8. Day 8 – Communication and Network Security - Network Security
by M. L. Srinivasan
CISSP in 21 Days - Second Edition
- CISSP in 21 Days Second Edition
- CISSP in 21 Days Second Edition
- Credits
- About the Author
- About the Reviewer
- www.PacktPub.com
- Preface
- 1. Day 1 – Security and Risk Management - Security, Compliance, and Policies
- 2. Day 2 – Security and Risk Management - Risk Management, Business Continuity, and Security Education
- 3. Day 3 – Asset Security - Information and Asset Classification
- 4. Day 4 – Asset Security - Data Security Controls and Handling
- 5. Day 5 – Exam Cram and Practice Questions
- 6. Day 6 – Security Engineering - Security Design, Practices, Models, and Vulnerability Mitigation
- 7. Day 7 – Security Engineering - Cryptography
- 8. Day 8 – Communication and Network Security - Network Security
- An overview of communication and network security
- Network architecture, protocols, and technologies
- Open System Interconnect (OSI) model
- OSI layers and security
- Application layer protocols and security
- Presentation layer protocols and security
- Summary
- Sample questions
- 9. Day 9 – Communication and Network Security - Communication Security
- An overview of communication security
- Security in communication channels
- Attacks on communication networks
- Preventing or mitigating communication network attacks
- Summary
- Sample questions
- 10. Day 10 – Exam Cram and Practice Questions
- 11. Day 11 – Identity and Access Management - Identity Management
- 12. Day 12 – Identity and Access Management - Access Management, Provisioning, and Attacks
- 13. Day 13 – Security Assessment and Testing - Designing, Performing Security Assessment, and Tests
- An overview of security assessment and testing
- Security assessment and test strategies
- Security controls
- Summary
- Sample questions
- 14. Day 14 – Security Assessment and Testing - Controlling, Analyzing, Auditing, and Reporting
- 15. Day 15 – Exam Cram and Practice Questions
- 16. Day 16 – Security Operations - Foundational Concepts
- An overview of operations security
- The physical security design
- Physical and operations security controls
- Operations/facility security
- Protecting and securing equipment
- Computer investigations
- Summary
- Sample questions
- 17. Day 17 – Security Operations - Incident Management and Disaster Recovery
- 18. Day 18 – Software Development Security - Security in Software Development Life Cycle
- 19. Day 19 – Software Development Security - Assessing effectiveness of Software Security
- 20. Day 20 – Exam Cram and Practice Questions
- 21. Day 21 – Exam Cram and Mock Test
This and the next chapter will cover foundational concepts in network architecture and network security. IP and non-IP protocols, their application, threats, attacks, vulnerabilities, and countermeasures are covered with suitable examples. Wireless networks and the security requirements are also covered. The application of cryptography in communication security is covered with illustrations. Concepts related to securing network components are also covered.
The communication and network security domain deals with the security of voice and data communications through local area, wide area, and remote access networking. The focus here is to understand the networking models, such as Open System Interconnect (OSI) and TCP/IP as well as the security mechanisms for Internet/Intranet/Extranet, such as firewalls, routers, and intrusion detection/protection systems. Candidates are expected to have knowledge in the areas of secure communications, securing networks, threats, vulnerabilities, attacks, and countermeasures to communication networks and protocols that are used in remote access.
Observe the following illustration. It gives an overview of communication and network security in the entity-relationship model, and it represents the topics covered in this chapter:
The following bullet points represent a brief overview of the preceding diagram. These points explain the overall structure of this chapter in a logical sequence:
- Applying secure design principles to network architecture
- Understanding IP and non-IP protocols and security weaknesses
- Understanding wireless networks and security requirements
- Getting an overview of application of cryptography in communication security
- Understanding the security requirements in network components
-
No Comment