C

Index

[SYMBOL] [A] [B] [C] [D] [E] [F] [G] [H] [I] [J] [K] [L] [M] [N] [O] [P] [Q] [R] [S] [T] [U] [V] [W] [Z]

CA (Certificate Authorities)
     digital certificates
     PKI
     SSL standard connections 2nd
cacheflow servers 2nd
Campbell, Sam
     GIAC GCFW network security design, adversarial review of 2nd 3rd 4th 5th 6th 7th 8th 9th 10th 11th 12th 13th 14th 15th 16th 17th 18th 19th 20th 21st 22nd
Canvas exploitation library software
case studies
    Check Point Firewall-1, troubleshooting
         FW Monitor 2nd
    defense in depth
         Nimda worm 2nd
    IDS
         networks with multiple external access points 2nd
         simple network infrastructures 2nd 3rd
         unrestricted network environments 2nd 3rd
    network performance
         ISDN network connections 2nd
         satellite-based networks 2nd
     router link encryption 2nd
    secure perimeter design
         complex e-commerce business sites 2nd
         complex e-commerce business sites, DMZ 2nd 3rd 4th
         complex e-commerce business sites, internal networks 2nd
         complex e-commerce business sites, Internet 2nd 3rd
         complex e-commerce business sites, proxy layers 2nd 3rd
         complex e-commerce business sites, security networks 2nd 3rd 4th
         small businesses with basic Internet presence 2nd 3rd 4th 5th 6th 7th
         small e-commerce business sites 2nd 3rd 4th 5th 6th 7th 8th 9th
         telecommuters using broadband connections 2nd 3rd 4th 5th 6th
     SSL Web server
     VPN
         IPSec 2nd 3rd
         SSL 2nd
         terminal servers 2nd 3rd
     wireless network security design 2nd 3rd 4th 5th
castle analogy (defense in depth)
     hiding
         fragment reconnaissance
         ping reconnaissance
         SYN/FIN attacks 2nd
     internal defenses
         airgaps
         internal firewalls
         personal firewalls
         SDN 2nd 3rd 4th
     layered defenses 2nd
    secret passages
         firewall tunnels
         firewall tunnels, HTTP tunneling 2nd
         firewall tunnels, insider threats 2nd 3rd 4th
         firewall tunnels, perimeter configuration changes 2nd 3rd
         firewall tunnels, SOAP
         firewall tunnels, Web server attacks 2nd 3rd
CBAC
     routers
         inspect statements
         stateful inspection
CBAC (context-based access control)
CD-Universe
     credit card attacks 2nd
CDP (Cisco Discovery Protocol)
     disabling
Certificate Authorities (CA)
     digital certificates
     PKI
     SSL standard connections 2nd
change management (perimeter security maintenance)
     communicating proposed changes
     detecting/preventing unauthorized changes 2nd
     discovering systems/devices
     patches 2nd
     personnel support
     rolling back undesired changes
     testing changes
     verifying proper system operation
changes, reviewing (troubleshooting process)
Check Point Firewall F-1
     network log analysis 2nd 3rd
     SmartView Tracker
Check Point Firewall-1
    troubleshooting
         FW Monitor 2nd
         FW Monitor, case studies 2nd
Check Point Firewall-1 firewalls
     network log analysis, automating 2nd
Check Point Firewall-1 NG firewalls
     IPS 2nd
     OPSEC Alliance
Check Point FireWall-1 stateful firewalls 2nd 3rd 4th 5th
     implied rules
     protocol support 2nd
     SmartDashboard
     SmartDefense 2nd
     state tables
     state tables, example of 2nd
     stateful inspection, configuring for 2nd
     timeouts 2nd
Check Point Integrity
Check Point VSX (Virtual System Extension)
checklists
     host hardening 2nd
chokepoint devices (NIPS)
chokepoint NIPS (network intrusion prevention systems)
     firewalls 2nd
         Check Point Firewall-1 NG 2nd
         modwall 2nd
     IDS plus something classification
         HogWash
         IntruShield 2nd
         LaBrea Technologies Sentry 2nd
         NFR Sentivist 2nd
         Snort-Inline
chokepoints
chroot facility 2nd
chroot jails
ciphertext
     defining
circuit bandwidths 2nd
circuit firewalls
Cisco
     CSA 2nd
     PIX VPDN configuration example 2nd 3rd 4th
    routers
         access list rules 2nd
         IPSec VPN configuration examples 2nd 3rd 4th 5th 6th 7th 8th 9th
     SDN 2nd 3rd 4th
         NAC 2nd 3rd 4th
     stock options exploits
     transform sets
Cisco ACL (access control lists)
     deny 2nd
     extended
         blocking ICMP echo requests 2nd
         established keyword 2nd
         established keyword, DNS 2nd
         filtering ICMP messages 2nd
         filtering ports
         FTP 2nd 3rd
         IP addresses, friendly net access 2nd
         PASV FTP 2nd 3rd
         ports
         rule order 2nd
         syntax of 2nd
     fragments 2nd
     implicit denies 2nd
     in/out keywords 2nd 3rd
         VLAN interfaces
     IPv6 2nd
     log keywords
     named 2nd
         adding/deleting entries 2nd 3rd
         reflexive ACL
     numbered
     reflexive 2nd
         FTP 2nd
         ICMP
         named ACL 2nd
         outbound traffic 2nd
         PASV FTP
         TCP flags 2nd
         UDP
     rule order, planning
    standard
         applying to interfaces
         blacklisting 2nd 3rd
         egress filtering 2nd
         ingress filtering 2nd 3rd 4th
         IP addresses, friendly net access 2nd
         syntax of
     wildcard masks 2nd 3rd 4th
Cisco auto secure command
    router configurations
         examples of 2nd 3rd 4th 5th 6th
Cisco extended ACL (access control lists)
     established keyword 2nd
         DNS 2nd
     FTP 2nd 3rd
    ICMP echo requests
         blocking 2nd
    ICMP messages
         filtering 2nd
    IP addresses
         friendly net access 2nd
     PASV FTP 2nd 3rd
     ports
         filtering
     rule order 2nd
     syntax of 2nd
Cisco IPv6 ACL (access control lists) 2nd
Cisco PIX firewall logs
     analyzing 2nd
Cisco PIX stateful firewalls
     fixup command 2nd 3rd 4th
     FWSM 2nd
     inbound/outbound traffic connections 2nd
     PDM 2nd
         Configuration screen 2nd
         Hosts/Networks screen
         System Properties screen
         Translation Rules screen
     show conn command 2nd
Cisco reflexive ACL (access control lists) 2nd
     FTP 2nd
     ICMP
     named ACL 2nd
     outbound traffic 2nd
     PASV FTP
     TCP flags 2nd
     UDP
Cisco router logs
     analyzing 2nd
Cisco routers [See routers]
     Cisco ACL
         Cisco wildcard masks 2nd 3rd 4th
         deny 2nd
         extended
         extended, blocking ICMP echo requests 2nd
         extended, established keyword 2nd 3rd 4th
         extended, filtering ICMP messages 2nd
         extended, filtering ports
         extended, friendly net IP address access 2nd
         extended, FTP 2nd 3rd
         extended, PASV FTP 2nd 3rd
         extended, ports
         extended, rule order 2nd
         extended, syntax of 2nd
         fragments 2nd
         implicit denies 2nd
         in/out keywords 2nd 3rd
         IPv6 2nd
         log keywords
         named 2nd
         named, adding/deleting entries 2nd 3rd
         named, reflexive ACL
         numbered
         planning rule order
         reflexive 2nd
         reflexive, FTP 2nd
         reflexive, ICMP
         reflexive, named ACL 2nd
         reflexive, outbound traffic 2nd
         reflexive, PASV FTP
         reflexive, TCP flags 2nd
         reflexive, UDP
         standard, applying to interfaces
         standard, blacklisting 2nd 3rd
         standard, egress filtering 2nd
         standard, friendly net IP address access 2nd
         standard, ingress filtering 2nd 3rd 4th
         standard, syntax of
     configuring 2nd
     network filtering
Cisco standard ACL (access control lists)
     blacklisting 2nd 3rd
     egress filtering 2nd
     ingress filtering 2nd 3rd 4th
     interfaces, applying to
    IP addresses
         friendly net access 2nd
     syntax of
Cisco TCP Keepalives services
     router hardening
Cisco wildcard masks 2nd 3rd 4th
Citrix MetaFrame
     reverse proxies
clarity (security policies)
class maps
     footprints
cleartext
     defining
client networks
    resource separation
         dialup connections 2nd
         LAN-connected desktops 2nd
         laptops 2nd
         VPN 2nd
         wireless systems 2nd 3rd
CLOSE-WAIT state (TCP connections)
CLOSED state (TCP connections)
CLOSING state (TCP connections)
clustering firewalls 2nd
Code Red worm
     SANS Institute exploit
collecting symptoms (troubleshooting process) 2nd
commands
     Cisco router shorthand
communicating risks (security policies) 2nd
community names (SNMP)
     router attacks 2nd
community strings (SNMP)
company atmosphere, determining (security policies)
     contracts 2nd
     directives
     unwritten policies
     written policies
compartmentalization
complete access lists
    private-only networks
         examples for 2nd 3rd 4th 5th
    screened subnet networks
         examples for 2nd 3rd 4th 5th 6th 7th
complex e-commerce site case studies 2nd
     DMZ 2nd 3rd 4th
     internal networks 2nd
     Internet 2nd 3rd
     proxy layers 2nd 3rd
     security networks 2nd 3rd 4th
compliance (security policies)
Computer Management applet (Windows)
     file shares, creating/deleting
Computer Security Incident Handling Step by Step [ITAL] (SANS Institute)
concentrators (VPN)
conciseness (security policies) 2nd
confidentiality (VPN requirements)
configuration management
     defining
     responsibility of
Configuration screen (PDM) 2nd
configuring
    antivirus software
         EICAR test files
     Cisco routers 2nd
     mail relays 2nd 3rd 4th
     NAT for routers 2nd
    NTP
         routers 2nd 3rd
    perimeters
         firewall tunnels 2nd 3rd
    personal firewalls
         workstations 2nd
     routers 2nd
         TFTP 2nd
conformance (security policies)
connection tracking
     defining
console ports (routers)
     hardening 2nd
containment phase (incident response)
content filters
     network performance 2nd
contractors
     firewall tunnels 2nd
contracts
     security policies, writing 2nd
control (security policies)
     administrative controls
copiers
     secure perimeter design
CORBA (Common Object Request Broker Architecture)
     interapplication communication
Core Impact exploitation library software
corporate culture, determining (security policies)
     contracts 2nd
     directives
     unwritten policies
     written policies
Corporate Servers security zone, creating 2nd
Corporate Workstations security zone, creating
correlating events
     network log files
cost
     secure perimeter design 2nd 3rd
     versus risk 2nd
costs
     VPN
CPU usage (routers)
     proc command 2nd
Crack password-cracking software 2nd
crafted packets
credit card attacks
     CD-Universe 2nd
credit card exploits
     script kiddies
CRL (certificate revocation lists) 2nd
     RA
crown jewels, information as 2nd
crypto key generate rsa command (SSH)
crypto maps 2nd
cryptography
     ciphertext, defining
     cleartext, defining
    encryption
         application layer, VPN
         network layer, VPN 2nd
         network security assessments
         transport layer, VPN
         tunneling, VPN 2nd 3rd
         wireless
         wireless, auditing 2nd 3rd
         wireless, EAP-TLS 2nd 3rd
         wireless, implementing 2nd
         wireless, LEAP 2nd 3rd 4th
         wireless, PEAP 2nd 3rd
         wireless, TinyPEAP
         wireless, WEP 2nd
         wireless, WPA protocol 2nd 3rd 4th
     encryption algorithms
         asymmetric key
         asymmetric key, Diffie-Hellman 2nd
         asymmetric key, PGP
         asymmetric key, public/private keys
         digital signatures 2nd
         hash algorithms
         hash algorithms, MD5
         hash algorithms, SHA-1
         shared key
         shared key, DES
    encryption kyes
         defining
    hardware accelerators
         network performance 2nd
    network layer
         network performance 2nd 3rd 4th 5th
     PGP
     PKI
     plain text, defining
    public key
         network performance
    symmetric key
         algorithm key sizes
         network performance 2nd
    transport layer
         network performance 2nd 3rd
crystal box designs, defining
CSA (Cisco Security Agent) 2nd
Csico 3660 routers