Authentication Methods Type 1 Authentication: Something you know Passwords Static Passwords – reusable password that may or may not expire. User generated and work best with when combined with other authentication type such as smart card or biometric Passphrase –…
Read More
Network Architecture and Design Network Defense-in-depth Anyone control may fail, so multiple controls are always recommended. Routers, Firewalls, IPS, hostbased protections, Antivirus, patching and user awareness training should all be used in concert so that failure of one control should…
Perimeter Defenses Fences Fences range from 1M to 2.4M with barbed wire on top and should be designed to steer ingress and egress to contolled points such as doors and gates. Gates Gates range from Class I gates (home) deter…
Cornerstone Cryptographic Concepts Cryptology – Science of secure communications. Encompasses both cryptography and cryptoanalysis Cryptography – Creates messages whose meaning is hidden Cryptoanalysis – Science of breaking encrypted messages Cipher – A cryptographic algorithm Plaintext – unencrypted message Encryption –…
Security Models Reading down and Writing Up Reading Down – Occurs when a subject reads an object at a lower sensitivity level. ie A top secret subject reading a secret object. Writing Up – At the expense of integrity, when…
Classifying Data The day to day management of access control requires management of labels, clearances, formal access approval, and need to know. These formal mechanisms are typically used to protect highly sensitive data, such as government or military data. Labels…
Information Security Concepts Confidentiality, Integrity, Availaibilty – CIA Triad Confidentiality – Seeks to prevent unauthorized read access to data. Data must only be accessible to users who have the clearance, formal access approval and the need to know. Integrity –…
Top 5 most popular GIAC certifications based on number of certified professionals.
Updated Aug 28, 2015 – Minimum passing score is now 74% *started on or after August 28, 2015* Knowing the Exam The GIAC GSEC exam is one of the more popular exams that GIAC is offering. As of this writing,…
Security 401.5 – Windows Security Can’t help but notice the ice cream bar on my post? Well day 5 is ice cream day! Instead of your usual sugary snacks, you get to line up for ice cream during one of…