SON 1 Flashcards
What is the CIA triad?
Confidentiality
Integrity
Availability
How is the CIA triad like putting files in a safe?
-opened by you
-edited by you
-safe is available
Who fights CIA?
DAD
What is DAD?
Disclosure
Alteration
Denial
What do spy DADs do to CIA safes?
-Read files
-Edit files
-Steal files
Zero Trust and safes?
Nobody can be trusted in a room with the safe!
Non-Repudiation and safes?
fingerprints on the safe
2 concepts within Zero-Trust
Data Plane
Control Plane
AAA
Authentication
Authorization
Accounting
Authentication examples
Biometrics
Knowledge-Based
Multiple Factor
What tools systems use to Authenticate?
Certs & keys
IP Allow list
MAC Addr Filter
How systems authorize subjects?
Permissions & Privileges
Access Control
Authorization Models
Example of Access Control
Access Control Lists (ACLs)
Example authorization models
Mandatory Access Control
Discretionary Access Control
(MAC&DAC)
How to do network Accounting?
User Activity Tracking
Audit Trails & Logs
GAP Analysis?
ID gap in security
