Cnet Lesson 10

Front 1

Confidentiality (CIA triad)

Back 1

Keeping information and communications private and protecting them from unauthorized access.

Front 2

Integrity (CIA triad)

Back 2

Keeping organizational information accurate, free of error, and without unauthorized modifications.

Front 3

Availability (CIA triad)

Back 3

The fundamental principle of ensuring that systems operate continuously and that authorized persons can access the data they need.

Front 4

Authorization

Back 4

The process of determining what rights and privileges a particular entity has.

Front 5

Access Control

Back 5

The process of determining and assigning privileges to various resources, objects, or data.

Front 6

Accountability

Back 6

The process of determining who to hold responsible for a particular activity or event, such as a logon.

Front 7

Auditing/Accounting

Back 7

The process of tracking and recording system activities and resource data.

Front 8

Non-Repudiation

Back 8

Ensuring data remains associated with the party that creates it or sends a transmission with that data. Must be able to independently identify the sender and sender is responsible for message.

Front 9

Least Privilege

Back 9

Users and software only have minimal level of access that is necessary.

Front 10

Priviledge Bracketing

Back 10

Administrator uses this to allow privileges only when needed and then revoke them when user is done or need has passed.

Front 11

Risks

Back 11

Loss of device, power, network, or physical damage. Affects people, practices, and processes.

Front 12

Data Breaches

Back 12

When sensitive, protected, or confidential data is copied, transmitted, viewed, stolen, or used by an unauthorized individual. Can be unintentional or intentional.

Front 13

Unauthorized Access

Back 13

Any type of network or data access that is not explicitly approved by an organization.

Front 14

Hackers and Attackers

Back 14

Individuals who have skills to gain access to computing devices through unauthorized means.

Front 15

White Hat

Back 15

A hacker who discovers and exposes security flaws in applications and operating systems so manufacturers can fix them.

Front 16

Black Hat

Back 16

Jack who exposes security vulnerabilities for financial or malicious gain.

Front 17

Security Controls

Back 17

Safeguards to avoid or counteract security risks. Physical: doors, locks, fire extinguishers. Procedural controls: processes, management oversight, security, awareness, training. Technical Controls: firewalls, logins, antivirus. Leg and regulatory: privacy laws, policies, clauses.

Front 18

Security Policies

Back 18

A formalized statement that defines how security will be implemented within a particular organization.

Front 19

Policy Statement

Back 19

Outlines the plan for the individual security component.

Front 20

Standards (Security Policy)

Back 20

Defines how to measure the level of adhereance to the policy.

Front 21

Guidelines (Security Policy)

Back 21

Suggestions, recommendations, or best practices for how to meet the policy standard.

Front 22

Procedures (Security Policy)

Back 22

Step by step instructions that detail how to implement components of the policy.

Front 23

Acceptable Use Policy

Back 23

Defines acceptable use of an organization's physical and intellectual resources.

Front 24

Audit Policy

Back 24

Details the requirements for risk assessment and audits of the organization's information and resources.

Front 25

Extranet Policy

Back 25

Sets the requirements for third-party entities that desire access to an organization's networks.

Front 26

Password Policy

Back 26

Defines standards for creating password complexity and what is defined as a weak password and protecting password safety.

Front 27

Wireless Standards Policy

Back 27

Defines what wireless devices can connect to an organization's network and how to use them in a safe manner.

Front 28

SANS

Back 28

SysAdmin, Audit, Networking and Security Institute has a defined list of standard policy types and templates.

Front 29

Windows Security Policies

Back 29

Configuration settings in Windows that control overall security behaviour of the system. Found in Computer Configuration \ Windows Settings \ Security Settings.

Front 30

Group Policy

Back 30

Centralized account management feature available for Active Directory on Windows Server Systems.

Front 31

Permissions

Back 31

Security setting that determines level of access a user or group account has to a particular resource. Ex. Printers, shared folders.

Front 32

NTFS Permissions

Back 32

Windows NT file systems

Front 33

Read NTFS

Back 33

Permits viewing and listing of files and subfolders and viewing or accessing of the files' contents.

Front 34

Write NTFS

Back 34

Permits adding of files and subfolders and writing to a file.

Front 35

Read & Execute NTFS

Back 35

Permits viewing and listing of files and subfolders, executing files, and viewing and accessing files' contents and executing the file.

Front 36

List Folder Contents NTFS

Back 36

Permits viewing and listing of files and subfolders as well as executing of files.

Front 37

Modify NTFS

Back 37

Permits reading and writing or deletion of files and subfolders.

Front 38

Full Control NTFS

Back 38

Permits reading, writing, changing, and deleting of files and subfolders.

Front 39

Special Permissions

Back 39

Permits specific actions that are part of other permissions to be performed on folders and files.

Front 40

r UNIX

Back 40

Read. View file contents and see what is in directory.

Front 41

w UNIX

Back 41

Write. Modify file contents and create and delete directory contents.

Front 42

x UNIX

Back 42

Execute. Run the file, move into directory (if it is executable and combined with read and can also see long listings of contents of directory) .

Front 43

Segmentation

Back 43

Each subsystem is placed in it's own area or zone.

Front 44

SCADA/ICS

Back 44

SCADA/ICS networks are in this segment. May be impractical to upgrade and will not have the latest security.

Front 45

Legacy Systems

Back 45

May be vulnerable so keeping them separate from rest of network will reduce risks.

Front 46

Private Networks

Back 46

All devices used by employees and all servers with data not for the public are kept in this segment.

Front 47

Public networks

Back 47

Devices used for public access are kept in this segment.

Front 48

Testing lab

Back 48

Devices that are used for testing applications, updates, and patches are in this segment.

Front 49

Honeynet

Back 49

Devices used as honeypots (device set to detect, deflect, or counteract attempts of unauthorized use) are in this segment.

Front 50

Wireless Security

Back 50

Any method of securing your WLAN to prevent unauthorized network access and network data theft.

Front 51

Site Survey

Back 51

Analysis technique that determines the coverage area of a wireless network.

Front 52

Disaster Recovery

Back 52

The administrative function of protecting people and resources while restoring a failed network or device as quickly as possible.

Front 53

Business Continuity

Back 53

A defined set of planning and preparatory activities to be used in case of disaster so can recover in short amount of time.

Front 54

Resilience

Back 54

Critical business functions and infrastructure are designed so they are materially unaffected by most disruptions.

Front 55

Recovery

Back 55

Arrangements are made to recover critical business functions that fail for some reason.

Front 56

Contingency

Back 56

Readiness to cope effectively with disasters. Last resort response when resilience and recovery arrangements are inadequate.

Front 57

Single point of failure

Back 57

If it fails it will stop entire network.

Front 58

Redundancy

Back 58

Added to network to avoid single point of failure.

Front 59

What is the difference between Windows security policies and group policy?

Back 59

Windows security policy apply to the device they reside in. Group policy resides in active directory on a windows server applied to any device in the domain.

Front 60

Three principles of the CIA triad

Back 60

Integrity, confidentiality, availability

Front 61

When would you perform a site survey?

Back 61

To help install and secure a WLAN.

Front 62

What is the concept of least privilege?

Back 62

End users should be given the minimal level of technological and physical access that is required to perform their jobs.

Front 63

Vulnerabilities

Back 63

Condition that leaves a device open to attacks.

Front 64

Vulnerabilities Examples

Back 64

-improperly installed hardware or software

-bugs

-misuse of software protocols

-poorly designed networks

-poor physical security

-insecure passwords

-design flaws in software

-unchecked user input

Front 65

Internal Threats

Back 65

Disgruntled employees may be a source of physical sabotage.

Front 66

External

Back 66

Power failure, use a uninterruptible power supply to avoid this.

Front 67

Natural Threats

Back 67

Tornados, hurricanes, snow storms, floods

Front 68

Man-made

Back 68

Can be internal or external. Ex. Construction damages fibre optics.

Front 69

Environmental Threats

Back 69

Fire, hurricanes/tornadoes, flood, extreme temperatures, extreme humidity

Front 70

Unnecessary Running Services

Back 70

Services running on a device that are not necessary for it's intended purpose or operation.

Front 71

TCP

Back 71

Transmission control protocol

Front 72

UDP

Back 72

User datagram protocol

Front 73

FTP

Back 73

File transfer protocol

Front 74

Open port

Back 74

Is a TCP/UDP port number that is configured to accept packets. Needs to be unfiltered with application listening for incoming packets.

Front 75

Unpatched System

Back 75

Operating system without the latest security updates.

Front 76

Legacy System

Back 76

A device running older OS that is no longer supported.

Front 77

Unencrypted Channels

Back 77

Are connections in which the data being sent is not encrypted.

Front 78

Cleartext Credentials

Back 78

User passwords that are transmitted or stored unencrypted.

Front 79

Unsecure protocols

Back 79

Expose data or credentials in cleartext.

Front 80

Telnet

Back 80

Passes authentication and data using cleartext.

Front 81

HTTP

Back 81

Subject to eavesdropping and attackers can gain access to website accounts and sensitive information.

Front 82

SLIP

Back 82

Serial line internet protocol: passes authentication using cleartext.

Front 83

FTP

Back 83

All authentication and data is in cleartext

Front 84

TFTP

Back 84

Trivial file transfer protocol: even less secure that FTP because it forms not require an authentication to the remote host by the user.

Front 85

SNMP

Back 85

Simple Network Management Protocol: authentication is in cleartext.

Front 86

Radio Frequency Emanation

Back 86

Where electronic equipment can emit unintentional radio signals.

Front 87

What are three applicable forms of vulnerabilities?

Back 87

-Improperly configure software

-misuse of communication protocols

-poor physical security

Front 88

One of your workstations has been compromised by an external entity. What are some vulnerabilities you should check to see if they are allowing external connections?

Back 88

-open ports

-unpatched system

-unnecessary running services

Front 89

Attacks Types

Back 89

-physical security attacks

-network based

-Software based

-social engineering based

-web application based attacks

Front 90

Data theft

Back 90

Attacker uses unauthorized access to obtain protected network information.

Front 91

Social engineering attacks

Back 91

Uses deception to convince users to provide sensitive data or to violate security guidelines.

Front 92

Spoofing

Back 92

The goal is to pretend to be someone else so identity can be concealed.

Front 93

Impersonation

Back 93

Attacker pretends to be someone else.

Front 94

Phishing

Back 94

Fake email wanted you to send valuable information.

Front 95

Vishing

Back 95

Over the phone attack trying to get information.

Front 96

Whaling

Back 96

Well researched attempts to get information from higher up individuals.

Front 97

Spam and spim

Back 97

Spam with malware in email. Spim through instant messaging.

Front 98

Hoax

Back 98

Incorrect misleading information

Front 99

Insider threats

Back 99

Malicious employee gains sensitive company information.

Front 100

Malware attacks

Back 100

Software attack that disables devices and gain information

Front 101

Virus

Back 101

Code that spreads from computers through files. Sending data back to attacker.

Front 102

Worm

Back 102

Can enable further attacks, transmit data, corrupt or erase files and spread itself.

Front 103

Trojan Horse

Back 103

Paves the way for other attacks.

Front 104

Logic bomb

Back 104

Sits dormant until triggers by special event.

Front 105

Rootkit

Back 105

Takes full or partial control of device.

Front 106

Bonet

Back 106

Set of devices infected by a control program called a bot.

Front 107

Grayware

Back 107

Not actually malicious in nature. Adware, spyware. Identifies as potentially unwanted programs.

Front 108

Boot sector virus

Back 108

Infects disk based media.

Front 109

Macro

Back 109

Application specific instructions that execute in specific application.

Front 110

Mailer and mass mailer

Back 110

Mailer virus sends itself to others through email.

Front 111

Polymorphic virus

Back 111

Change as it moves, acting different on different systems.

Front 112

Script virus

Back 112

Small program using windows scripting, visual basic, and javascript.

Front 113

Stealth

Back 113

Moves and attempts to conceal itself.

Front 114

Buffer Overflows

Back 114

Attack that causes system OS to crash or reboot.

Front 115

Evil twins

Back 115

Rogue access points that appear to be legitimate.

Front 116

Rogue access point

Back 116

Unauthorized wireless access point on a corporate or private network.

Front 117

War driving

Back 117

Searching for instances of wireless networks by using wireless tracking devices.

Front 118

War chalking

Back 118

Using symbols to mark off sidewalk or wall to indicate network internet access.

Front 119

Bliejacking

Back 119

Send out unwanted bluetooth signals.

Front 120

Bluesnarfing

Back 120

Gain wireless access by using bluetooth connection.

Front 121

IV attack

Back 121

Attacker predicts Initialization vector.

Front 122

Authentication by assertion

Back 122

Authentication based on a user name/password combination.

Front 123

Tokens

Back 123

Physical or virtual objects ex. Smart cards, ID badges, or data packets that store authentication information. Can store PINs.

Front 124

Mutual authenication

Back 124

Security mechanism that requires that each party in a communication verify each other's identity.

Front 125

SSO single sign on

Back 125

If user has multiple usernames and passwords can be organized into a federation. In federation user only needs to use a single account.

Front 126

EAP Extensible Authenication Protocol

Back 126

Enables systems to use hardware based identifiers, fingerprint scanner or card readers.

Front 127

Extensible authenication protocol over LAN (EAPOL)

Back 127

EAP over LAN as used in 802.1x implementations

Front 128

EAP transport later security (EAP TLS)

Back 128

Feature in wireless routers and cards and provides robust security.

Front 129

EAP MD5

Back 129

Provides minimal security and is easily bypassed or hacked.

Front 130

Protected Extensible Authenication Protocol PEAP

Back 130

widely supported authenication method in EAP implementations.

Front 131

Kerberos

Back 131

Authenitcation service based on a time sensitive ticket granting system.

Front 132

Open system

Back 132

Authenication uses null authenication meaning user names and passwords are not used to authenticate user.

Front 133

Shared key

Back 133

Authenication method verifies the identity of a station by using a WEP key.

Front 134

802.1x and EAP

Back 134

EAP authenticates user and not the station. This is done with a radius server.

Front 135

Cryptograph

Back 135

The science of hiding information

Front 136

Hashing Encryption

Back 136

One way encryption that transforms cleartext into ciphertext that is not intended to be decrypted. Result is called hash, hash value, message digest. Two types: MD5, SHA

Front 137

Key based encryption

Back 137

Shared key/symmetric: the same key is used to encode and decode.

Key pair/private key: known only to individual. Public key can encrypt, but private has to decrypt.

Front 138

Digital certificate

Back 138

Electronic document that associates credentials with a public key.

Front 139

Certificate Authority

Back 139

Issues certificates and the associated public/private keys.

Front 140

The encrypting file system ESF

Back 140

Available on windows that are formatted with NTFS. Encrypts file data by using digital certificates.

Front 141

PKI public key infrastructure

Back 141

Encryption system composed of CA, certificates, software, services, and other cryptographic components.

Front 142

TLS transport layer security

Back 142

Protects sensitive communication from being eavesdropped by using a secure, encrypted and authenticated channel over TCP/IP.

Front 143

WEP wired equivalent privacy

Back 143

Provides 64 bit, 128 bit, and 256 bit encryption using Rivest Cipher 4 algorithm.

Front 144

WPA wifi protected access

Back 144

Provides improved data encryption through temporal key integrity protocol TKIP.

Front 145

WPA2

Back 145

Adds advanced encryption standard AES cipher based counter mode with cipher block chaining message authenication code protocol CCMP.

Front 146

WPA Personal

Back 146

WAP configured with preshared key used to encrypt data.

Front 147

WPA enterprise

Back 147

Designed for enterprise networks. Assigns unquie encryption key for every client when they log on to the network.

Front 148

What is the least secure wireless security protocol?

Back 148

WEP

Front 149

With key pair encryption, what type of key is used to decrypt the data?

Back 149

Private key