1BASELING
PROCESS OF MEASURING CHANGES IN THE NETWORK,HARDWARE,AND SOFTWARE EVIRONMENT # A BASELINE IS NORMAL PATTERN FOR YOUR BUSINESS OR ORGANIZATIOND
2VIRTUALIZATION
CREATION OF A VIRTUAL RESOURCE
3Processor virtual machines
Design to only to run a single process or application like avirtualized web browser
Or simple web server
4Hypervisor type 1 (Bare Metal)
Manages the distribution of the physical resources of a host machine (server) to the virtual machine being run (guest)
5Information Security
Act of protecting data and information from unauthorized access,unlawful modification and distribution,disclosure, corruption,and destruction.
6System Security
Act of protecting the systems that hold and process our critical data.
7CIA triad
Confidentiality, Integrity, Availability
8Confidentiality
the act of holding information in confidence, not to be released to unauthorized individuals
In the digital world
*data encryption * refers to confidentiality
9integrity
Information has not been modified or altered without proper authorization
When talking about integrity they referring to hashing
10Availability
Time frames when the system is operational
11AAA of security
Authentication, Authorization ,Accounting
12Authentication
When a person's identity is established with proof and confirm by a system
In the digital world they 5 factors method of authentication
Something you know ex. ,Password ,address
Something are ,ex. , fingerprint, eye scan
Something you have , ex. driver License or credit card
Something that you do, ex. The way you speak,or sign your name
Something that you are , special location
13authorization
Occurs when a user is given access to a certain piece of data or certain areas of a building
14Malware
Short hand term malicious software
15Accounting
Tracking of data ,computer usage,and network resources
Occurrs in the log files
16Non-repudiation
When you have proof that someone has taken action
17Unauthorized access
Occurs when access to computer resources and data happens without the consent of the owner
18Social Engineering
Act of manipulation users into revealing confidentiality information or performing other detrimental actions
mitigating treats
19Types
Physical controls
Technical controls
Administration controls
20Physical Controls
Things that you add in the real world to stop things from happening
Ex. Alarm system, locks surveillance cameras,identification cards, and security guards
21Technical controls
Ex. Smart cards , encryption,access control list (acts) intrusion detection system, and network authentication