SEC 572 Entire Course New Flashcards
Devry SEC 572 All Assignments NEW Check this A+ tutorial guideline at http://www.assignmentcloud.com/sec-572-devry/sec-572-all-assignments-new For more classes visit http://www.assignmentcloud.com
SEC 572 Week 1 iLab Denial of Service Attacks NEW
SEC 572 Week 2 Network Security NEW
SEC 572 Week 3 iLab MD5 Best and Worst Use Cases NEW
SEC 572 Week 4 iLab Intrusion Detection Systems NEW
SEC 572 Week 5 iLab VPN NEW
SEC 572 Week 6 iLab NEW
Devry SEC 572 All Assignments NEW Check this A+ tutorial guideline at http://www.assignmentcloud.com/sec-572-devry/sec-572-all-assignments-new For more classes visit http://www.assignmentcloud.com
DEVRY SEC 572 Week 1 iLab Denial of Service Attacks
Check this A+ tutorial guideline at
http://www.assignmentcloud.com/sec-572-devry/sec-572-week-1-ilab-denial-of-service-attacks-new
For more classes visit
http://www.assignmentcloud.com
In this lab, you will discover and analyze one of two different real network attacks. This will give you insight into the motivation, vulnerabilities, threats, and countermeasures associated with your selected network attack.
There are two categories of network attacks you will be concerned with this week. The first is a network denial of service (DoS) attack, and the second is a targeted attack on a network device connected to the network. You will also discover the distributed denial of service (DDoS) attack and you may use that one as well. The key difference between a DoS and a DDoS attack is that the DDoS attack is launched towards the target from numerous source locations. A botnet attack is an example of a DDoS attack.
Your goal is to select a specific instance of one type of attack and provide a managerial-style awareness document. Assume that you are delivering your analysis to business or government managers who have a general understanding of network communications.
The reason for the choice of two different attacks is to allow you to select a broad or narrow focus for your work. This will also give you a high probability of discovering a very current attack.
In general, the network denial of service attack may significantly diminish the network’s ability to properly communicate. The result will be a loss of service, such as the inability to access a website’s home page. The DoS attacks have ranged from a large global footprint to a specific target network endpoint. For example, the SQL slammer worm was a global DoS attack, lasting for days and requiring server modifications. In contrast, selected websites were shut down by hacker groups, such as the hacktivist collective Anonymous, requiring support from the ISPs and firewall vendors.
The targeted attack on a network device can result in a DoS as well, but it uses the current network to deliver the destructive payload to the target system. For example, a SQL injection attack’s target is the database server, with the Internet and the corporate network actually delivering the destructive payload to the target. Furthermore, this type of attack may leave the network functional because it uses it to propagate to other devices or uses the victim’s network to launch other attacks.
Each section of your report may require 1–6 sentences to properly address the topic. For example, the attack discovery and resolution dates will be one sentence, whereas the synopsis of the attack will require about six sentences. Your primary goal is to provide the reader valuable information about the attack.
Lab Document Framework
• Name of the attack
• Attack discovery and resolution dates
• Synopsis of the attack
• Vulnerable target(s) for the attack and likely victims
• Probable motivation(s) of the attack
• Probable creators of the attack
• Deployment, propagation, or release strategy of the attack
• Published countermeasures against the attack
• Published recovery techniques used to return to normal
operations after the attack
• Recommended incident reporting measures
• Citations and resources used in this report
DEVRY SEC 572 Week 1 iLab Denial of Service Attacks
Check this A+ tutorial guideline at
http://www.assignmentcloud.com/sec-572-devry/sec-572-week-1-ilab-denial-of-service-attacks-new
For more classes visit
http://www.assignmentcloud.com
DEVRY SEC 572 Week 2 Network Security
Check this A+ tutorial guideline at
http://www.assignmentcloud.com/sec-572-devry/sec-572-week-2-network-security-new
For more classes visit
http://www.assignmentcloud.com
SEC 572 Week 2 Network Security
Check this A+ tutorial guideline at
http://www.assignmentcloud.com/sec-572-devry/sec-572-week-2-network-security-new
For more classes visit
http://www.assignmentcloud.com
DEVRY SEC 572 Week 3 iLab MD5 Best and Worst Use Cases
Check this A+ tutorial guideline at
http://www.assignmentcloud.com/sec-572-devry/sec-572-week-3-ilab-md5-best-and-worst-use-cases-new
For more classes visit
http://www.assignmentcloud.com
In this lab, you will explore the best and worst use of a popular message digest algorithm. For this one, we shall focus on MD5, but all of this can be applied to the other ones, such as SHA-1.
In the best use portion, you will discover and outline a specific implementation of the MD5 algorithm, where it provides high value and a very low security risk.
In contrast, in the worst use portion, you will attempt to crack an MD5 hash (this is ethical hacking) and suggest a scenario where the worst use practice may actually be implemented.
The reason for this lab is to give you an understanding of how cryptography can be properly and improperly used and how changes in technology may serve to weaken trusted cryptographic applications.
Best Use of MD5 or SHA-1: Outline a scenario where the MD5 or SHA-1 algorithms are put to good and proper use. Start by stating what the algorithm does and give a use case where either MD5 or SHA-1 has a best fit condition. It is generally about 5–10 sentences.
Ethical Hacking of MD5: Copy the following text into your lab document and fill in the blanks.
MD5 Hash 1: 4eefef62c45d66f55d89c515d8352c5c Input was: _____
MD5 Hash 2: 5f4dcc3b5aa765d61d8327deb882cf99 Input was: _____
MD5 Hash 3: d6a6bc0db10694a2d90e3a69648f3a03 Input was: _____
Worst Use of MD5 or SHA-1: Outline a scenario where the MD5 or SHA-1 algorithms are put to poor or improper use. Start by stating what improper assumptions were made and how it did (or could) lead to a security compromise. It is generally about 5–10 sentences.
Citations and Resources Used in This Report: Tell us where you received external guidance and ideas. If you have presented original ideas, then give yourself credit, and tell us why you believe it is correct.
Check this A+ tutorial guideline at
http://www.assignmentcloud.com/sec-572-devry/sec-572-week-3-ilab-md5-best-and-worst-use-cases-new
For more classes visit
http://www.assignmentcloud.com
DEVRY SEC 572 Week 4 iLab Intrusion Detection Systems
Check this A+ tutorial guideline at
http://www.assignmentcloud.com/sec-572-devry/sec-572-week-4-ilab-intrusion-detection-systems-new
For more classes visit
http://www.assignmentcloud.com
Lab Document Framework
The Target Network: Indicate the type of activities and data that it supports in a few sentences. For example, it is the website for an educational institution that holds personal academic and financial information, or it is the network used to control devices in a chemical plant. Use your imagination, but select something that is real and meaningful to you.
The Protection System: Select one from the presented list (Step 2), or choose your own protection technology, if it is highly relevant.
The Body of the Management Briefing Document: See the guidance in Step 3. It is generally about 4 to 10 paragraphs.
Citations and Resources Used in this Report: Tell us where you received external guidance and ideas. If you have presented original ideas, then give yourself credit, and tell us why you believe it is correct.
Step 1
Broadly outline the target network. Indicate the type of activities and data that it supports in a few sentences.
Step 2
Select the protection system. Choose from one of the following.
Intrusion detection system (IDS)
Intrusion protection system (IPS)
Research honeypot
Active honeypot
Offensive honeypot
Step 3
Create a management briefing document that will inform senior decision makers about their options, vendors, products, relevant examples, and issues associated with your selected protection (from Step 2). If cost can be identified, then please include that information as well. It is generally about 4 to 10 paragraphs.
In this lab, you will explore at least one IDS, IPS, or Honeypot currently offered by product vendors and cloud service providers. You will be making a security recommendation, related to the protection of a target network of your choice.
There are a few different paths you may take in this lab, so let’s address some of the distinguishing features and definitions that are out there.
IDS and IPS Overview
An intrusion detection system (IDS) generally detects and logs known intrusions or anomalous network activity. Generally, no real-time protection actually occurs, therefore false-positives create little or no damage. Optionally, suspicious network traffic can be routed to an alternate network, such as a honeypot.
An intrusion protection system (IPS) generally detects, logs, and then blocks known intrusions or anomalous network activity. False-positives are an issue and will result in a self-inflicted denial of service condition. Optionally, suspicious network traffic can be routed to an alternate network, such as a honeypot.
Honeypot Overview
Honeypots come in several broad categories. The most common labels we apply to them are research honeypots, active honeypots, and offensive honeypots. They are designed to do what their label suggests, and here is a brief summary.
Note: Seek qualified legal advice before deploying any type of honeypot.
Research honeypots generally collect and analyze data about the attacks against a decoy-network. They can also route the attacker to new decoy-networks, to gather more details about the potential attacks. The data gathered are used to understand the attacks and strengthen the potential target networks.
Active honeypots have many of the features found in a research honeypot, but they also hold special content that, once taken by the attackers, can be used as evidence by investigators and law enforcement. For example, active honeypots may have database servers containing a fake bank account or credit card information.
Offensive honeypots are configured with many of the features of the active honeypots, with one interesting and dangerous addition: they are designed to damage the attacker. When used outside of your own network, this type of honeypot can result in vigilantism, attacks against false-targets, and may result in criminal charges against the honeypot operators. Offensive honeypots are not recommended for non-law-enforcement organizations. However, when used fully within your own network, this technique can detect and neutralize the attacker.
Any of the above services can be implemented on a privately managed network, or through a cloud service. The selection of one platform over another will generally determine where the specific protection occurs—on your network or in the cloud.
The reason for this lab is to give you an understanding of how special network technology can be used as a security research tool, while also providing varying degrees of protection.
Each section will vary in size based on the requirements. Drive yourself to create a useful document for the direction you have selected.
DEVRY SEC 572 Week 4 iLab Intrusion Detection Systems
Check this A+ tutorial guideline at
http://www.assignmentcloud.com/sec-572-devry/sec-572-week-4-ilab-intrusion-detection-systems-new
For more classes visit
http://www.assignmentcloud.com
DEVRY SEC 572 Week 5 iLab VPN
Check this A+ tutorial guideline at
http://www.assignmentcloud.com/sec-572-devry/sec-572-week-5-ilab-vpn-new
For more classes visit
http://www.assignmentcloud.com
Lab Document Framework
• Potentially Acceptable VPN Solution:State the general characteristics of one solution that meets the security and user requirements. Name the vendor(s) and VPN services. It is generally about 3 sentences.
• VPN Solution Overview:Outline the technical functionality and customer requirements of your first choice for a VPN service. This may take the form of a feature chart that is mapped to the requirements. Include any special conditions, limitations, or exceptions that exist. It is generally about 2 pages.
• Network Design Illustration:Using a graphic illustration tool, such as Visio, document the logical design of your VPN solution. It is generally about 2 pages.
• Citations and Resources Used in this Report:Tell us where you received external guidance and ideas. If you have presented original ideas, then give yourself credit and tell us why you believe it is correct.
Check this A+ tutorial guideline at
http://www.assignmentcloud.com/sec-572-devry/sec-572-week-5-ilab-vpn-new
For more classes visit
http://www.assignmentcloud.com
DEVRY SEC 572 Week 6 iLab NEW
Check this A+ tutorial guideline at
http://www.assignmentcloud.com/sec-572-devry/sec-572-week-6-ilab-new
For more classes visit
http://www.assignmentcloud.com
Lab Document Framework
• Requirements and Policies of the Secure Wireless Network:State the requirements and general security policies that will drive your design of a secure wireless network at the SOHO. It should be about 5–10 sentences or bullet points.
• Secure Wireless Network Solution Overview:Outline the technical functionality and customer requirements of your secure wireless network. Tell us what the design can do. Include any special conditions, limitations, or exceptions that exist. It should be about 5–10 sentences or bullet points.
• Secure Wireless Network Design Illustration:Using a graphic illustration tool, such as Visio, document the logical design of your secure wireless network design. It should be about two pages.
• Citations and Resources Used in This Report:Tell us where you received external guidance and ideas. If you have presented original ideas, give yourself credit, and tell us why you believe it is correct.
During Week 2, you should have completed iLab 2 of 6: Best Practices for Securing a Wireless Network in a SOHO—The Policy Statement, Processes, and Procedures Guidelines. In this lab, you will explore, select, and justify the selection of a secure wireless network for that (iLab 2) SOHO environment. You shall actually identify the hardware and software needed to support the network security policies and user requirements.
The reason for this lab is to allow you to experience the wireless network technology selection process while working with a typical set of requirements and the current industry offerings.
Basic Wireless Network Requirements and Assumptions
Consult your iLab 2 of 6: Best Practices for Securing a Wireless Network in a SOHO—The Policy Statement, Processes, and Procedures Guidelines for a foundation to your design requirements.
Create your own user requirements that are reasonable and typical for a SOHO.
Check this A+ tutorial guideline at
http://www.assignmentcloud.com/sec-572-devry/sec-572-week-6-ilab-new
For more classes visit
http://www.assignmentcloud.com
