CS 459/559 - FINAL STUDY GUIDE

FORMAT

• Matching
• Discussion Questions

CONTENT

1. What Have You Got to Lose?
   1. Accessing Security Needs (3-4)
   2. Policy Document (5-8)
      • Passwords
      • Guidelines
   3. Types of Security (15-26)
      • Internet
      • Network
      • Physical
   4. 56 bit vs. 128 bit encryption (30-31)
2. Implementing a Security Policy
3. Disaster Planning
   1. Automated Data Backup (55-59)
   2. Hierarchical Storage Management (60-61)
4. Security Levels
   1. Trusted Computer System Evaluation Criteria (Orange Book)
   2. Class A, B, C, D
   3. C2 (67-70)
   4. Discretionary Access Control (70-71)
5. Encryption
   1. Public (asymmetric) and Private (symmetric) Key (76-82)
   2. Digital Certificates (84-89)
6. Security Systems of Network Operating Systems
   1. Netware Security Features (102-114)
   2. NT Security Features (114-120)
      • Registry
      • Security Settings
      • Securing an NT Server
      • Breaking into an NT Server
   3. UNIX Security Features (120-127)
7. Security Management Platforms
   1. Systems Management Standards (136-139)
8. Network Monitors and Other Security Programs
   1. Monitoring a Web Server (154-156)
   2. Application Management (158-159)
   3. Proxy Servers (159-160)
   4. Risk Analysis Tools (160-162)
9. Security Audits
   1. Auditing Process (173-177)
10. Remote Access & Remote Control
    • software (184-5)
    • protocols (SLIP, PPP, PAP, CHAP, RADIUS)
11. Virtual Networking
    • VLAN advantages (187-189)
    • VLAN types (189-190)
    • VPN Security (191-193)
    • VPN Software (193-198)
12. Firewalls
    • Types of firewalls (packet filtering, dual-homed, screened host, screened subnet) (202-209)
    • Firewall Pros and Cons (209-211)
    • Firewall Policy (211-212)
    • Next Generation Firewalls (212-215)
    • Implementing Firewall Services (217-222)
13. Security Devices (face recognition, theft recovery, web site blocking tools, physical security devices)
14. Redundancy
    • Reliability, Availability, Serviceability (235-6)
    • Redundant Cabling (236 - 7)
    • Redundant Servers
    • Redundant Storage (239-241)
    • Redundancy in High Speed Networking (244-5)
15. Preventing Telephone Fraud
16. Securing Your Web Connection (S-HTTP, SSL, Java vs. ActiveX)
17. Viruses
    • Types of Viruses (274-5 & my notes)
    • Antivirus Security Policy (275-6)
    • Protecting Against Viruses (277-281)
18. Ensuring Secure Electronic Commerce
19. Intranets
20. Identifying and Preventing Common Attacks
    • Types of Attackes (Brute Force & Dictionary, DoS, SYN, IP Spoofing, Web Spoofing, Physical, Social Engineering)
    • Attack Recognition (319-321)
    • Vulnerable External Devices
21. Security and TCP/IP Services
    • Using TCP/IP Services (323 - 325)
    • TCP Wrappers (330 - 332)
22. Security Standards and Protocols
    • S-HTTP
    • SSL
    • IPSec
    • PPTP
    • S/MIME
23. Secure Shell Program (Installing and Using)
24. ***Security Policy***