SSCP : Systems Security Certification Practitioner - Study Guide and DVD Training System

Note: Supplemental materials are not guaranteed with Rental or Used book purchases.

ISBN: 9781931836807 | 1931836809
Cover: Paperback
Copyright: 3/1/2003

Sorry, this item is currently not available.

The SSCP Study Guide & DVD Training System is a one-of-a-kind integration of text, DVD-quality instructor led training, and Web-based exam simulation and remediation. This system gives you 100% coverage of the official International Information Systems Security Certification Consortium, Inc. (ISC)[superscript 2 SM] SSCP security domains plus test preparation software for the edge you need to pass the exam on your first try. Book jacket.

SSCP Certification Overview

(28)

Introduction

(1)

(ISC)2

(1)

Systems Security Certified Practitioner

(1)

Certified Information Systems Security Professional

(1)

Overview of the SSCP Domains

(1)

Domain One: Access Controls

(1)

Specialty Areas

(3)

Product Types

(1)

Standards and Methodologies

(1)

Domain Two: Administration

(1)

Specialty Areas

(1)

Product Types

(1)

Standards and Methodologies

(1)

Domain Three: Audit and Monitoring

(1)

Specialty Areas

(1)

Product Types

(1)

Standards and Methodologies

(1)

Domain Four: Risk, Response, and Recovery

(1)

Specialty Areas

(3)

Product Types

(1)

Standards and Methodologies

(1)

Domain Five: Cryptography

(1)

Specialty Areas

(2)

Product Types

(1)

Standards and Methodologies

(1)

Domain Six: Data Communications

(1)

Specialty Areas

(1)

Product Types

(1)

Standards and Methodologies

(1)

Domain Seven: Malicious Code or Malware

(1)

Specialty Areas

(1)

Product Types

(1)

Standards and Methodologies

(1)

Summary

(1)

Access Controls

(72)

Domain 1: The access controls area includes the mechanisms that allow a system manager to specify what users and processes can do, which resources they can access, and what operations they can perform

Introduction

(1)

Access Control Objectives

(1)

Obtaining Access

(1)

Identification

(1)

Authentication

(1)

Authorization

(3)

Assurance

(1)

Confidentiality

(1)

Integrity

(1)

Availability

(1)

Accountability and Logging

(2)

Authentication Types

(1)

Something You Know

(2)

Something You Have

(1)

Something You Are

(1)

Authentication Type Combinations

(1)

Enterprise Authentication

(1)

Single Sign-On

(5)

Remote Access Authentication

(2)

Password Administration

(1)

Selecting a Password

(2)

Managing Passwords

(1)

Auditing Passwords

(1)

Access Control Policies

(1)

Access Control Policy Types

(1)

Preventive

(1)

Corrective

(1)

Detective

(1)

Access Control Policy Implementations

(1)

Administrative

(1)

Logical/Technical

(1)

Physical

(1)

Access Control Methodologies

(1)

Centralized

(1)

Decentralized

(1)

Access Control Models

(2)

Discretionary Access Control

(1)

Mandatory Access Control

(1)

Non-Discretionary

(2)

Formal Models

(1)

Bell-LaPadula

(1)

Biba

(1)

Clark-Wilson

(1)

Administrating Access Control

(1)

Account Administration

(2)

Determining Rights and Permissions

(1)

Management of Access Control Objects

(1)

Monitoring

(1)

Securing Removable Media

(1)

Management of Data Caches

(1)

Methods of Attack

(1)

Dictionary Attack

(1)

Brute Force Attack

(3)

Denial of Service Attacks

(1)

Spoofing

(1)

Man In The Middle Attacks

(2)

Spamming

(1)

Sniffers

(1)

Monitoring

(1)

Intrusion Detection Systems

(1)

Alarms

(1)

Audit Trails

(1)

Violation Reports

(1)

Penetration Testing

(1)

Methodology

(2)

Identifying Weaknesses

(1)

Summary of Exam Objectives

(1)

Exam Objectives Fast Track

(4)

Exam Objectives Frequently Asked Questions

(1)

Self Test

(6)

Self Test Quick Answer Key

100

(1)

Administration

101

(74)

Domain 2: The administration area encompasses the security principles, policies, standards, procedures and guidelines used to identify, classify and ensure the confidentiality, integrity and availability of an organization's information assets. It also includes roles and responsibilities, configuration management, change control, security awareness, and the application of accepted industry practices

Introduction

102

(1)

Principles

103

(1)

System Accountability

103

(1)

Multifactor Authentication

104

(3)

Principle of Least Privilege

107

(3)

Goals of Information Security

110

(1)

Confidentiality

110

(1)

Integrity

111

(1)

Availability

112

(1)

Access Control

112

(1)

Mandatory Access Control

112

(1)

Discretionary Access Control

113

(1)

Role-based Access Control

113

(2)

Consider the Entire Life Cycle of Information

115

(2)

Terms and Definitions

117

(2)

Involvement with Development Groups

119

(1)

Quality Assurance, Audit, and InfoSec Need to be Involved

119

(1)

Ensuring that Policies, Laws, and Contractual Obligations are Respected

120

(1)

Certifying the Security Functionality

120

(1)

Certifying Processing Integrity

121

(1)

Operational Testing

121

(1)

Separation of Duties

122

(1)

Control Mechanisms and Policies

123

(1)

Development Staff Should Not Conduct Evaluation or Testing

124

(1)

Security Administrators Should Not Perform Audit Tasks

124

(1)

Individuals Should Not Be Responsible for Approving Their Own Work

124

(1)

Risk Assessment

125

(5)

Potential Vulnerabilities

130

(1)

Malicious Code

130

(1)

Data Problems

131

(1)

Access Problems

132

(1)

System Architecture: Modes of Operation

133

(1)

System High Mode

134

(1)

Compartment Mode

134

(1)

Multilevel Secure Mode

134

(1)

Change Control

135

(4)

Tools

139

(1)

System Security Architecture Concepts

139

(1)

Hardware Segmentation

139

(1)

Reference Monitor

140

(1)

High Security Mode

140

(1)

Data Protection Mechanisms

140

(2)

Data Classification

142

(2)

Employment Policies and Practices

144

(1)

Separation of Duties

144

(1)

The Hiring Process

144

(1)

Background Checks

144

(1)

Employment Agreements

145

(2)

Termination Policies

147

(1)

Awareness

148

(2)

Security Management Planning

150

(1)

Define the Mission and Determine Priorities

151

(1)

Determine the Risks and Threats to Priority Areas

151

(1)

Create a Security Plan to Address Threats

152

(1)

Develop Security Policies

152

(1)

Perform Security Assessments

153

(1)

Identify Security Solutions

153

(1)

Identify Costs, Benefits, and Feasibility

153

(1)

Get Upper Management Buy--In

153

(2)

Summary of Exam Objectives

155

(4)

Exam Objectives Fast Track

159

(5)

Exam Objectives Frequently Asked Questions

164

(3)

Self Test

167

(7)

Self Test Quick Answer Key

174

(1)

Audit and Monitoring

175

(54)

Domain 3: The monitoring area includes those mechanisms, tools and facilities used to identify, classify, prioritize, respond to, and report on security events and vulnerabilities. The audit function provides the ability to determine if the system is being operated in accordance with accepted industry practices, and in compliance with specific organizational policies, standards, and procedures

Introduction

176

(5)

Security Audits

181

(4)

Internal versus External Auditors

185

(3)

Auditing Process

188

(2)

Auditing Methods

190

(2)

Audit Data Sources

192

(1)

Audit Subsystem

192

(3)

System Events

195

(1)

Sampling and Data Extraction

195

(1)

Retention Periods

196

(1)

Audit Trails

196

(1)

Audit Trail Integrity

196

(2)

Checklist Audits

198

(3)

Penetration Testing

201

(5)

Wardialing

206

(4)

Social Engineering

210

(1)

Monitoring Methods and Mechanisms

211

(1)

Scorecards

212

(1)

Intrusion Detection Systems

212

(1)

Pattern Recognition (Signature Based)

213

(1)

Anomaly Detection

213

(1)

Log Watching

214

(1)

Event Monitoring

215

(1)

Trend Analysis

215

(1)

Summary of Exam Objectives

216

(2)

Exam Objectives Fast Track

218

(3)

Exam Objectives Frequently Asked Questions

221

(2)

Self Test

223

(5)

Self Test Quick Answer Key

228

(1)

Risk, Response, and Recovery

229

(96)

Domain 4: The risk, response and recovery area encompasses the roles of a security administrator in the risk analysis, emergency response, disaster recovery and business continuity processes, including the assessment of system vulnerabilities, the selection and testing of safeguards, and the testing of recovery plans and procedures. It also addresses knowledge of incident handling include the acquisition, protection and storage of evidence

Introduction

230

(1)

Risk Management Cycle

230

(5)

Education

235

(2)

Methods of Providing Education

237

(1)

Analysis

238

(3)

Testing

241

(2)

Validation

243

(2)

Risks and Threats

245

(1)

Different Types of Risks and Threats

246

(1)

Environmental Risks and Threats

247

(1)

Deliberate Risks and Threats

247

(4)

Accidental Risks and Threats

251

(3)

Risk Mitigation

254

(3)

Identifying the Risks that Need Mitigating

257

(1)

Asset Identification

258

(3)

Risk Mitigation Analysis

261

(7)

Disaster Recovery and Business Continuity Plans

268

(3)

Disaster Recovery Plan

271

(2)

Backups

273

(6)

Alternate Sites

279

(3)

Incident Investigation

282

(1)

The Goals

282

(3)

The Tools

285

(1)

Policies

285

(4)

Tracing Tools

289

(3)

Log Analysis

292

(1)

Crime Scene Analysis

292

(1)

Documentation

293

(1)

Investigation Steps

294

(1)

Preparation

294

(2)

Detection

296

(2)

Containment

298

(1)

Eradication

298

(1)

Recovery

299

(1)

Follow Up

299

(1)

Computer Forensics

300

(1)

What Your Role Is

301

(4)

Chain of Custody

305

(2)

Preservation of Evidence

307

(2)

Collection of Evidence

309

(5)

Summary of Exam Objectives

314

(1)

Exam Objectives Fast Track

315

(2)

Exam Objectives Frequently Asked Questions

317

(2)

Self Test

319

(5)

Self Test Quick Answer Key

324

(1)

Cryptography

325

(68)

Domain 5: The cryptography area addresses the principles, means and methods used to disguise information to ensure its integrity, confidentiality, authenticity and non-repudiation

Introduction

326

(2)

What Cryptography Offers

328

(1)

Steganography

329

(1)

Encryption Algorithms

330

(1)

Asymmetric Encryption Algorithms

330

(1)

Diffie-Hellman Algorithm

331

(1)

RSA Algorithim

332

(1)

Digital Signature Algorithm

333

(1)

Symmetric Encryption Algorithms

333

(1)

Data Encryption Standard Algorithm

334

(1)

Triple DES Algorithm

335

(1)

Advanced Encryption Standard Algorithm

335

(2)

International Data Encryption Algorithm

337

(1)

SkipJack

337

(1)

Hashing Algorithm Functions

337

(1)

Message Digest 4

338

(1)

Message Digest 5

338

(1)

SHA-1 (160-bit)

339

(3)

Encryption Methods

342

(4)

Stream Ciphers

346

(1)

Block Ciphers

346

(1)

Cipher Block Chaining Mode

347

(1)

Cipher Feedback Mode

348

(1)

Electronic Code Book Mode

349

(1)

Output Feedback Mode

350

(1)

Digital Signatures

350

(2)

Key Types

352

(1)

Private Key

352

(1)

Public Key

352

(1)

Hybrid Key

353

(1)

Key Management Issues

353

(1)

Problems with Key Selection

354

(1)

Public Key Infrastructure

355

(3)

Certificates

358

(1)

X.509

359

(2)

Certificate Policies

361

(1)

Certificate Practice Statements

362

(1)

Revocation

362

(1)

Certificate Revocation List

363

(1)

Trust Models

364

(1)

Single CA Model

364

(2)

Standards and Protocols

366

(2)

Key Management Lifecycle

368

(1)

Centralized versus Decentralized

368

(1)

Storage

369

(1)

Hardware Key Storage versus Software Key Storage

369

(2)

Private Key Protection

371

(1)

Escrow

371

(2)

Expiration

373

(1)

Revocation

373

(1)

Recovery

374

(1)

Key Recovery Information

374

(1)

Renewal

375

(1)

Destruction

376

(1)

Key Usage

376

(1)

Multiple Key Pairs (Single, Dual)

377

(1)

Using a Short Password to Generate a Long Key

377

(3)

Cryptographic Attacks

380

(1)

Brute Force

380

(1)

Ciphertext-only Attack

380

(1)

Known Plaintext Attack

380

(1)

Chosen Plaintext Attack

381

(1)

Man-in-the-Middle Attack

381

(2)

Summary of Exam Objectives

383

(1)

Exam Objectives Fast Track

384

(2)

Exam Objectives Frequently Asked Questions

386

(1)

Self Test

387

(4)

Self Test Quick Answer Key

391

(2)

Data Communications

393

(84)

Domain 6: The data communications area encompasses the structures, transmission methods, transport formats and security measures used to provide integrity, availability, authentication and confidentiality for data transmitted over private and public communications paths

Introduction

394

(1)

The Seven Layer OSI Model

394

(2)

Layer One: Physical Layer

396

(1)

Wireless Ethernet Radio Waves

397

(1)

Twisted-Pair Copper Cable

398

(1)

Coaxial Cable

398

(1)

Fiber-Optic Cable

399

(1)

Hubs and Switches

400

(1)

Repeaters

401

(1)

Layer Two: Data Link Layer

401

(1)

Layer Three: Network Layer

402

(1)

Layer Four: Transport Layer

403

(2)

Layer Five: Session Layer

405

(1)

Layer Six: Presentation Layer

406

(1)

Layer Seven: Application Layer

407

(1)

Local Area Networks

408

(1)

Topologies

409

(1)

Star Topology

409

(2)

Bus Topology

411

(1)

Tree Topology

412

(2)

Token Ring Topology

414

(1)

Mesh Topology

415

(2)

Ethernet

417

(1)

Binary to Hex to Decimal Translation

417

(1)

Signaling Types

418

(1)

Carrier Sense Multiple Access/Collision Detect

418

(1)

Token Ring

419

(1)

Frame Detail

419

(2)

Token Passing

421

(1)

Active Monitor

421

(2)

FDDI Elements

423

(1)

Wide Area Networks

424

(1)

Cabling

425

(1)

X.25

426

(1)

Integrated Services Digital Network

426

(1)

Asynchronous Transfer Mode

427

(1)

Protocols

427

(1)

Internet Protocol

427

(2)

Transmission Control Protocol

429

(1)

Multi-Purpose Internet Mail Extensions

429

(1)

Secure Multi-Purpose Internet Mail Extensions

430

(1)

Secure Socket Layer

431

(1)

SSL and TLS

431

(1)

Secure Electronic Transaction

432

(1)

Authentication Protocols

433

(1)

Password Authentication Protocol

433

(1)

Challenge Handshake Authentication Protocol

433

(1)

Remote Access Protocols

434

(1)

Point-to-Point Protocol

434

(1)

Serial Line Interface Protocol

435

(1)

Network Devices

435

(1)

Network Interface Cards

436

(1)

Common Problems

436

(1)

Hubs

437

(1)

Switches

437

(2)

Virtual LANs

439

(1)

Firewalls

440

(1)

Network Address Translation

440

(1)

Demilitarized Zone

441

(2)

Packet Filtering Firewalls

443

(1)

Screened Host Firewall

444

(1)

Screened Subnet Firewall with a DMZ

445

(1)

Stateful Inspection

446

(1)

Routers

447

(1)

Access Control Lists

448

(1)

Proxies

449

(1)

Remote Authentication Service Servers

449

(1)

Remote Authentication Dial-In User Service

449

(1)

Terminal Server Controller Access Control Systems

450

(1)

Terminal Server Controller Access Control Systems Plus

450

(1)

Intrusion Detection Systems

451

(1)

Host-Based IDS

451

(1)

Network--Based IDS

451

(1)

Virtual Private Networks

452

(1)

Point-to-Point Tunneling Protocol

452

(1)

Layer 2 Tunneling Protocol

453

(1)

Secure Shell

453

(1)

IP Security

454

(1)

IPSec Authentication

454

(1)

Transport Mode versus Tunnel Mode

455

(1)

Typical Attacks Against Network Resources

455

(1)

Spoofing

456

(1)

Sniffing

456

(2)

Session Hijacking

458

(1)

IP Fragmentation

458

(1)

IDS Attacks

459

(1)

SYN Floods

459

(1)

Private Branch Exchange Attacks: Wardialing

460

(2)

Summary of Exam Objectives

462

(1)

Exam Objectives Fast Track

463

(3)

Exam Objectives Frequently Asked Questions

466

(5)

Self Test

471

(5)

Self Test Quick Answer Key

476

(1)

Malicious Code and Malware

477

(72)

Domain 7: The malicious code area encompasses the principles, means and methods used by programs, applications and code segments to infect, abuse or otherwise impact the proper operation of an information processing system or network

Introduction

478

(1)

Types of Hackers

479

(1)

Hacker Jargon

479

(2)

Malicious Code

481

(2)

Viruses

483

(8)

Logic Bombs

491

(1)

Worms

491

(2)

Trojan Horses

493

(4)

Known Malware Exploits

497

(2)

``Melissa'' and ``I`Love You''

499

(6)

Nimda Worm

505

(3)

Prevention and Response

508

(1)

Networking Exploits

509

(1)

Denial of Service Attacks

510

(1)

DoS Attacks that Exploit TCP/IP

511

(1)

DNS DoS Attack

512

(1)

SYN/LAND Attacks

512

(2)

The Ping of Death

514

(1)

Ping Flood/Fraggle/Smurf

515

(2)

UDP Bomb/UDP Snork

517

(1)

Teardrop Attacks

517

(1)

SNMP Exploits

518

(1)

Source Routing Attacks

519

(1)

Other Protocol Exploits

519

(1)

Spoofing

520

(1)

IP Spoofing

520

(1)

ARP Spoofing

521

(1)

DNS Spoofing

521

(1)

Application Exploits

522

(1)

Poor Coding

523

(1)

Back Doors

523

(1)

Buffer Overflows

523

(1)

The Out-of-Band Attack

524

(1)

Social Engineering

525

(1)

Protecting the Network Against Social Engineers

526

(1)

Modems

527

(1)

Reconnaissance Attacks

528

(1)

Sniffing

528

(4)

Scanning

532

(3)

Antivirus Software

535

(1)

Web Browser Security

536

(1)

Antivirus Research

537

(1)

Summary of Exam Objectives

538

(1)

Exam Objectives Fast Track

538

(3)

Exam Objectives Frequently Asked Questions

541

(2)

Self Test

543

(5)

Self Test Quick Answer Key

548

(1)

Appendix A: Self Test Questions, Answers, and Explanations

549

(62)

Index

611

Please wait while the item is added to your bag...

FREE SHIPPING

Rent More, Save More! Use code: BBRENTAL

5% off 1 book, 7% off 2 books, 10% off 3+ books

SSCP : Systems Security Certification Practitioner - Study Guide and DVD Training System

Summary

Table of Contents

Supplemental Materials

FREE SHIPPING

Rent More, Save More! Use code: BBRENTAL

5% off 1 book, 7% off 2 books, 10% off 3+ books

SSCP : Systems Security Certification Practitioner - Study Guide and DVD Training System

Summary

Table of Contents

Supplemental Materials

Digital License