Network+

Front 1

Access Control

Back 1

Get what you need and control what you need

Front 2

Mandatory Access Control (MAC)

Back 2

Multi-level security and non-discretionary

Resources assigned "security labels" if labels don't match access is denied

Front 3

Discretionary Access Control (DAC)

Back 3

used if you want to restrict users' access to an object, for example like a folder.

Front 4

Rule Based Access Control (RBAC)

Back 4

looks at every request and performs match based on set of conditions. Access is granted depending on the result of the match.

Access Control Lists (ACL) are most common

Front 5

Authentication

Back 5

finding out if something is actually what it states it is. Example: username and password

Front 6

Kerberos

Back 6

- secure method for authenticating a request for a service on computer network

- lets user request encrypted ticket to request service

-uses symmetric-key cryptography

Front 7

Challenge-Handshake Authentication Protocol (CHAP)

Back 7

- more secure that Password Authentication Procedure (PAP)

-uses one way hash function, and matches based on from sender and receiver

-mostly used on PPP based networks

Front 8

Password Authentication Procedure (PAP)

Front 9

Certificates

Back 9

digital certificate establishes your credentials for access

some certificates conform to X.509 standard

Front 10

Username/password

Back 10

Authentication based on credentials of username and password

must have both for access

Front 11

Tokens

Back 11

devices that store information on a user

used to authenticate user

only used once aka "one time password"

Front 12

multifactor authentication

Back 12

based on two or more methods

adds more levels to your current authentication method

Front 13

two factor authentication

Back 13

based on two methods:

something you have and something you know

Front 14

biometrics

Back 14

based on human characteristics or smart card

Example: fingerprints, retinal scanner, voice recognition

biometrics can be placed on smart card

Front 15

authorization

Back 15

having permission to do something

Front 16

vulnerability scanning

Back 16

method to identify problems that exist on networks

Front 17

TCP/IP

Front 18

Denial of Service (DOS) attack

Distributed Denial of Service attack (DDOS)

Back 18

disruption of service to legitimate users

DDOS is the launch of simultaneous attacks of zombies

Front 19

backdoor

Back 19

opening left in functional piece of software that allows unknown entry

Front 20

spoofing

Back 20

used to gain unauthorized access

hackers find IP address and replicate it to assume identity of the trusted sender.

Front 21

man in the middle attack

Back 21

attacker is able to intercept traffic by placing themselves between a conversation. Process of fooling both parties to make them think they are communicating privately

wireless systems are very susceptible to these attacks

Front 22

replay attack

Back 22

hacker uses a sniffer to grab packets off the wire. hacker then extracts information from packets like passwords. once data is captured it can be placed back on network

Front 23

TCP/IP hijacking

Back 23

also known as "session hijacking". Hacker takes over TCP/IP session between to machines.

popular method is source-routed IP packets.

Front 24

DNS poisoning

Back 24

DNS servers are poisoned with bad information

Front 25

Weak keys

Back 25

Secret keys with a certain value which block cipher in question of certain regularities in encryption

Front 26

mathematical attack

Back 26

block ciphers that exhibit high degree of mathematical structure

Front 27

Birthday attack

Back 27

form of brute force attack.

Front 28

Brute force attack

Back 28

form of password cracking. Will attempt every single password combination known to crack password.

To defend them either have password length to long to crack or change passwords frequently

Front 29

Dictionary attack

Back 29

form of password cracking. words are loaded into a file to help hacker crack your password.

to defend this attack do not use simple passwords and known dictionary words

Front 30

war dialing attack

Back 30

running a modem scanning tool against a PBX or dialup modem.

war dialer is program used to identify phone numbers that can successfully make connection with computer modem.

Front 31

war driving attack

Back 31

penetrating wireless networks

Front 32

buffer overflow attack

Back 32

takes advantage of poorly written code

Front 33

SYN flood attack

Back 33

exploit 3 way handshaking of TCP/IP protocol.

Front 34

Smurfing attack

Back 34

Exploits ICMP and transmits echo request packet to network's broadcast address with a spoofed source address. The victim is then flooded with large number of echo replies.

Front 35

sniffing attack

Back 35

use protocol analyzers to capture network traffic for passwords and other data.

Front 36

Ping of Death attack

Back 36

attempt to crash your system by sending oversized packets to a host

Front 37

port scanning attack

Back 37

performed by running vulnerability scanner on a system to see what ports are open

Front 38

important port numbers

Back 38

ECHO 7 DNS 53

CHARGEN 19 HTTP 80

FTP-DATA 20 POP3 110

FTP 21 SNMP 161

SSH 22 HTTPS 443

RADIUS 1812 TELNET 23

SMTP 25

TACACS 49

Front 39

passive attack

Back 39

sit and wait. passively run the attack to exploit network

example packet sniffing

Front 40

virus

Back 40

form of malicious code that spreads from system to system by attaching to data or files

Front 41

Trojan horse

Back 41

form of malicious code that lets hackers into networks because they look legitimate. upon execution they become malicious.

Front 42

logic bomb

Back 42

lie dormant until one or more logical conditions are met to trigger exploit.

Front 43

worms

Back 43

form of malicious code that exploits networking vulnerabilities to spread itself from system to system on its own accord

Front 44

anti-virus protection

Front 45

remote access

Back 45

ability to get access to a computer or network from a remote location

Front 46

802.1x

Back 46

designed to enhance security of wireless local area networks that follow IEEE 802.11 standard

- allows for an authentication framework for wireless LAN's

- allows user to authenticated by central authority.

Front 47

Virtual Private Network (VPN)

Back 47

way to use public infrastructure to provide remote offices or users with secured access to their home network.

allows company to internet safely

uses encryption methods to tunnel across internet

cheaper in price but bandwidth is not always guaranteed.

can be used to form extranet

Front 48

Remote Authentication Dial-In User Service (RADIUS)

Back 48

client/server protocol and maintains user profiles in central database

authenticates dial in users, authorizes access, and enables remote access servers to communicate with central server

Front 49

Terminal Access Controller Access Control System (TACACS) and TACACS+

Back 49

TACACS is old authentication protocol that allows remote access server to forward credentials to authentication server

TACACS+ is extension of TACACS that allows multifactor authentication

Front 50

Point to Point Tunneling Protocol (PPTP)

Back 50

WAN protocol that allows for tunneling.

Front 51

Layer Two Tunneling Protocol (L2TP)

Back 51

Extension of PPTP used to enable the operation of VPN over the internet

Two main componenets of L2TP are Access Concentrator (LAC) and Network Server (LNS)

Front 52

Secure Shell (SSH)

Back 52

protocol for securely getting access to a remote computer

commands are secure and encrypted

uses RSA public key cryptography for both connection and authentication

Front 53

IPSEC

Back 53

Security protocol that works at the network layer of OSI model

two services are- Authentication Header which allow authentication of the sender and Encapsulating Security Payload (ESP) which allows authentication and encryption of data.

Front 54

OSI model

Front 55

Secure Multi-Purpose Internet Mail Extensions (S/MIME)

Back 55

method of sending email that uses RSA encryption

- located in most web browsers