Explaining Network Security Concepts

---

Goals

• Explain common security concepts
• Distinguish risk, vulnerability, exploit, and threat
• Explain the importance of audits and regulatory compliance
• Summarize types of attacks and their impact on the network

Security Concepts

• Common Security Terminology
  • CIA Triad
  • Threats, Vulnerabilities, Risk, and Impact
• Security Audits and Assessments
  • Risk Assessment
• Regulatory Compliance
• Cryptography Types
• Vulnerability and Exploit Types
  • Vulnerability Assessment
• Deception Technologies

Network Threats and Attacks

Effective network security design requires an understanding of how threat actors can compromise defenses.

• Threat Assessment
  • Threat Research
• Attack Types
  • Footprinting and Fingerprinting Attacks
  • Spoofing Attack
  • Denial of Service (DoS) Attack
  • Distributed DoS (DDoS) Attack
• Malware Attacks

Spoofing Attacks

• Man-in-the-Middle Attack (On-Path)
• MAC Flooding Attack
• VLAN Hopping Attack

Rogue System Attacks

A rogue system is hardware or software that spoofs legitimate services, such as DNS or DHCP.

• Rogue Devices and Services
• Rogue DHCP
• DHCP Snooping
• DNS Attacks

Social Engineering

• Social Engineering
• Password Attacks