CISSP-Training - ITperfection - Network Security

Cryptography- Part 2

Tech20202020-07-15T13:29:55+00:00Tags: and Adleman, CA, CISSP-Course, CISSP-Training, CISSP-Training-Course, Cryptography, Cyber Attacks, cyber crime, cyber security, CyberSecurity, Data Encryption, Diffie-Hellman, Digital Signature Algorithm, DSA, ECC, ElGamel, Elliptic Curve Cryptography, Encryption, Free-CISSP-Course, ITperfection, Network Attacks, Network Security, PKI, private key, Public key, Rivest, RSA, Shamir|

Cryptography- Part 2 Asymmetric Cryptography / Public Key Cryptography In this method, two keys are used: Private Key: This key is only known by the owner itself. Public key: This key is issued by using Public Key Infrastructure (PKI) where a trusted Certification Authority (CA) certifies the ownership of key pairs. Only the private [...]

Cryptography- Part 1

Tech20202020-07-15T13:19:32+00:00Tags: Advanced Encryption Standard, AES, Authentication, BLOWFISH, Cipher Block Chaining, Cipher Feedback, Cipher-text, CISSP-Course, CISSP-Training, CISSP-Training-Course, Cryptographic Key, Cryptography, Cyber Attacks, cyber crime, cyber security, CyberSecurity, Data Confidentiality, Data Encryption Standard, Data Integrity, DES, Electronic Code Book, Free-CISSP-Course, ITperfection, Network Attacks, Network Security, Output Feedback, Plain-text, Rivest Cipher, TWOFISH|

Cryptography- Part 1 This page we discuss cryptography, concepts, algorithms, attacks, and management. The sensitivity of assets is determined by confidentiality and integrity requirements and the impact of compromise on the corporation. Cryptography is the science of encrypting and decrypting communications to make them unintelligible for all but the intended recipient. Cryptography used to [...]

Assessing & Mitigating Vulnerabilities of Embedded Devices

Tech20202020-07-16T07:49:58+00:00Tags: CISSP-Course, CISSP-Training, CISSP-Training-Course, Cyber Attacks, cyber crime, cyber security, CyberSecurity, Digital Watches, Embedded Devices, Firewalls, Free-CISSP-Course, ITperfection, Network Attacks, Network Security, Vulnerabilities of Embedded Devices|

Assessing & Mitigating Vulnerabilities of Embedded Devices Embedded devices or embedded computer systems are the computing system specially designed for a dedicated purpose with the mechanical and electrical system. These embedded systems may have internet connectivity. An example of the embedded system commonly used for general purposes are: Digital Watches Automobiles and other vehicles [...]

Assessing & Mitigating Vulnerabilities of Mobile Systems

Tech20202020-07-15T13:03:26+00:00Tags: Application update issues, Application vulnerability, Assessing & Mitigating Vulnerabilities of Mobile Systems, CISSP-Course, CISSP-Training, CISSP-Training-Course, Cyber Attacks, cyber crime, cyber security, CyberSecurity, Data Exfiltration, Data Loss, Data Security, Data Tampering, Excessive Permissions, Free-CISSP-Course, ITperfection, Jailbreaking and Rooting, Malicious application on Store, Malicious third-party applications, Malware, Malware and rootkits, Mobile Systems, Network Attacks, Network Security, Operating system updates issues, Physical Attack, Weak Encryptions|

Assessing & Mitigating Vulnerabilities of Mobile Systems These days, one of the most important aspects of cyber security is the ability to secure mobile systems. Smartphones available in the market are running on different popular Operating systems such as iOS, Blackberry OS, Android, Symbian, and Windows, etc. All of these have an online store for [...]

Assessing & Mitigating Vulnerabilities of Web Systems

Tech20202020-07-15T13:06:11+00:00Tags: Assessing & Mitigating Vulnerabilities of Web Systems, Broken Session Management, Buffer Overflow, CISSP-Course, CISSP-Training, CISSP-Training-Course, Cookie Poisoning, Cross-Site (XSS), Cross-Site Request Forgery, Cyber Attacks, cyber crime, cyber security, CyberSecurity, Defective authentication, Defective session management, Directory Traversal, DMZ attack, DoS attack, Failure to block cross-site request forgery attacks, Failure to block cross-site scripting attacks, Failure to block injection attacks, Failure to protect direct objects references, Free-CISSP-Course, General Web System Threats, Information Leakage, Insecure Storage, ITperfection, Log tampering, Network Access Attacks, Network Attacks, Network Security, Parameter/Form Tampering, Security Misconfiguration, Session Hijacking, SQL Injection, Web Application Threats|

Assessing & Mitigating Vulnerabilities of Web Systems Web Servers are the programs that are used for hosting websites. Web servers may be deployed on a separate web server hardware or installed on a host as a program. One of the most important aspects of cyber security is the ability to secure web systems. This [...]

Vulnerability Assessment & Mitigating Vulnerabilities of Security Architectures- Part II

Tech20202020-07-15T14:09:37+00:00Tags: CISSP-Course, CISSP-Training, CISSP-Training-Course, Cloud Deployment Models, Cloud Service Consumer, Cloud-based systems, Cyber Attacks, cyber crime, cyber security, CyberSecurity, Distributed systems, Free-CISSP-Course, Hybrid Cloud, IaaS, Infrastructure as a service, Internet of things, IoT, IoT Attack Areas, ITperfection, Mitigating IoT Threats & Vulnerabilities, Mitigating Vulnerabilities, Network Attacks, Network Security, PaaS, Platform as s service, Private Cloud, Public Cloud, Responsibilities in Cloud Security, SaaS, software as a service|

Assessing & Mitigating Vulnerabilities of Security Architectures- Part II (IoT) Cloud-based systems Cloud Computing eliminates the need for on-premises devices by renting a virtual machine hosted by a trusted third-party. This remote computing enhances the efficiency, performance, scalability, and security. There are three different models for cloud computing: Iaas (Infrastructure as a service): Instead [...]

Vulnerability Assessment & Mitigating Vulnerabilities of Security Architectures- Part I

Tech20202020-07-15T14:06:35+00:00Tags: Adaptive Chosen Cipher-text Attack, Adaptive Chosen Plaintext Attack, Aggregation of personally identifiable information, Chosen Cipher-text Attack, Cipher-text Only Attack, CISSP-Course, CISSP-Training, CISSP-Training-Course, Command Injection, Cyber Attacks, CyberSecurity, Database connectivity attack, Database systems, Excessive retention of sensitive data, Failure to encrypt encryption keys, Free-CISSP-Course, Insufficient protection of cryptographic keys, ITperfection, Known Plaintext Attack, LDAP Injection, Loose access permissions, Network Security, Rubber Hose Attack, Sensitive data left behind in the file system, Server-based systems, Server-Client based systems, SQL Injection, Unprotected local data, Unprotected or weakly protected communications, Use of outdated algorithm, Vulnerable applets, Weak cryptographic keys, Weak or non-existent authentication|

Vulnerability Assessment & Mitigating Vulnerabilities of Security Architectures- Part I One of the most important topics in CISSP course is vulnerability assessment. In this section, we discuss the techniques used to identify and fix vulnerabilities in systems. Server-Client based systems We begin the discussion of vulnerability assessment by talking about various aspects of Server-Client [...]

Security Capabilities of Information Systems

Tech20202020-07-15T13:57:00+00:00Tags: CISSP-Course, CISSP-Training, CISSP-Training-Course, Cyber Attacks, cyber crime, cyber security, CyberSecurity, Decryption, Encryption, Free-CISSP-Course, Information Systems, ITperfection, Memory Protection, Network Attacks, Network Security, Security Capabilities, TPM, Trusted Platform Module|

Security Capabilities of Information Systems Security Capabilities of Information Systems are of important aspects of CISSP training course. In this section, we focus on Memory Protection, Trusted Platform Module (TPM) and Encryption / Decryption. Memory Protection Information Systems are very important. So Memory Protection is an important security concept associated. Memory in a computer [...]

Controls for Systems Security Requirements

Tech20202020-07-15T13:09:15+00:00Tags: Assurance Requirements, CISSP-Course, CISSP-Training, CISSP-Training-Course, Controls for Systems Security Requirements, Cyber Attacks, cyber crime, cyber security, CyberSecurity, Evaluation Assurance Level, Free-CISSP-Course, ITperfection, Network Attacks, Network Security|

Controls for Systems Security Requirements Building secure software is critical to information security. Also the systems that software runs on must themselves be securely designed and built. In order to evaluate any program or system, technical evaluation evaluates the performance and security-related capabilities. They are also compared with other competing products to evaluate different [...]