CVSS
Common Vulnerability Scoring System
ISMS
Information Security Management System
Network Profiling
Network profiling is the process of capturing, understanding, and characterising the typical behaviour of a network over time. It involves establishing a baseline, which is a statistical representation of the network’s standard operation at any given point in time. Once this baseline is established, any significant deviation from it might be indicative of potential issues, anomalies, or security threats.
WAN
Wide Area Network
LAN
Local Area Network
Network Profile Elements
- Session duration (The time between the establishment of a data flow and its termination)
- Total Throughput (Amount of data passing from a given source to a given destination in a given period of time)
- Ports Used (A list of TCP or UDP processes that are available to accept data)
- Critical Asset Address Space (The IP addresses or the logical location of essential systems or dat)
TCP
Transmission Control Protocol
UDP
User Datagram Protocol
Server Profiling
Server profiling is used to establish the accepted operating state of servers. A server profile is a security baseline for a given server. It establishes the network, user, and application parameters that are accepted for a specific server.
Server profile Elements
- Listening ports (The TCP and UDP daemons and ports that are allowed to be open on the server)
- Logged-in users and accounts (The parameters defining user access and behaviour)
- Service accounts (The type of services an application is allowed to run)
- Software environment (The tasks, processes and applications that are permitted to run on the server)
NBA
Network Behaviour Analysis
the analysis of this diverse, unstructured data using Big Data analytics techniques to detect network attacks
-
Risk Management Continue5
-
Informationn Security And Risk Management41
-
Security Management9
-
Security Roles and Responsibilities7
-
Data Classification and Protection8
-
Personnel Security3
-
Cryptography33
-
Governance and compliance21
-
Governance2
-
Ethics12
-
Security Management Framework35
-
Application of Cryptography7
-
Management of Cryptography13
-
Encryption Alternatives2
-
Network Security Testing11
-
Security Automation2
-
Chapter 10 - Wired Telecom Technologies13
-
Chapter 10 - Network Technologies11
-
Chaper 10 - Network Topologies5
-
Chapter 10 - Ethernet Devices7
-
Chapter 10 - Wireless Network Technologies5
-
Chapter 10 - Network Protocols24
-
Chapter 10 - Network-Based Threats, Attacks and Vulnerabilities15
-
Network Security Testing Tools8
-
Penetration Testing9
-
Information Sources5
-
Threat Intelligence services11
-
Network and Server Vulnerability11
-
Common Vulnerability Scoring System9
-
Secure Device Management22
-
Enpoint Vulnerability Quiz11
-
Module 5 - Risk Management21
-
Module 5 - Risk Assessment10
-
Module 5 - Security Control11
-
Chapter 2 - Access Control11
-
Chapter 2 - Access Control Technologies and Methods8
-
Chapter 2 - Access Control Attacks15
-
Chapter 2 - Access Control Processes6
-
Chapter 2 - Access Control Concepts13
-
Chapter 2 - Testing Access Controls4
-
Module 6 - Digital Forensics26
-
Module 6 - The Cyber Kill Chain & Diamond Model21
-
Module 6 - Incident Response17
-
Module 6 - Disaster Recovery1
-
Chapter 3 - Operating Systems12
-
Chapter 3 - Software Models and Technologies7
-
Chapter 3 - Threats in Software Environments23
-
Chapter 3 - Threats in Software Continued6
-
Chapter 3 - Security in the Software Development Life Cycle7
-
Chapter 3 - Application Environment and Security Controls5
-
Chapter 4 - Business Continuity and Disaster Recovery Planning4
-
Chapter 9 - Security Concepts16
-
Chapter 9 - Information Systems Evaluation Models7
-
Chapter 9 - Certification and Accreditation5
