How to Cheat at Securing Your Network

Chapter 1 General Security Concepts: Access Control, Authentication, and Auditing Introduction to AAA What is AAA? Access Control Authentication Auditing Access Control MAC/DAC/RBAC MAC DAC RBAC Authentication Kerberos CHAP Certificates Username/Password Tokens Multi-factor Mutual Authentication Biometrics Auditing Auditing Systems Logging System Scanning Disabling Non-essential Services, Protocols, Systems and Processes Non-essential Services Non-essential Protocols Disabling Non-essential Systems Disabling Non-essential Processes Disabling Non-Essential Programs Summary Solutions Fast Track Frequently Asked Questions Chapter 2 General Security Concepts: Attacks Attacks Active Attacks DoS and DDoS Resource Consumption Attacks SYN Attacks DDoS Attacks Software Exploitation and Buffer Overflows MITM Attacks TCP/IP Hijacking Replay Attacks Spoofing Attacks IP Spoofing E-mail Spoofing Web Site Spoofing Phishing Wardialing Dumpster Diving Social Engineering Vulnerability Scanning Passive Attacks Sniffing and Eavesdropping Password Attacks Brute Force Attacks Dictionary-based Attacks Malicious Code Attacks Viruses Worms Trojan Horses Rootkits Back Doors Logic Bombs Spyware and Adware Summary Solutions Fast Track Frequently Asked Questions Chapter 3 Communication Security: Remote Access and Messaging Introduction he Need for Communication Security Communications-based Security Remote Access Security 802.1x EAP Vulnerabilities Media Access Control Authentication VPN Site-to-site VPN Remote Access VPN RADIUS Authentication Process Vulnerabilities TACACS/+ TACACS XTACACS TACACS+ Vulnerabilities PPTP/L2TP PPTP L2TP SSH How SSH Works IPSec IPSec Authentication ISAKMP Vulnerabilities Eavesdropping Data Modification Identity Spoofing User Vulnerabilities and Errors Administrator Vulnerabilities and Errors E-mail Security MIME S/MIME PGP How PGP Works Vulnerabilities SMTP Relay Spoofing E-mail and Mobility E-mail and Viruses Spam Hoaxes Phishing Summary Solutions Fast Track Frequently Asked Questions Chapter 4 Communication Security: Wireless Introduction Wireless Concepts Understanding Wireless Networks Overview of Wireless Communication in a Wireless Network Radio Frequency Communications Spread Spectrum Technology Wireless Network Architecture CSMA/CD and CSMA/CA Wireless Local Area Networks WAP WTLS IEEE 802.