SSCP Systems Security Certified Practitioner All-in-One Exam Guide, Third Edition
by Darril Gibson
SSCP Systems Security Certified Practitioner All-in-One Exam Guide, Third Edition, 3rd Edition
- Cover
- Title Page
- Copyright Page
- Dedication
- Contents at a Glance
- Contents
- Acknowledgments
- Introduction
- Exam Objective Map
- Chapter 1 Security Fundamentals
- Chapter 2 Access Controls
- Chapter 3 Basic Networking and Communications
- Understanding Use Cases
- Reviewing the OSI Model
- Comparing the OSI and TCP/IP Models
- Understanding Network Topologies and Relationships
- Reviewing Basic Protocols and Ports
- Comparing IPv4 and IPv6
- Dynamic Host Configuration Protocol
- Address Resolution Protocol
- Network Discovery Protocol
- Domain Name System
- Internet Control Message Protocol
- Internet Group Message Protocol
- Simple Network Management Protocol
- File Transfer Protocol
- Telnet
- Secure Shell
- Hypertext Transfer Protocol and Hypertext Transfer Protocol Secure
- Transport Layer Security and Secure Sockets Layer
- Network File System
- Routing Protocols
- E-mail Protocols
- Internet Protocol Security
- Tunneling Protocols
- Mapping Well-Known Ports to Protocols
- Comparing Ports and Protocol Numbers
- Comparing Internetwork Trust Architectures
- Exploring Wireless Technologies
- Chapter Review
- Chapter 4 Advanced Networking and Communications
- Chapter 5 Attacks
- Comparing Attackers
- Exploring Attack Types and Countermeasures
- Basic Countermeasures
- Spoofing
- Data Theft
- DoS
- DDoS
- Botnets and Zombies
- Sniffing Attack
- Reconnaissance and Fingerprinting Attacks
- Salami Attack
- Man-in-the-Middle
- Replay
- Session Hijacking
- DNS Cache Poisoning
- Smurf and Fraggle Attacks
- Software Security as a Countermeasure
- Buffer Overflow Attacks
- Injection Attacks
- Cross-Site Scripting
- Cross-Site Request Forgery
- Password Attacks
- Spam
- Phishing Attacks
- Phishing and Drive-by Downloads
- Spear Phishing and Whaling
- Vishing
- Smishing
- Zero Day Exploits
- Covert Channel
- Wireless Attacks and Countermeasures
- Understanding Social Engineering
- Chapter Review
- Chapter 6 Malicious Code and Activity
- Identifying Malicious Code
- Understanding Malware Delivery Methods
- Implementing Malicious Code Countermeasures
- Antivirus Software
- Keeping AV Signatures Up to Date
- Spam Filters
- Content-filtering Appliances
- Keeping Operating Systems Up to Date
- Scanners
- Beware of Shortened Links
- Sandboxing
- Least Privilege
- Software Security
- Application Whitelisting and Blacklisting
- Participating in Security Awareness and Training
- Common Vulnerabilities and Exposures
- Chapter Review
- Chapter 7 Risk, Response, and Recovery
- Chapter 8 Monitoring and Analysis
- Operating and Maintaining Monitoring Systems
- Events of Interest
- Intrusion Detection Systems
- IDS Alerts
- Network-based Intrusion Detection Systems
- Host-based Intrusion Detection Systems
- Intrusion Prevention Systems
- Detection Methods
- Wireless Intrusion Detection and Prevention Systems
- Analyze Monitoring Results
- Detection Systems and Logs
- Detecting Unauthorized Changes
- Using Security Information and Event Management Tools
- Continuous Monitoring
- Document and Communicate Findings
- Performing Security Tests and Assessments
- Chapter Review
- Operating and Maintaining Monitoring Systems
- Chapter 9 Controls and Countermeasures
- Chapter 10 Auditing and Management Processes
- Chapter 11 Security Operations
- Chapter 12 Security Administration and Planning
- Chapter 13 Legal Issues
- Chapter 14 Cryptography
- Appendix About the Online Content
- Glossary
- Index
ABOUT THE AUTHOR
Darril Gibson is the CEO of YCDA, LLC (short for You Can Do Anything) and he has authored or coauthored more than 40 books. Darril regularly writes, consults, and teaches on a wide variety of technical and security topics and holds several certifications, including (ISC)2 SSCP and CISSP; CompTIA Security+ and CASP; Microsoft MCSE and MCITP; and ITIL Foundations. In response to repeated requests, Darril created the https://gcgapremium.com/ site where he provides additional study materials for several certification exams. He regularly posts blog articles (https://blogs.getcertifiedgetahead.com/) about certification topics and uses that site to help people stay abreast of changes in certification exams. You can contact him through either of these sites. Darril lives in Virginia Beach with his wife and two dogs. Whenever possible, they escape to a small cabin in the country on over 20 acres of land that continues to provide them with peace, tranquility, and balance.
About the Technical Editor
Josh More has more than 18 years of experience in security, IT, development, and system and network administration. Currently, he runs Eyra Security, a security and business improvement consulting firm based in Minneapolis, MN. Josh holds various security and technical certifications and has served in a leadership position on several security-focused groups. He writes a blog on security at www.starmind.org, often taking a unique approach to solving security problems by applying lessons from other disciplines such as agile development, lean manufacturing, psychology, economics, and complexity science. He has also written several books on IT, information security, and career management.
-
No Comment