Security Study Guide

Security study guide helps to secure yourself. Now in a modern world there is many courses run for the security.rnSubjects which covered are:-rnAccess ControlrnCovers access control, access control models, DAC, MAC, and RBAC. AuthenticationrnCovers username/password, CHAP, certificates, Kerberos, mutual authentication, biometrics, tokens, and smartcard authentication. AttackersrnCovers the different type of attackers, their level of skills and resources, and their motivation. DoS AttacksrnCovers the concept of Denial of Service attacks and Distributed Denial of Service attacks, including a technical overview of the most common type of DoS attacks such as TCP SYN, UDP flooding and Smurfing. SpoofingrnCovers spoofing attacks such as IP spoofing, ARP spoofing, and spoofing websites. AttacksrnCovers password, replay, back doors, Man-in-the-Middle, TCP Hijacking, mathematical, birthday, weak keys, and software exploitation attacks. Social Engineering Attacks rnCovers the human aspect of security. Email SecurityrnCovers S/MIME, message encryption and digital signatures, PGP, SPAM, relaying and reverse lookups. Remote Access TechnologiesrnCovers remote access services, PPP, VPNs, tunneling, IPSec, SSH, L2TP, PPTP, 802.1x, RADIUS, and TACACS. Internet SecurityrnCovers Internet security, Intranet, Extranet, SSL, HTTPS, S-HTTP, TLS, SFTP, Blind/anonymous FTP, ActiveX, CGI, Java script, Java, signed applets, cookies, buffer overflows, and instant messaging. Malicious CodernCovers viruses, Trojan Horses, back door attacks, worms and logic bombs. Network DevicesrnCovers security concerns of using switches, routers, PBXs, firewalls, NAT, and mobile devices, as well as security zones such as DMZ and VLANs. Network and Storage Media*rnCovers security concerns of coaxial, UTP, STP, and fiber optic cabling, and removable media such as diskettes, CDs, hard drives, flashcards, tapes, and smartcards. Wireless Network SecurityrnCovers 802.11x, WEP, WAP, WTLS, vulnerabilities and various related wireless security technologies. Intrusion Detection Systems (IDS)rnCovers intrusion detection systems concepts and characteristics. Passive vs Active response, host vs network-based, signature vs behavior-based, limitations and drawbacks, and honey pots. Physical SecurityrnCovers physical security aspects such as physical barriers, access controls, environmental security, shielding, and fire suppression. Risk IdentificationrnCovers asset identification, vulnerability assessment, threat identification, and risk identication. ForensicsrnCovers computer forensics, identification and collection of evidence, preservation of evidence, and chain of custody.