values.

Privilege Escalation

The ability to escalate privileges to access or execute programs at a higher level.

Brute Force Attack

Physically inputting a user's PII until access is granted to a system.

Social Engineering

The ability to get a user to divulge their credentials by impersonating someone of authority.

Rainbow Table

A precomputed table for caching the output of cryptographic hash functions.

Denial of Service (DOS)

A cyber-attack to make a machine or network resource unavailable to its intended users.

Distributed Denial of Service (DDOS)

A malicious attempt to disrupt the normal traffic of a targeted server or network.

Cybersecurity Risk Management Process

Process of managing risks to agency operations resulting from the operation of an information system.

Confidentiality

Assurance that information is not disclosed to unauthorized individuals.

Integrity

Assurance that information is not modified by unauthorized parties.

Availability

Assurance of timely, reliable access to data by authorized users.

Non-repudiation

Assurance that the sender of data is provided with proof of delivery and identity.

Authentication

Assurance of the identity of an e-mail message sender or receiver.

Public Key Infrastructure (PKI)

A set of hardware, software, policies, and procedures needed to create, manage, and revoke digital certificates.