CISSP Exam Note (Domain 2: Telecommunications and Networking Security) – Protocols

January 11, 2010 · Posted in Information Security, Information Systems, Information Technology 

Protocols – a standard set of rules that determines how computers communicate with each other across networks despite their differences

Layered architecture

  • Shows how communication should take place
  • Clarify the general functions of a communication process
  • To break down complex networking processes into more manageable sub-layers
  • Using industry standard interfaces enables interoperability
  • To change the features of one layer without changing the code in every layer
  • Easier troubleshooting

Planning to take the CISSP Exam?

Get a copy of my personal notes (300plus pages worth) that I used to pass the exam for only $25.00.

Click the Add To Cart Button to Purchase

Click the Add To Cart Button to Purchase

Plus you will also get copies of notes from other CISSPs.

Learn more about this package by visiting this blog entry: CISSP REVIEW NOTES I USED TO PASS THE EXAM.

CLICK BELOW TO MAKE YOUR PURCHASE NOW.

All Purchases are securely processed through Paypal. Once you click the button please check your shopping cart at the upper right hand side of the page to complete your order.

IMPORTANT NOTICE:

I MANUALLY REVIEW ALL ORDERS. SO ONCE YOU PURCHASE THE PRODUCT, THERE WILL BE SOME DELAY ON YOU RECEIVING AN E-MAIL FROM ME WITH THE LINK TO THE DOWNLOAD AREA OF THE PRODUCT. YOU WILL GET A RESPONSE FROM ME WITHIN 24-48 HOURS.

Open Systems Interconnect (OSI) Model

Layer 7 – Application

  • Responsible for all application-to-application communications
  • User information maintained at this layer is user data
  • Security: Confidentiality, Authentication, Data Integrity, Non-repudiation
  • Technology: Gateways
  • Protocols: FTP, SMB, Telnet, TFTP, SMTP, HTTP, NNTP, CDP, GOPHER, SNMP, NDS, AFP, SAP, NCP, SET

Layer 6 – Presentation

  • Responsible for the formatting of the data so that it is suitable for presentation
  • Responsible for character conversion (ASCII/EBCDIC)
  • Encryption/Decryption, Compressions and Virtual Terminal Emulation
  • User information maintained at this layer is called messages
  • Security: Confidentiality, Authentication, Encryption
  • Technology: Gateway
  • Protocols: ASCII, EBCDIC, Postscript, JPEG, MPEG, GIF

Layer 5 – Session

  • Responsible for the setup of the links, maintaining of the link and the link tear-down between applications
  • Security: None
  • Technology: Gateway
  • Protocols: Remote Procedure Calls (RPC), SQL, RADIUS, DNS, ASP

Layer 4 – Transport

  • Responsible for the guaranteed delivery of user information
  • Also responsible for error detection, correction and flow control
  • User information at this layer is called datagram
  • Security: Confidentiality, Authentication, Integrity
  • Technology: Gateway
  • Protocols: TCP, UDP, SSL, SSH-2, SPX, NetBIOS, ATP

Layer 3 – Network

  • Responsible for the routing of user data from one node to another through the network including the path selection
  • Logical addresses are used at this layer
  • User information maintained at this layer is called packets
  • Security: Confidentiality, Authentication, Data Integrity
  • Technology: Virtual Circuits (ATM), routers
  • Protocols: IP, IPX, ICMP, OSPF, IGRP, EIGRP, RIP, BOOTP, DHCP, ISIS, ZIP, DDP, X.25

Layer 2 – Data Link

  • Responsible for the physical addressing of the network via MAC addresses
  • There are two sublevels: MAC & LLC
  • Has error detection, frame ordering and flow control
  • User information maintained at this layer is called frames
  • Security: Confidentiality
  • Technology: Bridges, switches
  • Protocols: L2F, PPTP, L2TP, PPP, SLIP, ARP, RARP, SLARP, IARP, SNAP, BAP, CHAP, LCP, LZS, MLP, Frame Relay, Annex A, Annex D, HDLC, BPDU, LAPD, ISL, ,MAC, Ethernet, Token Ring, FDDI

Layer 1 – Physical

  • Responsible for the physical transmission of the binary digits through the physical medium
  • Includes things such as the physical cables, interfaces and data rate specifications
  • User information maintained at this layer is called bits
  • Security: Confidentiality
  • Technology: ISDN, Hubs, Repeaters, Cables
Bookmark and Share

Thought you should know, etc... Update

Uses for a Project Management Tool

The uses for a project management tool will vary depending on its intended purpose. The things all project management tools have in common is they are a device that will save time, money and effort by the user when applied…

The Gates of Development

On new development projects, the production stage can be the point of no return. Before it's too late, a rigorous gating process can help to ensure that development activities, teamwide input and critical stakeholder priorities are all aligned with the overall project vision.

Saying No to Say Yes

I find that I’m often inspired by the sermons at my church to write a project management article.  It seems like an odd marriage of ideas, I realize, but it somehow works for me.  Well, this past Sunday’s message was no different.  As our pastor was talking about ‘saying no to say yes’ – meaning [...

Stack Overflow's Scaling Problems

Nick Craver from the Stack Overflow team has a very interesting post on issues the team is facing with respect to handling storage space created due to higher traffic and usage...

Project Management Lite: Estimating–Specify Deliverables

In order to prepare an estimate, the specifications for what must be produced by the project must be specific, unambiguous and quantitative. This requires the estimator to work out as much detail of the conceptual solution as is feasible, consistent ...

Tags: , , , , , , , , , , , , , , ,

Comments

Leave a Reply




  • Your Shopping Cart

    Your cart is empty

  • Calendar

    January 2010
    M T W T F S S
    « Dec   Feb »
     123
    45678910
    11121314151617
    18192021222324
    25262728293031

  • RSS From the National Vulnerability Database

    • CVE-2012-1034 (episerver_cms) February 7, 2012
      Multiple cross-site scripting (XSS) vulnerabilities in the admin interface in EPiServer CMS through 6R2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. […]
      nvd@nist.gov
    • CVE-2011-5076 (hdwiki) February 6, 2012
      SQL injection vulnerability in model/comment.class.php in HDWiki 5.0, 5.1, and possibly other versions allows remote attackers to execute arbitrary SQL commands via the PATH_INFO to index.php. NOTE: some of these details are obtained from third party information. […]
      nvd@nist.gov
    • CVE-2012-1021 (4images) February 6, 2012
      Cross-site scripting (XSS) vulnerability in admin/categories.php in 4images 1.7.10 allows remote attackers to inject arbitrary web script or HTML via the cat_parent_id parameter in an addcat action. […]
      nvd@nist.gov
    • CVE-2012-1031 (episerver_cms) February 6, 2012
      Unspecified vulnerability in EPiServer CMS 5 and 6 through 6R2, in certain configurations using Forms Authentication, allows remote authenticated users to obtain WebAdmins access by leveraging Edit Mode privileges, a different vulnerability than CVE-2011-3416 and CVE-2011-3417. […]
      nvd@nist.gov
    • CVE-2012-1008 (officesip_server) February 6, 2012
      OfficeSIP Server 3.1 allows remote attackers to cause a denial of service (daemon crash) via a crafted To header in a SIP INVITE message. […]
      nvd@nist.gov
    • CVE-2012-0992 (openemr) February 6, 2012
      interface/fax/fax_dispatch.php in OpenEMR 4.1.0 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the file parameter. […]
      nvd@nist.gov
    • CVE-2012-1004 (foswiki) February 6, 2012
      Multiple cross-site scripting (XSS) vulnerabilities in UI/Register.pm in Foswiki before 1.1.5 allow remote authenticated users with CHANGE privileges to inject arbitrary web script or HTML via the (1) text, (2) FirstName, (3) LastName, (4) OrganisationName, (5) OrganisationUrl, (6) Profession, (7) Country, (8) State, (9) Address, (10) Location, (11) Telephon […]
      nvd@nist.gov
    • CVE-2012-1019 (xwiki_enterprise) February 6, 2012
      Multiple cross-site scripting (XSS) vulnerabilities in XWiki Enterprise 3.4 allow remote attackers to inject arbitrary web script or HTML via the (1) XWiki.XWikiComments_comment parameter to xwiki/bin/commentadd/Main/WebHome, (2) XWiki.XWikiUsers_0_company parameter when editing a user profile, or (3) projectVersion parameter to xwiki/bin/view/DownloadCode/D […]
      nvd@nist.gov
    • CVE-2012-1002 (openconf) February 6, 2012
      Unspecified vulnerability in OpenConf 4.x before 4.12 has unknown impact and attack vectors. […]
      nvd@nist.gov
    • CVE-2012-1029 (tube_ace) February 6, 2012
      SQL injection vulnerability in mobile/search/index.php in Tube Ace (Adult PHP Tube Script) 1.6 allows remote attackers to execute arbitrary SQL commands via the q parameter. NOTE: some of these details are obtained from third party information. […]
      nvd@nist.gov
Get Adobe Flash playerPlugin by wpburn.com wordpress themes