Index_D

D

DAC model, 63, 113

viewing on UNIX (exercise), 114

data abstraction, 141

data caches, managing, 72

data classification, 11, 142, 147

data collection, 192-211

data communications, 23-25, 393-476

specialty areas of (list), 23

Data Encryption Standard Algorithm (DES), 334

data extraction, 195

data file viruses, 486

data hiding, 142

data/information system attacks, 11

Data Link layer, 401

data protection mechanisms, 140

data recovery software, 309

data reduction and analysis facility, 194

Data Service Unit (DSU), 424

DDoS attacks, 510

decentralized access control systems, 60

decimal numbering system, 417

decryption, 326

Delta CRLs, 363

Demilitarized Zones (DMZs), 441-443

denial of service attacks (DoS attacks), 78, 510-519

SYN floods and, 460, 513

deregistering keys, 376

DES algorithm, 334

DES secret key, 331

detection of incidents, 296-298

detective access control policies, 57

developers

principle of least privilege and, 108

separation of duties and, 123

development groups, involvement with, 119-121

dictionary attacks, 73

differential backups, 274

Diffie-Hellman algorithm, 331

diffusion operations, 335

digital certificates, 6, 356-363

exercise for, 361

expiration of, 373

revoking, 362

Digital Signature Algorithm (DSA), 333

Digital Signature Standard (DSS), 333

digital signatures, 136, 350

IPSec protocol and, 455

disaster recovery plans, 15, 268, 270-282

specialty areas of (list), 17

discrete logarithms, 332

discretionary access control model (DAC model), 63, 113

viewing on UNIX (exercise), 114

Distributed DoS attacks (DDoS attacks), 510

DMZs (Demilitarized Zones), 441-443

DNS DoS attacks, 512

DNS spoofing, 521

documentation

for incident investigation, 292

change control, 241

role played in security, 235-237

domains (areas of knowledge), 2, 3

CISSP certification, 4

SSCP, 5-27

DoS attacks. See denial of service attacks

dry runs, in business continuity/disaster recovery plans, 242

DSA (Digital Signature Algorithm), 333

dsniff tool, 437

DSS (Digital Signature Standard), 333

DSU (Data Service Unit), 424

dual keys, 377

dumpster diving, 478