Summary Fundamentals of Information Security - D430

Fundamentals of Information Security - D430 Study Guide



AP Access Point Detection Kismet/Netstumbler

Nmap Port Scanner

Wireshark Packet Sniffer

TCPDump Command Line Sniffer for Unix/Linux OS

, Honeypots Vulnerable System to Attract Attackers

Hping3 locate vulnerabilities in our firewalls

Intel Executable Disable (XD) for buffer overflow protection at the chipset level

AMD Enhanced Virus Protection for buffer overflow protection at the chipset level

Address Space Layout for buffer overflow protection at the operating system level (windows,

Randomization (ASLR) MAC, Linux)

Nessus Vulnerability Assessment tool made by Tenable

Metasploit Vulnerability assessment tool made by Rapid 7

CANVAS Vulnerability Assessment Tool Made by Immunity

Nikto and Wikto web server analysis tool/Vulnerability scanner

Burp Suite web analysis tool/Web assessment tool

Fuzzers (Minifuzz, Binscope, Vulnerability analysis and to find completely unexpected problems.

Regex Fuzzer)

FISMA Federal Information Security Management Act of 2002

HIPAA Health Insurance Portability and Accountability Act of 1996

FERPA Family Educational Rights and Privacy Act

SOX Sarbanes-Oxley Act of 2002

GLBA Gramm-Leach-Bliley Act (1999)

Detects wireless access Kismet/Netstumbler

points and analyzes

network traffic. Useful for

surveying a network to

understand its wireless

security footprint.

Scans networks to identify active Nmap

hosts and open ports.

Employed for initial network