ITperfection - ITperfection - Network Security

Communication & Network Security Domain

Tech20202020-07-16T08:04:07+00:00Tags: CISSP-Course, CISSP-Training, CISSP-Training-Course, Communication & Network Security, Cyber Attacks, cyber crime, cyber security, CyberSecurity, Free-CISSP-Course, ITperfection, Network Attacks, Network Security|

Communication & Network Security Domain The Communication and Network Security domain deals with topics related to network components such as network models, network devices and protocols; specifically, how they function and how they are relevant to security. This domain discusses the OSI model as a guiding principle in networking, cabling, wireless connectivity, TCP/IP and [...]

Site & Facility Design Principles & Security Controls- Part 2

Tech20202020-07-15T14:03:23+00:00Tags: CISSP-Course, CISSP-Training, CISSP-Training-Course, Cyber Attacks, cyber crime, cyber security, CyberSecurity, Electrical anomalies, Electrical noise, Electrical power, Excessive heat, Fire detection, Fire prevention, Fire Prevention Plan, fire suppression, Free-CISSP-Course, High Humidity, HVAC, HVAC-requirements, ITperfection, Low humidity, Network Attacks, Network Security, Site & Facility, Site & Facility Design Principles|

Site & Facility Design Principles & Security Controls- Part 2 Utilities and Heating, Ventilation, and Air Conditioning (HVAC) We come to the part where we talk about physical site & facility controls. The heating and air-conditioning systems are necessary for maintaining a safe and acceptable operating environment for computers and personnel. Computing equipment and [...]

Site & Facility Design Principles & Security Controls- Part 1

Tech20202020-07-15T14:00:35+00:00Tags: CISSP-Course, CISSP-Training, CISSP-Training-Course, Cyber Attacks, cyber crime, cyber security, CyberSecurity, Electronic locks, Free-CISSP-Course, intermediate distribution facilities, ITperfection, Natural access control, Natural surveillance, Network Attacks, Network Security, Physical security, Radio-frequency identification, RFID, Secure Access, Secure Facilities, Secure location, Site & Facility, Swing handle with the number and key lock, Territorial reinforcement, Wiring closets|

Site & Facility Design Principles & Security Controls- Part 1 One of the most important topics in CISSP course is physical site & facility controls. Some of the principles are provided by Crime Prevention through Environmental Design (CPTED) which are widely adopted all over the world by the security professionals to design public and [...]

Cryptography- Part 2

Tech20202020-07-15T13:29:55+00:00Tags: and Adleman, CA, CISSP-Course, CISSP-Training, CISSP-Training-Course, Cryptography, Cyber Attacks, cyber crime, cyber security, CyberSecurity, Data Encryption, Diffie-Hellman, Digital Signature Algorithm, DSA, ECC, ElGamel, Elliptic Curve Cryptography, Encryption, Free-CISSP-Course, ITperfection, Network Attacks, Network Security, PKI, private key, Public key, Rivest, RSA, Shamir|

Cryptography- Part 2 Asymmetric Cryptography / Public Key Cryptography In this method, two keys are used: Private Key: This key is only known by the owner itself. Public key: This key is issued by using Public Key Infrastructure (PKI) where a trusted Certification Authority (CA) certifies the ownership of key pairs. Only the private [...]

Cryptography- Part 1

Tech20202020-07-15T13:19:32+00:00Tags: Advanced Encryption Standard, AES, Authentication, BLOWFISH, Cipher Block Chaining, Cipher Feedback, Cipher-text, CISSP-Course, CISSP-Training, CISSP-Training-Course, Cryptographic Key, Cryptography, Cyber Attacks, cyber crime, cyber security, CyberSecurity, Data Confidentiality, Data Encryption Standard, Data Integrity, DES, Electronic Code Book, Free-CISSP-Course, ITperfection, Network Attacks, Network Security, Output Feedback, Plain-text, Rivest Cipher, TWOFISH|

Cryptography- Part 1 This page we discuss cryptography, concepts, algorithms, attacks, and management. The sensitivity of assets is determined by confidentiality and integrity requirements and the impact of compromise on the corporation. Cryptography is the science of encrypting and decrypting communications to make them unintelligible for all but the intended recipient. Cryptography used to [...]

Assessing & Mitigating Vulnerabilities of Embedded Devices

Tech20202020-07-16T07:49:58+00:00Tags: CISSP-Course, CISSP-Training, CISSP-Training-Course, Cyber Attacks, cyber crime, cyber security, CyberSecurity, Digital Watches, Embedded Devices, Firewalls, Free-CISSP-Course, ITperfection, Network Attacks, Network Security, Vulnerabilities of Embedded Devices|

Assessing & Mitigating Vulnerabilities of Embedded Devices Embedded devices or embedded computer systems are the computing system specially designed for a dedicated purpose with the mechanical and electrical system. These embedded systems may have internet connectivity. An example of the embedded system commonly used for general purposes are: Digital Watches Automobiles and other vehicles [...]

Assessing & Mitigating Vulnerabilities of Mobile Systems

Tech20202020-07-15T13:03:26+00:00Tags: Application update issues, Application vulnerability, Assessing & Mitigating Vulnerabilities of Mobile Systems, CISSP-Course, CISSP-Training, CISSP-Training-Course, Cyber Attacks, cyber crime, cyber security, CyberSecurity, Data Exfiltration, Data Loss, Data Security, Data Tampering, Excessive Permissions, Free-CISSP-Course, ITperfection, Jailbreaking and Rooting, Malicious application on Store, Malicious third-party applications, Malware, Malware and rootkits, Mobile Systems, Network Attacks, Network Security, Operating system updates issues, Physical Attack, Weak Encryptions|

Assessing & Mitigating Vulnerabilities of Mobile Systems These days, one of the most important aspects of cyber security is the ability to secure mobile systems. Smartphones available in the market are running on different popular Operating systems such as iOS, Blackberry OS, Android, Symbian, and Windows, etc. All of these have an online store for [...]

Assessing & Mitigating Vulnerabilities of Web Systems

Tech20202020-07-15T13:06:11+00:00Tags: Assessing & Mitigating Vulnerabilities of Web Systems, Broken Session Management, Buffer Overflow, CISSP-Course, CISSP-Training, CISSP-Training-Course, Cookie Poisoning, Cross-Site (XSS), Cross-Site Request Forgery, Cyber Attacks, cyber crime, cyber security, CyberSecurity, Defective authentication, Defective session management, Directory Traversal, DMZ attack, DoS attack, Failure to block cross-site request forgery attacks, Failure to block cross-site scripting attacks, Failure to block injection attacks, Failure to protect direct objects references, Free-CISSP-Course, General Web System Threats, Information Leakage, Insecure Storage, ITperfection, Log tampering, Network Access Attacks, Network Attacks, Network Security, Parameter/Form Tampering, Security Misconfiguration, Session Hijacking, SQL Injection, Web Application Threats|

Assessing & Mitigating Vulnerabilities of Web Systems Web Servers are the programs that are used for hosting websites. Web servers may be deployed on a separate web server hardware or installed on a host as a program. One of the most important aspects of cyber security is the ability to secure web systems. This [...]

Vulnerability Assessment & Mitigating Vulnerabilities of Security Architectures- Part II

Tech20202020-07-15T14:09:37+00:00Tags: CISSP-Course, CISSP-Training, CISSP-Training-Course, Cloud Deployment Models, Cloud Service Consumer, Cloud-based systems, Cyber Attacks, cyber crime, cyber security, CyberSecurity, Distributed systems, Free-CISSP-Course, Hybrid Cloud, IaaS, Infrastructure as a service, Internet of things, IoT, IoT Attack Areas, ITperfection, Mitigating IoT Threats & Vulnerabilities, Mitigating Vulnerabilities, Network Attacks, Network Security, PaaS, Platform as s service, Private Cloud, Public Cloud, Responsibilities in Cloud Security, SaaS, software as a service|

Assessing & Mitigating Vulnerabilities of Security Architectures- Part II (IoT) Cloud-based systems Cloud Computing eliminates the need for on-premises devices by renting a virtual machine hosted by a trusted third-party. This remote computing enhances the efficiency, performance, scalability, and security. There are three different models for cloud computing: Iaas (Infrastructure as a service): Instead [...]