Security+ Certification/Threats and Vulnerabilities

Threats and Vulnerabilities

Analyze and differentiate among types of malware

• Adware
• Virus
• Worms
• Spyware

• Trojan
• Rootkits
• Backdoors
• Logic bomb
• Botnets

Analyze and differentiate among types of attacks

• Man-in-the-middle
• DDoS
• DoS
• Replay
• Smurf attack
• Spoofing
• Spam
• Phishing
• Spim

• Vishing
• Spear phishing
• Xmas attack
• Pharming
• Privilege escalation
• Malicious insider threat
• DNS poisoning and ARP poisoning
• Transitive access (video Transitive and Client Side Attacks)
• Client-side attacks

Analyze and differentiate among types of social engineering attacks

• Shoulder surfing
• Dumpster diving
• Tailgating
• Impersonation (video Impersonation)

• Hoaxes
• Whaling (video Whaling)
• Vishing

Analyze and differentiate among types of wireless attacks

• Rogue access points
• Interference (video Wireless Interference)
• Evil twin
• War driving
• Bluejacking

• Bluesnarfing
• War chalking
• IV attack
• Packet sniffing (video Wireless Packet Analysis)

Analyze and differentiate among types of application attacks

• Cross-site scripting
• SQL injection (video SQL, XML and LDAP Injection)
• LDAP injection
• XML injection
• Directory traversal/Command injection (video Directory Traversal and Command Injection)
• Buffer overflow

• Zero day
• Cookies and attachments (video Cookies, Header Manipulation and Session Hijacking)
• Malicious add-ons (video Malicious add-ons)
• Session hijacking
• Header manipulation

Analyze and differentiate among types of mitigation and deterrent techniques

Manual bypassing of electronic controls

• Failsafe/secure vs. failopen

Monitoring system logs

• Event logs
• Audit logs
• Security logs
• Access logs

Physical security

• Hardware locks
• Mantraps
• Video surveillance
• Fencing
• Proximity readers
• Access list

Hardening

• Disabling unnecessary services
• Protecting management interfaces and applications
• Password protection
• Disabling unnecessary accounts

Port security

• MAC limiting and filtering
• 802.1x
• Disabling unused ports

Security posture

• Initial baseline configuration
• Continuous security monitoring
• remediation

Reporting

• Alarms
• Alerts
• Trends

Detection controls vs. prevention controls

• IDS vs. IPS
• Camera vs. guard

Implement assessment tools and techniques to discover security threats and vulnerabilities

Vulnerability scanning and interpret results Tools

• Protocol analyzer
• Sniffer
• Vulnerability scanner
• Honeypots
• Honeynets
• Port scanner

Risk calculations

• Threat vs. likelihood

Assessment types

• Risk
• Threat
• Vulnerability

Assessment technique

• Baseline reporting
• Code review
• Determine attack surface
• Architecture
• Design reviews

Within the realm of vulnerability assessments, explain the proper use of penetration testing versus vulnerability scanning

• Penetration testing
  • Verify a threat exists
  • Bypass security controls
  • Actively test security controls
• Exploiting vulnerabilities
  • Vulnerability scanning
  • Passively testing security controls
  • Indentify vulnerability
  • Indentify lack of security controls
  • Indentify common misconfiguration
• Black box
• White box
• Gray box