Title: Class Outline 25
Course: KVCC BUS214 > Section: Class Outlines

1.      Final exam information - Security Pro

2.      Switch Attacks

a.      MAC Flooding

b.      ARP Spoofing/Poisoning

c.      MAC Spoofing

d.      DTP - Trunking

3.      Router Security

a.      Secure Passwords

b.      Secure Protocols

c.      Physical Security

d.      Secure Config File

4.      Intrusion Detection System

a.      What is IDS

i.           Sensors

ii.           Engine/Analyzer

b.      States

i.           Positive

ii.           False Positive

iii.           Negative

iv.           False Negative

c.      Systems Description

i.           Response Capability

i.           Passive

1.      Looks at logs and sensor data

2.      Takes no action beyond

a.      Sending an alert

b.      Shunning

3.      Hard to know it is exists because the actions it takes are not detectable

ii.           Active

1.      IPS Intrusion protection system

2.      Reacts to situation

a.      Automated reactions

b.      Terminate sessions

3.      Easy to detect its existence because of its actions

ii.           Recognition Method

i.           Signature recognition/Pattern Matching

ii.           Anomaly recognition/Behavior Recognition

iii.           Detection Scope

i.           Host based - on individual host

ii.           Network based - dedicated device that looks at network traffic

d.      Fake resources

i.           Honeypot

ii.           Honeynet

iii.           Tarpit/Sticky honeypot

i.           Padded Cell

iv.           Enticement vs Entrapment

5.      Detection vs Prevention controls

a.      Detection

i.           Log Analysis

ii.           Auditing

iii.           IDS

b.      Prevention

i.           Access Controls

ii.           Firewalls

iii.           IPS

Attached Files: | - KVCC BUS214_InfoSystemsSecurity_Outline 25.pdf