CYS1190 - Security Strategies for Web Applications and Social Networking

• Security Elements and Mechanisms
• Security Policy
• Determining Backups
• Encryption
• Authentication
• Specific Authentication Techniques
• Access Control
• Auditing
• Security Tradeoffs
• Defense in Depth Strategy
• Optional Lab I
• Common Security Principles
• Be Paranoid
• You Must Have a Security Policy
• No System or Technique Stands Alone
• Minimize the Damage
• Deploy Companywide Enforcement
• Provide Training
• Use an Integrated Security Strategy
• Place Equipment According to Needs
• Identify Security Business Issues
• Consider Physical Security
• Optional Lab II

• Network Attack Categories
• Brute-Force, Dictionary, and Password Spraying Attacks
• Rainbow Tables, Pass-the-Hash, and Birthday Attacks
• Password Storage Techniques
• System Bugs and Back Doors
• Malware (Malicious Software)
• TLS encryption
• Social Engineering Attacks
• Denial-of-Service (DoS) Attacks
• Distributed Denial-of-Service (DDoS) Attacks
• Spoofing Attacks
• Scanning Attacks
• Man-in-the-Middle Attacks
• Bots and Botnets
• Ransomware
• SQL Injection
• Cross-Site Scripting (XSS)
• Cross-Site Request Forgery (CSRF)
• Auditing
• Optional Lab

2 LiveLab in this lesson — see the labs panel →

• TCP/IP Security Introduction
• OSI Reference Model Review
• Data Encapsulation
• The TCP/IP Stack and the OSI Reference Model
• Link/Network Access Layer
• Network/Internet Layer
• Transport Layer
• Application Layer
• Protocol Analyzers
• Domain Name Service
• Trusted Platform Modules and Microsoft BitLocker
• Change Management
• Optional Lab

3 LiveLab in this lesson — see the labs panel →

• TCP/IP Security Vulnerabilities
• Implementing Security
• Resources and Services
• Protecting TCP/IP Services
• Simple Mail Transfer Protocol (SMTP)
• Bring Your Own Device (BYOD)
• Internet of Things (IoT)
• Communication Systems
• Physical Security
• Testing Systems
• Security Testing Software
• Security Assessments
• Security and Repetition
• Optional Lab

3 LiveLab in this lesson — see the labs panel →

• Access Control Overview
• Definition and Description of a Firewall
• The Role of a Firewall
• Firewall Terminology
• Operating System and Network Device Hardening
• Firewall Configuration Defaults
• Packet Filter Rules
• Packet Filter Advantages and Disadvantages
• Configuring Proxy Servers
• URL Filtering
• Remote Access and Virtual Private Networks (VPNs)
• Public Key Infrastructure (PKI)
• Cloud Computing and Virtualization
• Optional Lab
• Proactive Detection
• Distracting the Cyber-Attacker
• Deterring the Cyber-Attacker

3 LiveLab in this lesson — see the labs panel →