2015
Lynda
Mike Chapple
2:38
English

The CompTIA Security+ exam is an excellent entry point for a career in information security. This course covers the threats and vulnerabilities domain of the test. By learning about the malware, networking and application security exploitations, and social engineering techniques used by attackers, you'll be prepared to answer questions from Security+ exam—and strengthen your own organization's systems and defenses. Author Mike Chapple, an IT leader with over 15 years experience, also covers the processes for discovering and mitigating threats and vulnerabilities and conducting penetration testing and vulnerability scanning.

Introduction
Welcome
1. Malware
Comparing viruses, worms, and Trojans
Comparing adware, spyware, and ransomware
Understanding backdoors and logic bombs
Looking at advanced malware
Understanding botnets
2. Understanding Attack Types
Denial of service attacks
Eavesdropping attacks
Network attacks
Defending against password attacks
Watering hole attacks
Preventing insider threats
3. Social Engineering Attacks
Social engineering
Impersonation attacks
Going old school
4. Wireless Attacks
Wireless eavesdropping
WPA and WPS attacks
Propagation attacks
Preventing rogues and evil twins
Understanding Bluetooth and NFC attacks
5. Application Attacks
Understanding cross-site scripting
Preventing SQL injection
Defending against directory traversal
Overflow attacks
Explaining cookies and attachments
Session hijacking
Malicious add-ons
6. Mitigation and Deterrence
Monitoring log files
Hardening your systems
Securing your network
Improving your security posture
Control categories
7. Discovering Threats and Vulnerabilities
Security assessment tools
Scanning for threats and vulnerabilities
Assessing threats
Threat assessment techniques
Penetration testing
Advanced vulnerability scanning
Conclusion
Next steps

Download File Size:439.86 MB

---