CISSP Exam Note (Domain 2: Telecommunications and Networking Security) – Protocols
Protocols – a standard set of rules that determines how computers communicate with each other across networks despite their differences
Layered architecture
- Shows how communication should take place
- Clarify the general functions of a communication process
- To break down complex networking processes into more manageable sub-layers
- Using industry standard interfaces enables interoperability
- To change the features of one layer without changing the code in every layer
- Easier troubleshooting Read more
CISSP Exam Note (Domain 2: Telecommunications and Networking Security) – Key Concepts and Other Definitions
Rainbow Series
The Rainbow Series (sometimes known as the Rainbow Books) is a series of computer security standards published by the United States government in the 1980s and 1990s. They were originally published by the U.S. Department of Defense Computer Security Center, and then by the National Computer Security Center.
These standards describe a process of evaluation for trusted systems. In some cases, U.S. government entities (as well as private firms) would require formal validation of computer technology using this process as part of their procurement criteria. Many of these standards have influenced, and have been superseded by, the Common Criteria. Read more
CISSP Exam Note (Domain 2: Telecommunications and Networking Security) – Denial of Service Attack
A denial-of-service attack (DoS attack) or distributed denial-of-service attack (DDoS attack) is an attempt to make a computer resource unavailable to its intended users. Although the means to carry out, motives for, and targets of a DoS attack may vary, it generally consists of the concerted efforts of a person or people to prevent an Internet site or service from functioning efficiently or at all, temporarily or indefinitely. Perpetrators of DoS attacks typically target sites or services hosted on high-profile web servers such as banks, credit card payment gateways, and even root nameservers.
One common method of attack involves saturating the target (victim) machine with external communications requests, such that it cannot respond to legitimate traffic, or responds so slowly as to be rendered effectively unavailable. In general terms, DoS attacks are implemented by either forcing the targeted computer(s) to reset, or consuming its resources so that it can no longer provide its intended service or obstructing the communication media between the intended users and the victim so that they can no longer communicate adequately. Read more
CISSP Exam Note (Domain 2: Telecommunications and Networking Security) – Classes of Network Abuse
Class A
- Unauthorized access through circumvention of security access controls
- Masquerading, logon abuse (primarily internal attacks)
Class B – non-business use of systems
Class C
- Eavesdropping
- Active: Tampering with a transmission to create a covert signaling channel or probing the network
- Passive – Covertly monitoring or listening to transmissions that is unauthorized
- Covert Channel – using a hidden unauthorized communication
- Tapping – refers to the physical interception of transmission medium (like splicing of cable) Read more
CISSP Exam Note (Domain 2: Telecommunications and Networking Security) – Common Back-up Problems
Common Backup Problems
- Slow transfer of data to back-up
- Retrieval time to restore
- Off-hour processing and monitoring
- Server disk space expands over time
- Loss of data between last back-up
- Physical security of tapes Read more
CISSP Exam Note (Domain 2: Telecommunications and Networking Security) – Back-up Methodologies
In information technology, a backup or the process of backing up refer to making copies of data so that these additional copies may be used to restore the original after a data loss event. These additional copies are typically called “backups.” The verb is back up in two words, whereas the noun is backup (often used like an adjective in compound nouns).
Backups are useful primarily for two purposes. The first is to restore a state following a disaster (called disaster recovery). The second is to restore small numbers of files after they have been accidentally deleted or corrupted. Data loss is also very common. 66% of internet users have suffered from serious data loss. Read more
CISSP Exam Note (Domain 2: Telecommunications and Networking Security) – The Responsibilities of CIRT aka Computer Incident Response Team
What is CIRT?
CIRT (Computer Incident Response Team) is also commonly called CERT (Computer Emergency Response Team) – they are personnel responsible for coordinating the response to computer security incidents in an organization (Source: www.net.ttu.edu/security/policy_definitions.doc) Read more
Join Me On Facebook
Business Tech Press Releases- ConvergEx Offers Eze OMS Clients Access to LiquidPoint's Latest Options Execution and Routing Technologies March 11, 2010
- NI Technology Updates Outlooks for Microvision, Towerstream, National Semiconductor, TriQuint Semiconductor and RF Micro Devices March 11, 2010
- Fund.com Forms Strategic Alliance With Transparensee to Create Next Generation Search Engine for Mutual Funds and ETFs March 11, 2010
- Allion Test Labs Selects LeCroy USB 3.0 Test Suite for Complete SuperSpeed USB Compliance Testing March 11, 2010
- High Gear Media Launches All-New Used Car Listings Marketplace March 11, 2010
- From the National Vulnerbility Database
- CVE-2010-0958 (tribisur) March 9, 2010Directory traversal vulnerability in modules/hayoo/index.php in Tribisur 2.1, 2.0, and earlier, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary files via directory traversal sequences in the theme parameter. NOTE: some of these details are obtained from third party information. […]nvd@nist.gov
- CVE-2010-0957 (saskias_shopsystem) March 9, 2010Directory traversal vulnerability in content.php in Saskia's Shopsystem beta1 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the id parameter. […]nvd@nist.gov
- CVE-2010-0947 (bbsmax) March 9, 2010Cross-site scripting (XSS) vulnerability in post.aspx in Max Network Technology BBSMAX 3.0, 4.1, and 4.2 allows remote attackers to inject arbitrary web script or HTML via the action parameter. […]nvd@nist.gov
- CVE-2010-0956 (opencart) March 9, 2010SQL injection vulnerability in index.php in OpenCart 1.3.2 allows remote attackers to execute arbitrary SQL commands via the page parameter. […]nvd@nist.gov
- CVE-2010-0949 (natychmiast-cms) March 9, 2010Multiple cross-site scripting (XSS) vulnerabilities in Natychmiast CMS allow remote attackers to inject arbitrary web script or HTML via the id_str parameter to (1) index.php and (2) a_index.php. […]nvd@nist.gov
- CVE-2010-0955 (bild_flirt_community) March 9, 2010SQL injection vulnerability in index.php in Bild Flirt Community 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. […]nvd@nist.gov
- CVE-2010-0791 (ncpfs) March 9, 2010The (1) ncpmount, (2) ncpumount, and (3) ncplogin programs in ncpfs 2.2.6 do not properly create lock files, which allows local users to cause a denial of service (application failure) via unspecified vectors that trigger the creation of a /etc/mtab~ file that persists after the program exits. […]nvd@nist.gov
- CVE-2010-0954 (pre_e-learning_portal) March 9, 2010SQL injection vulnerability in search_result.asp in Pre Projects Pre E-Learning Portal allows remote attackers to execute arbitrary SQL commands via the course_ID parameter. […]nvd@nist.gov
- CVE-2010-0103 (duo_usb) March 9, 2010UsbCharger.dll in the Energizer DUO USB battery charger software contains a backdoor that is implemented through the Arucer.dll file in the %WINDIR%\system32 directory, which allows remote attackers to download arbitrary programs onto a Windows PC, and execute these programs, via a request to TCP port 7777. […]nvd@nist.gov
- CVE-2010-0953 (phpcoin) March 9, 2010Directory traversal vulnerability in mod.php in phpCOIN 1.2.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the mod parameter. […]nvd@nist.gov
- CVE-2010-0958 (tribisur) March 9, 2010