Zero-Day Attacks, Not yet detected or published, increasingly common, Least Privilege, Defines Rights and permissions for an employee, minimal privilege's for maximum security, Role-Based Access Control (RBAC), Determines user rights based on group, if you're in shipping and receiving you can use the shipping software, but if you are the manager you can review the shipping logs., Zero Trust, Covers every device, every process, every person, everything must be verified, MF auth, encryption, system permissions, additional firewalls, monitoring, analytics, Defense in depth, Firewall, Screen subnet, Hashing, Authentication, IPS, VPN, Card access, anti-virus, everything working together to provide security, Segmentation, Logically or physically separated LANS, VLANS, Screened Subnet, a DMZ, Split Knowledge, Dual Control, both keys at the same time, NAC (Network Access Control), 802.1x port based security with physical interfaces, makes use of EAP and RADIUS, Honey Pot, Attracts the bad guys and traps them there in order to gain interesting recon, RADIUS (Remote Authentication Dial-in User Service, Centralized authentication for users, available on almost any server operating system, one of the more common AAA protocols., TACACS (Termincal access controller access-control system) +, Remote authentication protocol,, LDAP (lightweight directory access protocol), Used for reading and writing directories over an IP network, Kerberos, Network authentication protocol, authenticate once, trusted by the system, no need to reauthenticate, Posture Assessment, BYOD, is it trusted, running AV? Encrypted?, SIEM Security Information and Event Management, Logs of security events, alerts, log aggregation and long term storages, correlates diverse data types, forensic analysis, On-Path Attacks, Man in the middle attacks, arp and dns poisoning

Security N+

بواسطة
طباعة
تضمين

لوحة الصدارة

النمط البصري

الخيارات

تبديل القالب

استعادة الحفظ التلقائي: ؟