sec missed

IAM

A security process that provides identification, authentication, and authorization mechanisms for users, computers, and other entities to work with organizational assets like networks, operating systems, and applications.

ldap

Protocol used to access network directory databases, which store information about authorized users and their privileges, as well as other organizational information

NIST 5

1. identify

2. protect

3. detect

4. respond

5. recover

i protect, detect, respond and recover

security controls

• Preventive: Stops or reduces the chance of an attack before it happens.

• Detective: Identifies and records attacks as they happen.

• Corrective: Fixes damage or reduces the impact after an attack.

• Directive: Tells people what rules and procedures to follow.

• Deterrent: Discourages attackers from attempting an attack.

• Compensating: Uses an alternative control to provide equal or better protection.

typosquatting vs pharming

• Typo = You type the address wrong.

• Pharming = You're forwarded to the wrong place. dns manipulation

watering hole

relies on a group of targets that use an unsecured third-party website, allowing the attacker to infect a company's computers.

attacker targets specific groups or organizations, discovers which websites they frequent, and injects malicious code into those sites.

coercion (urgency)

use of urgency refers to the intimidation of the target with a bogus appeal to authority or penalty, such as getting fired or not acting quickly enough to prevent some dire outcome.

consensus (persuasive)

attempts to convince the target that the request is natural and it would be impolite or somehow "odd" to refuse.

pki (public key infrastructure)

refers to a framework of Certificate Authorities (CAs), digital certificates, software, services, and other cryptographic components deployed to validate subject identities.

SED (self encrypting drives)

encrypt the entire contents of a storage device, making them ideal for when the physical theft of the storage device is a concern. Even if a threat actor steals a drive, the actor cannot access the data without unlocking the device with the correct credentials.

fde vs sed

• SED = The drive encrypts itself.

• FDE = Everything on the drive is encrypted.

Key difference: SED describes a drive with built-in hardware encryption, while FDE describes the encryption of the entire disk. A SED can provide FDE.

symmetric vs assymetric uses

Encryption Type	Key Used	Common Use Cases	Examples
Symmetric	One shared key	File encryption, hard drive encryption, database encryption, bulk data encryption	AES, 3DES
Asymmetric	Public and private key pair	Secure key exchange, digital signatures, certificates, identity verification	RSA, ECC

• Symmetric = Speed → Encrypts lots of data quickly.

• Asymmetric = Authentication → Helps verify identity, exchange keys, and create digital signatures.

federation

directories allow two different subsets of accounts to work together for permissions and access.

A manufacturing company recently bought out another similar company. They need to link each company's directory systems together to access their resources without merging the two. How can they link the two directory systems together?

vpn

allows individuals to access corporate resources outside the corporate infrastructure. Without employees cannot access a file share if they are not at their office.

oauth (open authorization)

is a system that facilitates the sharing of information (resources) within a user profile between sites.

can be used to implement SSO by allowing users to log in once and access multiple applications without passing credentials through to each piece of software.

can be integrated with other mechanisms to provide SSO capabilities and also supports OpenID Connect (OIDC) tokens to enhance identity verification when needed.

waf (web application firewall)

primarily validates input and output. It safeguards against web-based threats by scrutinizing the data sent and received from the web application to ensure compliance with defined security rules.

vlan

apply access control rules that prevent or permit certain types of communication between ____ hence mitigating risks.

One of the main purposes of_____is to segment the network, meaning devices from different _____cannot freely communicate with each other without routing.

zta (zero trust architecture)

The security design paradigm where any request (host-to-host or container-to-container) must be authenticated before being allowed.

Cloud security is a component

Data protection is a component

client server vs p2p

Feature	Client-Server	Peer-to-Peer (P2P)
Structure	Central server provides services	Devices connect directly to each other
Control	Centralized. Supports logical segmentation	Decentralized
Roles	Clients request; server provides	Each device can act as both client and server
Security	Easier to manage centrally	Harder to manage consistently
Failure	Server failure can affect everyone	No single central server to fail
Use cases	Websites, email, banking, file servers	File sharing, torrenting, blockchain
Example	Logging into Facebook	BitTorrent

🧠Easywaytoremember

• Client-Server = One boss 👔 — One central server manages services for everyone.

• Peer-to-Peer = Everyone is equal 🤝 — Devices share resources directly with each other.

iaas

the customer is responsible for protecting the operating systems it deploys on the cloud infrastructure. This includes tasks like applying security updates and patches, managing access controls, and implementing intrusion detection systems.

active active clustering

Both nodes in this setup process the connections concurrently, maximizing the utilization of available resources.

active passive clustering

provides a degree of resilience, it does not fully utilize the available resources, as one node remains idle unless the active node fails.

buffer overflow

when an application receives more data than it can handle, resulting in the potential for unintended command execution.

side channel attack

are techniques that gather information indirectly from the physical implementation of a computer system rather than from software vulnerabilities or direct intrusion attempts.

least functionality

critical for device hardening by providing a standard set of guidelines or checklists for configuring devices securely. It ensures that a system should run only the protocols and services required by legitimate users and no more, which reduces the attack surface.

SCAP

protocol for measuring compliance with secure baselines, not automating deployment.

puppet

automate the deployment of secure baseline configurations across various diverse systems.

helps enforce consistency and detect deviations from the established baseline.

wifi security

Feature	WEP	WPA	WPA2	WPA3
Introduced	1997	2003	2004	2018
Encryption algorithm	RC4	RC4	AES	AES
Encryption protocol	WEP	TKIP	CCMP	CCMP / GCMP
Password method	Shared Key	PSK	PSK	SAE
Enterprise authentication	None	802.1X	802.1X	802.1X
Configuration	Manual key	Manual password	Manual password	Password or enterprise credentials
Device onboarding	Manual	WPS (if supported)	WPS or DPP	DPP (or WPS where supported)
Security	Very weak	Weak	Strong	Strongest

wap placement

belong in areas where the signal is weak (red) to ensure consistent coverage. Managing the transmit power helps to fine-tune the coverage area, reducing unnecessary overlap and interference.

tls

removes the ability to perform downgrade attacks, making it more secure. It also introduces changes to the handshake protocol, reducing the number of messages and speeding up connections.

email protocols

eature	SMTP	POP3	IMAP
Purpose	Send emails	Receive emails	Receive & sync emails
Direction	Outgoing	Incoming	Incoming
Port (default)	25	110	143
Secure port (SSL/TLS)	465	995	993
STARTTLS port	587	110	143

sasl(Simple Authentication and Security Layer)

allows the client and server to negotiate a supported authentication mechanism and provides the option to use the command STARTTLS for encryption and message integrity. This feature is a secure way to access the Lightweight Directory Access Protocol (LDAP) directory.

ldaps

ets up a secure tunnel for user credential exchange using a digital certificate, it operates on port 636, which may not be practical in all scenarios and might have firewall implications.