Chapter 4
Account based security

p. 142 Conventions for naming

p. 144 Creating User Accounts
command line
GUI

p. 149 Windows GUI User tabs
memberof
General
Account
Password?

p. 158 Strong Passwords

p. 159 Account policies
password history, age, ength, complexity
duration
threshold attempt, reseet account lockout

p. 163 Windows User rights
enable an account or group to perform predetermined tasks
server operator

p. 166 Policy templates
system policy editor: Windows components, start menu, desktop, control panel, system

Chapter 5
File Directory & Shared Resource Security

p. 196 Access Control List
all info access to an object
accounts, groups who can access
permissions
ownership

p. 198 NTFS Security
Full Control
Modify
Read&Execute   List   Read   Write

p. 202 Inherited Permissions

p. 204 Special Permissions

p. 206 UNIX permissions
chmod
p. 208 -rwxrwxrwx
p. 215 Mac
rw   r   w   No Access

p. 217 Sharing WIndows

p. 222 Linux SHaring
telnet/ftp   SSH

p. 226 Groups
local   domain   global   universal

p. 230 Linux Groups

Chapter 6
Firewall Border Security

p. 256
TCP accurate dataflow; checksum; frame
UDP less reliable; connectionless
IP simple; connectionless
MAC on NIC

p. 267 dotted decimal
32 bit
Class A xxx-xxx xxx xxx 256-16.7 million
Class B xxx xxx-xxx xxx 65k-65k
Class C xxx xxx xxx-xxx 16.7 million-256

p. 29 subnet maks
class B
255.255.0.0

p. 271 Firewall
cross borders

p. 275 NAT
hides IP info outside network
10.x.x.x

p. 277 Proxie
Interior--Proxie--Exterior

p. 279 Routers

p. 283 DMS

Network DMZ Internet
           web server

Chapter 7
Physical Network Topology

p. 312
Secure: *servers * workstations *devices

p. 313
lock, training, screen saver

p. 315
Centralized: one environment controlled area, no extra training

p. 316
cipher lock
fire suppression (not water)

p. 320
'hubs' in wiring closets EMI/RFI

p. 321
Topology: *Bus   *Ring   *Star

p. 327
Coax-BNC\ Twisted Pair-RJ45

p. 329
Fiber ( simplex requires at least two fibers)

p. 330
bandwidth

p. 333/335
EIA TIA 568 A Horizontal; EIA TIA 568 B Vertical

p. 337
VLAN- independant of physical layout

p. 338
Redundancy

Chapter 8
Wireless Security

p. 359 802.x=CSMA/CA; Wired 802.3, wireless 802.11 or bluetooth

p. 361 Attacks on wireless networks

p. 362 Why a Wireless Network might be used

p. 364 Radio

p. 366 Wireless componenents

p. 373 Infared

p. 374 802.11, IBSS and ESS

p. 376 Bluetooth

p. 377 Attacks, Rouge Access, Man-in-the-middle, long-rand antennas; pitfalls

p. 380 Security measures
authentication
shared key authentication
WEP
SSID