%Schriftgröße, Layout, Papierformat, Art des Dokumentes
\documentclass[10pt,oneside,a4paper]{scrartcl}

%Einstellungen der Seitenränder
\usepackage[left=2cm,right=2cm,top=1.5cm,bottom=1.5cm,includeheadfoot]{geometry}

%neue Rechtschreibung
\usepackage[ngerman]{babel}

%Umlaute ermöglichen
\usepackage[utf8]{inputenc}

%Gesamtseitenzahl
\usepackage{lastpage}

% Kopf- und Fußzeile
\usepackage[automark]{scrpage2}

%Quellcode-Listings
\usepackage{listings}

%Hyperlinks
\usepackage{hyperref}

% \text{}
\usepackage{amsmath}

%multi-row
\usepackage{multirow}

\usepackage{array}

%Kopfzeile
\ihead{CCNA v7.02: ITN (Introduction to Networks)}
\chead{}
\ohead{kohnlehome.de/cisco/CCNA-1-16.pdf}
\setheadsepline{0.5pt}

%Fußzeile
\setfootsepline{0.5pt}
\ifoot{Franz Kohnle}
\cfoot{Seite \thepage\ von  \pageref{LastPage}}
\ofoot{\today}

\pagestyle{scrheadings}

\begin{document}

% Überschrift 
\begin{center}
    \LARGE % Schriftgröße
    \bfseries % Fettdruck
    \sffamily % Serifenlose Schrift
    16 Network Security Fundamentals
\end{center}

\section*{16.1 Security Threats and Vulnerabilities}
\begin{itemize}
    \item Types of Threats
    \begin{itemize}
        \item Information theft
        \item Data loss and manipulation
        \item Identity theft
        \item Disruption of service
    \end{itemize}
    \item Types of Vulnerabilities
    \begin{itemize}
        \item Technological Vulnerabilities
        \item Configuration Vulnerabilities
        \item Configuration Vulnerabilities
    \end{itemize}
    \item Physical Security
    \begin{itemize}
        \item Hardware threats
        \item Environmental threats
        \item Electrical threats
        \item Maintenance threats 
    \end{itemize}
\end{itemize}

\section*{16.2 Network Attacks}
\begin{itemize}
    \item Types of Malware
    \begin{itemize}
        \item Viruses (needs host) 
        \item Worms (standalone) 
        \item Trojan Horses
    \end{itemize}
    \item Reconnaissance Attacks
    \begin{itemize}
        \item Internet Queries
        \item Ping Sweeps
        \item Port Scans 
    \end{itemize}
    \item Access Attacks
    \begin{itemize}
        \item Password Attacks
        \item Trust Exploitation
        \item Port Redirection
        \item Man-in-the-Middle
    \end{itemize}
    \item Denial of Service Attacks
    \begin{itemize}
        \item DoS Attack
        \item DDoS Attack
    \end{itemize}
\end{itemize}

\section*{16.3 Network Attack Mitigation}
\begin{itemize}
    \item The Defense-in-Depth Approach
    \begin{itemize}
        \item VPN
        \item ASA Firewall
        \item IPS 
        \item ESA (E-Mail Security appliance) / WSA (Web Securtiy Appliance)
        \item AAA Server 
    \end{itemize}
    \item Keep Backups
    \begin{itemize}
        \item Frequency 
        \item Validation
        \item Storage
        \item Security
    \end{itemize}
    \item Upgrade, Update, and Patch
    \item Authentication, Authorization, and Accounting
    \item Firewalls
    \begin{itemize}
        \item DMZ
    \end{itemize}
    \item Types of Firewalls
    \begin{itemize}
        \item Packet filtering
        \item Application filtering
        \item URL filtering
        \item Stateful packet inspection (SPI) 
    \end{itemize}
    \item Endpoint Security
\end{itemize}


\newpage


\section*{16.4 Device Security}
\begin{itemize}
    \item Cisco AutoSecure: \texttt{Router\# auto secure}
    \item Passwords 
    \item Additional Password Security 
    \begin{verbatim}
R1(config)# service password-encryption 
R1(config)# security passwords min-length 8 
R1(config)# login block-for 120 attempts 3 within 60
R1(config)# line vty 0 4 
R1(config-line)# password cisco123 
R1(config-line)# exec-timeout 5 30 
R1(config-line)# transport input ssh 
R1(config-line)# end
    \end{verbatim}
    \item Enable SSH
    \begin{verbatim}
Router(config)# hostname R1
R1(config)# ip domain name span.com
R1(config)# crypto key generate rsa general-keys modulus 1024
The name for the keys will be: Rl.span.com % The key modulus size is 1024 bits
% Generating 1024 bit RSA keys, keys will be non-exportable...[OK]
Dec 13 16:19:12.079: %SSH-5-ENABLED: SSH 1.99 has been enabled
R1(config)#
R1(config)# username Bob secret cisco
R1(config)# line vty 0 4
R1(config-line)# login local
R1(config-line)# transport input ssh
            \end{verbatim}
    \item Disable Unused Services 
    \begin{verbatim}
Router# show ip ports all
Router# show control-plane host open-ports 
    \end{verbatim}
\end{itemize}

\end{document}
