%Teilweise Erzeugt mit dem LaTeX-Generator: http://latex.sehnot.de

%Schriftgröße, Layout, Papierformat, Art des Dokumentes
\documentclass[10pt,oneside,a4paper]{scrartcl}

%Einstellungen der Seitenränder
\usepackage[left=2cm,right=2cm,top=1.5cm,bottom=1.5cm,includeheadfoot]{geometry}

%neue Rechtschreibung
\usepackage[ngerman]{babel}

%Umlaute ermöglichen
\usepackage[utf8]{inputenc}

%Gesamtseitenzahl
\usepackage{lastpage}

% Kopf- und Fußzeile
\usepackage[automark]{scrpage2}

%Quellcode-Listings
\usepackage{listings}

%Hyperlinks
\usepackage{hyperref}

% \text{}
\usepackage{amsmath}

%multi-row
\usepackage{multirow}

\usepackage{array}

%Kopfzeile
\ihead{CCNA v7.0 Enterprise Networking, Security, and Automation}
\chead{}
\ohead{kohnlehome.de/cisco/CCNA-3-03.pdf}
\setheadsepline{0.5pt}

%Fußzeile
\setfootsepline{0.5pt}
\ifoot{Franz Kohnle}
\cfoot{Seite \thepage\ von  \pageref{LastPage}}
\ofoot{\today}

\pagestyle{scrheadings}

\begin{document}

% Überschrift 
\begin{center}
\LARGE % Schriftgröße
\bfseries % Fettdruck
\sffamily % Serifenlose Schrift
3 Network Security Concepts
\end{center}

\section*{3.1 Current State of Cybersecurity}
\subsection*{Security Terms}
\begin{itemize}
    \item Assets: people, equipment, resources, data
    \item Vulnerability: weakness in a system
    \item Threat: potential danger
    \item Exploit: mechanism that takes advantage of a vulnerability
    \item Mitigation: counter-measure
    \item Risk: likelihood of a threat 
\end{itemize}

\subsection*{Attack Vector}
\begin{itemize}
    \item External (from inside)
    \item Internal (from outside)
\end{itemize}

\subsection*{Data Loss Vectors}
\begin{itemize}
    \item Email/Social Networking
    \item Unencrypted Devices
    \item Cloud Storage Devices
    \item Removable Media
    \item Hard Copy
    \item Improper Access Control
\end{itemize}


\section*{3.2 Threat Actors}
\subsection*{The Hacker}
\begin{itemize}
    \item White Hat Hackers
    \item Gray Hat Hackers
    \item Black Hat Hackers
\end{itemize}

\subsection*{Hacking Terms}
Script Kiddies, Vulnerability Broker, Hacktivists, Cyber criminals, State-Sponsored

\section*{3.3 Threat Actor Tools}
\subsection*{Penetration Testing Tool}
\begin{itemize}
    \item Password Crackers
    \item Wireless Hacking Tools
    \item Network Scanning
    \item Packet Crafting Tools
    \item Packet Sniffers
    \item Rootkit Detectors
    \item Fuzzers (search vulnerabilities)
    \item Forensic Tools
    \item Debuggers
    \item Hacking Operating Systems
    \item Encryption Tools
    \item Vulnerability Exploitation Tools
    \item Vulnerability Scanners
\end{itemize}

\subsection*{Attack Types}
\begin{itemize}
    \item Eavesdropping Attack
    \item Data Modification Attack
    \item IP Address Spoofing Attack
    \item Password-Based Attacks
    \item Denial of Service Attack
    \item Man-in-the-Middle Attack
    \item Compromised-Key Attack
    \item Sniffer Attack
\end{itemize}

\section*{3.4 Malware}
\subsection*{Types of Viruses}
\begin{itemize}
    \item Boot sector virus
    \item Firmware virus
    \item Macro virus
    \item Program virus
    \item Script virus
\end{itemize}

\subsection*{Type of Trojan Horse}
\begin{itemize}
    \item Remote-access
    \item Data-sending
    \item Destructive
    \item Proxy
    \item FTP
    \item Security software disabler
    \item Denial of Service (DoS)
    \item Keylogger
\end{itemize}

\subsection*{Type of Trojan Horses}
\begin{itemize}
    \item Remote-access
    \item Data-sending
    \item Destructive
    \item Proxy
    \item FTP
    \item Security software disabler
    \item Denial of Service (DoS)
    \item Keylogger
\end{itemize}

\subsection*{Other Types of Malware}
\begin{itemize}
    \item Adware
    \item Ransomware
    \item Rootkit
    \item Spyware
    \item Worm
\end{itemize}

\section*{3.5 Common Network Attacks}
\subsection*{Reconnaissance Attacks}
\begin{itemize}
    \item Perform an information query of a target
    \item Initiate a ping sweep of the target network
    \item Initiate a port scan of active IP addresses
    \item Run vulnerability scanners
    \item Run exploitation tools
\end{itemize}

\subsection*{Access Attacks}
\begin{itemize}
    \item Password Attacks
    \item Spoofing Attacks
\end{itemize}

\subsection*{Social Engineering Attacks}
\begin{itemize}
    \item Pretexting
    \item Phishing
    \item Spear phishing
    \item Spam
    \item Something for Something
    \item Baiting
    \item Impersonation
    \item Tailgating
    \item Shoulder surfing
    \item Dumpster diving
\end{itemize}

\subsection*{DoS and DDoS Attacks}
\begin{itemize}
    \item Overwhelming Quantity of Traffic
    \item Maliciously Formatted Packets
\end{itemize}

\section*{3.6 IP Vulnerabilities and Threats}
\subsection*{IPv4 and IPv6}
\begin{itemize}
    \item ICMP attacks 
    \item Amplification and reflection attacks
    \item Address spoofing attacks
    \item Man-in-the-middle attack (MITM) 
    \item Session hijacking 
\end{itemize}

\subsection*{ICMP Attacks}
\begin{itemize}
    \item ICMP echo request and echo reply 
    \item ICMP unreachable 
    \item ICMP mask reply 
    \item ICMP redirects 
    \item ICMP router discovery 
\end{itemize}

\section*{3.7 TCP and UDP Vulnerabilities}
\begin{itemize}
    \item TCP SYN Flood Attack
    \item TCP Reset Attack
    \item TCP Session Hijacking
    \item UDP Flood Attacks
\end{itemize}

\section*{3.8 IP Services}
\begin{itemize}
    \item ARP Cache Poisoning
    \item ARP Spoofing
    \item DNS cache poisoning attacks 
    \item DNS amplification and reflection attacks 
    \item DNS resource utilization attacks
    \item Fast Flux 
    \item Double IP Flux
    \item Domain Generation Algorithms
    \item DNS Tunneling
    \item DHCP Spoofing Attack
\end{itemize}

\section*{3.9 Network Security Best Practices}
\begin{itemize}
    \item Confidentiality, Integrity, and Availability
    \item The Defense-in-Depth Approach
    \item Firewalls
    \item IPS
    \item Content Security Appliances
    \begin{itemize}
        \item Cisco Email Security Appliance (ESA)
        \item Cisco Web Security Appliance (WSA)
    \end{itemize}
\end{itemize}

\section*{3.10 Cryptography}
\begin{itemize}
    \item Data Integrity
    \begin{itemize}
        \item Hash Functions (MD5, SHA, SHA-2)
    \end{itemize}
    \item Origin Authentication: HMAC
    \item Data Confidentiality
    \begin{itemize}
        \item  Symmetric Encryption: DES, 3DES, AES, SEAL, RC
        \item  Asymmetric Encryption: DH, DSS, DSA, RSA; ElGamal, Elliptical Curve
    \end{itemize}
    \item Data Non-Repudiation
\end{itemize}

\end{document}
