Upgrade to remove ads
Only $35.99/year

CISSP - sec archuitecture & engineering

Terms in this set (10)

CPU steps
1. Fetch instruction 1
2. Decode instruction 1
3. Execute instruction 1
4. Write (save) results 1
Four steps = 1 clock cycle.
CPU Interrupt
Asynchronus event has occured.
Hardware interrupt that causes CPU to stop processing current task, save the state & begin processing new request.
Memory addressing
1. Direct mode
Value in specified memory location.
2. Indirect mode
Value in location where there is a reference to memory location only.
3. Register direct
The same as direct mode but specifies location in CPU register.
Protecions agains memory coruption in overflow attacka
1. DEP - data execution prevention
Memory locations not predefinied to contain executable content will not have the ability to have code executed.
2. ASLR - address space location randomization
Making memory addresses employed by the system less predictable.
Types of covert channels
1. Covert storage channel
Temporary shared folders, files with certain size (less than 1 Mb = peace, more than 1 Mb = war)
2. Covert timing channel
PKI components
CA - issues, revokes certs.
ORA - vouch for the binding between public keys & certificate holder IDs and other aatribs
CRL - certs revocation lists
PGP - how does it work?
Suite of crypto: confidentiallity, integrity, authentication, nonrepudiation
Uses a Web of Trust instead of realying on central server.
If you trust my certicate is valid, the WoT means that you trust all the certs that I trust.
Clasfull networks
Class A: 0.0.0.0 - 127.255.255.55
Class B: 128.0.0.0 - 191.255.255.255
Class C: 192.0.0.0 - 223.255.255.255
Class D: 224.0.0.0 - 239.255.255.255
Class E: 240.0.0.0 - 255.255.255.255
Network Classes / number of networks / number of hosts
Added info:
192.168.1.0 - adres sieci
192.168.1.255 - broadcast address
Obydwa nie używane dla hostów, dlatego w sieci:
192.168.1.0/24 mogą być tylko 254 hosty
Protokoły i Porty dla usługi
Telnet
FTP
TFTP
SSH
SMTP, POP, IMAP
DNS
SNMP
BOOT
DHCP
1. Telnet: terminal emulation over network / TCP 23
2. FTP: control connection TCP 21 (client => server);
data connection TCP 20 (server => client)
3. TFPT: UDP 69 (diskless stations, no conf or integrity, files read and write to one directory: /tftpboot
4. SSH: TCP 22
5. SMTP (mails between servers): TCP 25
6. POP: TCP 110
7. IMAP: TCP 143
8. DNS: TCP 53 - zone files, UDP 53 - small answers
9. SNMP: monitor network, poll SNMP agents on net devices and report interface status, bandwith utilization etc. UDP 161
10. BOOT: bootstraping via network by diskless systems
BOOT used to determine IP address and OS image name => TFTP used to download; UDP 67 (servers), UDP 68 (clients)
11. DHCP: UDP 67 (servers), UDP 68 (clients)
Other sets by this creator