Vulnerability Assessment & Mitigating Vulnerabilities of Security Architectures- Part I One of the most important topics in CISSP course is vulnerability assessment. In this section, we discuss the techniques used to identify and fix vulnerabilities in systems. Server-Client based systems We begin the discussion of vulnerability assessment by talking about various aspects of Server-Client [...]
Security Capabilities of Information Systems Security Capabilities of Information Systems are of important aspects of CISSP training course. In this section, we focus on Memory Protection, Trusted Platform Module (TPM) and Encryption / Decryption. Memory Protection Information Systems are very important. So Memory Protection is an important security concept associated. Memory in a computer [...]
Controls for Systems Security Requirements Building secure software is critical to information security. Also the systems that software runs on must themselves be securely designed and built. In order to evaluate any program or system, technical evaluation evaluates the performance and security-related capabilities. They are also compared with other competing products to evaluate different [...]
Fundamental Concepts of Security Models Fundamental Security models illustrate concepts that can be used when analyzing an existing system or designing a new one and as a result, these models cause we understand complex security mechanisms in information systems. Security model security is one of most important the aspects of CISSP training course. Bell-LaPadula [...]
Implement and Manage Engineering Processes Using Secure Design Principles In this section of this tutorial, we'll take a look at engineering processes using secure design principles to help you understand the different aspects of engineering design principles. Key terms Objects : Resources, which may be in the form of data, services or processes access [...]
Security Operations Domain This domain represents 13 percent of the CISSP certification exam. The prime purpose of security operations practices is to safeguard information assets that reside in a system. Security operations represents routine operations that occur across many of the CISSP domains. Security operations practices help to identify threats and vulnerabilities and implement [...]
Security Assessment & Testing Domain This domain represents 12 percent of the CISSP certification exam. Security assessment and testing is based on designing, assessment and analyzing phases. The purpose of designing an interpretation and security assessment is to ensure that all security controls that have been implemented work properly. Assessment and testing are performed [...]
Security Architecture & Engineering Domain This domain cover the concepts, fundamental principles, basic architectures, and standards required to design a secure architecture. This domain represents 13 percent of the CISSP certification exam. The main topics in this domain are: Security models and concepts Information systems security models Security capabilities of information systems Vulnerabilities in [...]
Establish Handling Requirements Handling, sharing, and allowing access to an asset or a set of assets need to be ensured by the confidentiality, integrity, and availability requirements. In this part of this tutorial, we'll take a look at establishing handling requirements to help you understand the aspects of establishing handling. Appropriate policies and procedures [...]