Add files using upload-large-folder tool

.gitattributes

@@ -96,3 +96,40 @@ saved_model/**/* filter=lfs diff=lfs merge=lfs -text
 06[[:space:]]-[[:space:]]Signs[[:space:]]of[[:space:]]Attacks/011[[:space:]]DDOS[[:space:]]OB[[:space:]]2.4.mp4 filter=lfs diff=lfs merge=lfs -text
 06[[:space:]]-[[:space:]]Signs[[:space:]]of[[:space:]]Attacks/014[[:space:]]Credential[[:space:]]Replay[[:space:]]OB[[:space:]]2.4.mp4 filter=lfs diff=lfs merge=lfs -text
 06[[:space:]]-[[:space:]]Signs[[:space:]]of[[:space:]]Attacks/015[[:space:]]Privilege[[:space:]]Escalation[[:space:]]OB[[:space:]]2.4.mp4 filter=lfs diff=lfs merge=lfs -text
+06[[:space:]]-[[:space:]]Signs[[:space:]]of[[:space:]]Attacks/016[[:space:]]Request[[:space:]]Forgery[[:space:]]OB[[:space:]]2.4.mp4 filter=lfs diff=lfs merge=lfs -text
+06[[:space:]]-[[:space:]]Signs[[:space:]]of[[:space:]]Attacks/017[[:space:]]Directory[[:space:]]Traversal[[:space:]]OB[[:space:]]2.4.mp4 filter=lfs diff=lfs merge=lfs -text
+06[[:space:]]-[[:space:]]Signs[[:space:]]of[[:space:]]Attacks/018[[:space:]]Indicators[[:space:]]of[[:space:]]Malicious[[:space:]]Activity[[:space:]]OB[[:space:]]2.4.mp4 filter=lfs diff=lfs merge=lfs -text
+07[[:space:]]-[[:space:]]Cryptography/002[[:space:]]Crypto[[:space:]]Terms[[:space:]]OB[[:space:]]1.4.mp4 filter=lfs diff=lfs merge=lfs -text
+07[[:space:]]-[[:space:]]Cryptography/001[[:space:]]Intro[[:space:]]to[[:space:]]cryptography[[:space:]]OB[[:space:]]1.4.mp4 filter=lfs diff=lfs merge=lfs -text
+07[[:space:]]-[[:space:]]Cryptography/003[[:space:]]Goals[[:space:]]Cryptography[[:space:]]OB[[:space:]]1.4.mp4 filter=lfs diff=lfs merge=lfs -text
+07[[:space:]]-[[:space:]]Cryptography/005[[:space:]]Ciphers[[:space:]]OB[[:space:]]1.4.mp4 filter=lfs diff=lfs merge=lfs -text
+07[[:space:]]-[[:space:]]Cryptography/006[[:space:]]Symmetric[[:space:]]Encryption[[:space:]]OB[[:space:]]1.4.mp4 filter=lfs diff=lfs merge=lfs -text
+07[[:space:]]-[[:space:]]Cryptography/007[[:space:]]Symmetric[[:space:]]Algorithms[[:space:]]OB[[:space:]]1.4.mp4 filter=lfs diff=lfs merge=lfs -text
+07[[:space:]]-[[:space:]]Cryptography/004[[:space:]]Algorithm[[:space:]]vs[[:space:]]Keys[[:space:]]OB[[:space:]]1.4.mp4 filter=lfs diff=lfs merge=lfs -text
+07[[:space:]]-[[:space:]]Cryptography/009[[:space:]]Asymmetric[[:space:]]Algorithms[[:space:]]OB[[:space:]]1.4.mp4 filter=lfs diff=lfs merge=lfs -text
+07[[:space:]]-[[:space:]]Cryptography/008[[:space:]]Asymmetric[[:space:]]Encryption[[:space:]]OB[[:space:]]1.4.mp4 filter=lfs diff=lfs merge=lfs -text
+07[[:space:]]-[[:space:]]Cryptography/010[[:space:]]Hybrid[[:space:]]Cryptography[[:space:]]OB[[:space:]]1.4.mp4 filter=lfs diff=lfs merge=lfs -text
+07[[:space:]]-[[:space:]]Cryptography/012[[:space:]]Hashing[[:space:]]Algorithms[[:space:]]OB[[:space:]]1.4.mp4 filter=lfs diff=lfs merge=lfs -text
+07[[:space:]]-[[:space:]]Cryptography/013[[:space:]]Digital[[:space:]]Signatures[[:space:]]OB[[:space:]]1.4.mp4 filter=lfs diff=lfs merge=lfs -text
+07[[:space:]]-[[:space:]]Cryptography/014[[:space:]]Intro[[:space:]]to[[:space:]]PKI[[:space:]]OB[[:space:]]1.4.mp4 filter=lfs diff=lfs merge=lfs -text
+07[[:space:]]-[[:space:]]Cryptography/011[[:space:]]Hashing[[:space:]]OB[[:space:]]1.4.mp4 filter=lfs diff=lfs merge=lfs -text
+07[[:space:]]-[[:space:]]Cryptography/015[[:space:]]PKI[[:space:]]Purpose[[:space:]]OB[[:space:]]1.4.mp4 filter=lfs diff=lfs merge=lfs -text
+07[[:space:]]-[[:space:]]Cryptography/016[[:space:]]SSLTLS[[:space:]]Handshake[[:space:]]OB[[:space:]]1.4.mp4 filter=lfs diff=lfs merge=lfs -text
+07[[:space:]]-[[:space:]]Cryptography/017[[:space:]]PKI[[:space:]]Process[[:space:]]OB[[:space:]]1.4.mp4 filter=lfs diff=lfs merge=lfs -text
+07[[:space:]]-[[:space:]]Cryptography/018[[:space:]]Certificates[[:space:]]OB[[:space:]]1.4.mp4 filter=lfs diff=lfs merge=lfs -text
+07[[:space:]]-[[:space:]]Cryptography/019[[:space:]]PKI[[:space:]]Root[[:space:]]of[[:space:]]Trust[[:space:]]OB[[:space:]]1.4.mp4 filter=lfs diff=lfs merge=lfs -text
+07[[:space:]]-[[:space:]]Cryptography/020[[:space:]]PKI[[:space:]]Verification[[:space:]]and[[:space:]]Revocation[[:space:]]OB[[:space:]]1.4.mp4 filter=lfs diff=lfs merge=lfs -text
+07[[:space:]]-[[:space:]]Cryptography/022[[:space:]]Blockchain[[:space:]]OB[[:space:]]1.4.mp4 filter=lfs diff=lfs merge=lfs -text
+07[[:space:]]-[[:space:]]Cryptography/021[[:space:]]Steganography[[:space:]]OB[[:space:]]1.4.mp4 filter=lfs diff=lfs merge=lfs -text
+07[[:space:]]-[[:space:]]Cryptography/023[[:space:]]Salting[[:space:]]OB[[:space:]]1.4.mp4 filter=lfs diff=lfs merge=lfs -text
+07[[:space:]]-[[:space:]]Cryptography/024[[:space:]]TPM[[:space:]]OB[[:space:]]1.4.mp4 filter=lfs diff=lfs merge=lfs -text
+07[[:space:]]-[[:space:]]Cryptography/025[[:space:]]Secure[[:space:]]Enclave[[:space:]]OB[[:space:]]1.4.mp4 filter=lfs diff=lfs merge=lfs -text
+07[[:space:]]-[[:space:]]Cryptography/026[[:space:]]Obfuscation[[:space:]]OB[[:space:]]1.4.mp4 filter=lfs diff=lfs merge=lfs -text
+07[[:space:]]-[[:space:]]Cryptography/027[[:space:]]Tokenization[[:space:]]OB[[:space:]]1.4.mp4 filter=lfs diff=lfs merge=lfs -text
+07[[:space:]]-[[:space:]]Cryptography/028[[:space:]]Key[[:space:]]Escrow[[:space:]]OB[[:space:]]1.4.mp4 filter=lfs diff=lfs merge=lfs -text
+08[[:space:]]-[[:space:]]Social[[:space:]]Engineering/001[[:space:]]Social[[:space:]]Engineering[[:space:]]OB[[:space:]]2.2.mp4 filter=lfs diff=lfs merge=lfs -text
+07[[:space:]]-[[:space:]]Cryptography/029[[:space:]]HSM[[:space:]]OB[[:space:]]1.4.mp4 filter=lfs diff=lfs merge=lfs -text
+08[[:space:]]-[[:space:]]Social[[:space:]]Engineering/004[[:space:]]Smishing[[:space:]]OB[[:space:]]2.2.mp4 filter=lfs diff=lfs merge=lfs -text
+08[[:space:]]-[[:space:]]Social[[:space:]]Engineering/003[[:space:]]Vishing[[:space:]]OB[[:space:]]2.2.mp4 filter=lfs diff=lfs merge=lfs -text
+08[[:space:]]-[[:space:]]Social[[:space:]]Engineering/002[[:space:]]Phishing[[:space:]]OB[[:space:]]2.2.mp4 filter=lfs diff=lfs merge=lfs -text
+08[[:space:]]-[[:space:]]Social[[:space:]]Engineering/006[[:space:]]Misinformation[[:space:]]and[[:space:]]Disinformation[[:space:]]OB[[:space:]]2.2.mp4 filter=lfs diff=lfs merge=lfs -text

06 - Signs of Attacks/016 Request Forgery OB 2.4.mp4

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:7fb67cb33e669a0cd4db9d175ab0af64cf6e2f395928443fba926e046fc6628e
+size 252434757

06 - Signs of Attacks/017 Directory Traversal OB 2.4.mp4

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:e1744255f84e98cd7a85e260f4fc4c456a930a8571773c1fd4b050aab4b2b0a7
+size 55519440

06 - Signs of Attacks/018 Indicators of Malicious Activity OB 2.4.mp4

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:a06d972cbc8ff0a0f5b8a0649fdaa9420454c21fc6ca8bc85c96236a062be796
+size 165107189

07 - Cryptography/001 Intro to cryptography OB 1.4.mp4

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:f410dce7cb4466cf86b270c58220847a1b2f51ea6d5c26c8cbdff507a7b0146d
+size 96326919

07 - Cryptography/002 Crypto Terms OB 1.4.mp4

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:4cc3556f416a37507fb252d2fcb7a996064cef75b2e419837b7599182af66fa7
+size 61060517

07 - Cryptography/003 Goals Cryptography OB 1.4.mp4

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:9d6ea104492a374d07c1016b6b3503ab89fc91d8adebba0c830495dd01b8c89f
+size 158674618

07 - Cryptography/004 Algorithm vs Keys OB 1.4.mp4

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:bd0304e7831242c9f3d707d88bf9856f97d6277b74d575b9f8a96aaf40b98c15
+size 904992896

07 - Cryptography/005 Ciphers OB 1.4.mp4

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:44c1f607cb008792070ba7bc251a782124aa6b4674fd3ad4923b099c04b6bee7
+size 70642872

07 - Cryptography/006 Symmetric Encryption OB 1.4.mp4

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:906c0006508ac8feebd61b1a0a4236cb2a073add324119275f6653f3819e6ce3
+size 301229092

07 - Cryptography/007 Symmetric Algorithms OB 1.4.mp4

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:6e3357e07a707570a5d682d8711ce37c3257871f01c1cd9f57259d102c765260
+size 208197734

07 - Cryptography/008 Asymmetric Encryption OB 1.4.mp4

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:d30021a868903bbb6ab27a33c128faaa343205a4698dda444d1cff8cdc4899ec
+size 262306688

07 - Cryptography/009 Asymmetric Algorithms OB 1.4.mp4

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:bc4dbc91ef6e892dab0aeef519323e3958ec5cf1ce1db38b429d073da21e96d2
+size 99626564

07 - Cryptography/010 Hybrid Cryptography OB 1.4.mp4

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:b4c0b7ee7d7b0df27553d841c16df9d203d01d47527a33c0ddadd96219b95743
+size 157908953

07 - Cryptography/011 Hashing OB 1.4.mp4

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:849824f981dde0483565115c45f8a19348912f37864040c2b47282373b86a777
+size 628967987

07 - Cryptography/012 Hashing Algorithms OB 1.4.mp4

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:690cf391d2d7106d916db9e072c2fe74c170e259fc4bfa27a8008d18dec5e460
+size 80731663

07 - Cryptography/013 Digital Signatures OB 1.4.mp4

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:7dd7fb58914ad32f6f6037638e36e90d4e8c5e4870af7330d6862ec5ebe11888
+size 181001409

07 - Cryptography/014 Intro to PKI OB 1.4.mp4

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:4f8ac279e3d05da47bb0b7ead6b020e9b23a7ff9145d497f2c3680f7fbc8974d
+size 46048784

07 - Cryptography/015 PKI Purpose OB 1.4.mp4

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:b6a8128beb36e602748800e10f620fac19457721cfec27ba8a1208a8e8ea12c7
+size 133257759

07 - Cryptography/016 SSLTLS Handshake OB 1.4.mp4

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:62b288a9b3d91f94aa4c663902299a0b3ca0c5e205f4f4c20e900c47806db25c
+size 322894899

07 - Cryptography/017 PKI Process OB 1.4.mp4

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:2df30749129881a7cdb3eab017a1014418a5a912554e22b8eb690cf4509aa84a
+size 227238978

07 - Cryptography/018 Certificates OB 1.4.mp4

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:289b439dc3db3773da97e6e921bc16082cc4444a987c3656c4a1d5b857b828c0
+size 256419507

07 - Cryptography/019 PKI Root of Trust OB 1.4.mp4

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:52767a81cd65b574262fbbd167b541891ab823e4ac5db0e29ed817cbda7e6dc4
+size 81385638

07 - Cryptography/020 PKI Verification and Revocation OB 1.4.mp4

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:209b9a6ce812392bc253484a273d19429e764f0bcdcd28708ea3e58839128724
+size 119243591

07 - Cryptography/021 Steganography OB 1.4.mp4

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:5d9c971a71471963a520a76520af39e504725a61525bc23c8f5d6709490ba1c8
+size 123486561

07 - Cryptography/022 Blockchain OB 1.4.mp4

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:ed31645711f61269c6b6fa2247c7449246b79aaafce6519c607363918480a821
+size 166936677

07 - Cryptography/023 Salting OB 1.4.mp4

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:292386772cd6a1688e30efb201a3988ca58d06e896327cfd71fdaae5ffac4877
+size 106670783

07 - Cryptography/024 TPM OB 1.4.mp4

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:f74bc83f1e5177358d6e3e3e86d1f672f862d0020c9acbd846a82f86fcf17699
+size 211209531

07 - Cryptography/025 Secure Enclave OB 1.4.mp4

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:ce54c6de590a73b2aef9782418559b1a6786fdce05d43f42062ebfc39a900367
+size 48690063

07 - Cryptography/026 Obfuscation OB 1.4.mp4

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:7ba3668198ef774869f0fbe4319f1ea976482d18207dda79987d4378752c580c
+size 73746741

07 - Cryptography/027 Tokenization OB 1.4.mp4

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:2277841e3deee35b12cc4fccfb98aff9375d8702e7f442aa74490a2d740ecefd
+size 130278517

07 - Cryptography/028 Key Escrow OB 1.4.mp4

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:5c6271142b89e04576eed08ad160813cefe56719b9af87f786a9510fa7caadea
+size 51540744

07 - Cryptography/029 HSM OB 1.4.mp4

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:99202e513878337137a489c03b2c879e67c59e0db229c0c1c1e1742a2252f81f
+size 144313020

08 - Social Engineering/001 Social Engineering OB 2.2.mp4

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:1b587c47573275e81970968d5e20e90df0fd2e7d8f98c6ec6f7bf5dbb34e378c
+size 66534314

08 - Social Engineering/002 Phishing OB 2.2.mp4

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:32a70e3ca9956d8b8f75af1d0b550e43d275be845e0c144849a5775c60845682
+size 215560454

08 - Social Engineering/003 Vishing OB 2.2.mp4

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:dcf480e016947a06fea15c3193380cb7c1833950a49957f0e8f5fb76222acc85
+size 165005146

08 - Social Engineering/004 Smishing OB 2.2.mp4

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:b55d80c0072c02bf3e4d2532d021c9d07fb581e5601030ab9ff18e69663d5649
+size 57310806

08 - Social Engineering/006 Misinformation and Disinformation OB 2.2.mp4

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:d4a538f128b09d0177e2f5a358dd49a0d2bd111550e618bb33ddd367785f342b
+size 165923487

11 - Security Principles/010 IDSIPS OB 3.2_en.srt

@@ -0,0 +1,912 @@
+1
+00:00:00,000 --> 00:00:06,000
+One of the most common network, software and or device that you should have set up in your network
+
+2
+00:00:06,000 --> 00:00:14,000
+today is an IDs, Intrusion Detection Systems, or IPS intrusion prevention systems, and the simple
+
+3
+00:00:14,000 --> 00:00:21,000
+reason is that there is no way you can go around to every machine and check if an intrusion is coming
+
+4
+00:00:21,000 --> 00:00:23,000
+from one of those machines.
+
+5
+00:00:23,000 --> 00:00:27,000
+And the other reason is because the best one is actually free.
+
+6
+00:00:27,000 --> 00:00:32,000
+You see, I want to talk in this, in this particular one, in this particular video, that's going
+
+7
+00:00:32,000 --> 00:00:33,000
+to be pretty long.
+
+8
+00:00:33,000 --> 00:00:35,000
+By the way, a lot of slides is going to cover here.
+
+9
+00:00:35,000 --> 00:00:41,000
+In this particular video, we want to go through all the things we need to know about IDs and IPS for
+
+10
+00:00:41,000 --> 00:00:45,000
+our exam and why you need to have one of these in your network if you don't.
+
+11
+00:00:45,000 --> 00:00:48,000
+By the way, the free one I'm talking about is snort.
+
+12
+00:00:48,000 --> 00:00:50,000
+Snort is is maintained by Cisco.
+
+13
+00:00:50,000 --> 00:00:58,000
+It is the best, in Andrew's opinion IDs out there and it is 100% free maintained by Cisco.
+
+14
+00:00:58,000 --> 00:01:01,000
+Let's get started with what exactly is it?
+
+15
+00:01:01,000 --> 00:01:03,000
+I want to give you a scenario before I get started.
+
+16
+00:01:05,000 --> 00:01:09,000
+Imagine you have a network with 500 computers.
+
+17
+00:01:09,000 --> 00:01:15,000
+All of a sudden people starts calling the help desk and they say, oh, there's tons of network traffic.
+
+18
+00:01:15,000 --> 00:01:16,000
+The network is too slow.
+
+19
+00:01:16,000 --> 00:01:18,000
+No one can get to the internet.
+
+20
+00:01:18,000 --> 00:01:20,000
+File services are not loaded.
+
+21
+00:01:20,000 --> 00:01:24,000
+Well, there is some kind of thing going on in this network.
+
+22
+00:01:24,000 --> 00:01:26,000
+Somebody is using up all the traffic.
+
+23
+00:01:26,000 --> 00:01:29,000
+Maybe there's a worm spreading from machine to machine.
+
+24
+00:01:29,000 --> 00:01:33,000
+Maybe somebody has a virus that's downloading and utilizing all the bandwidth.
+
+25
+00:01:34,000 --> 00:01:35,000
+You got two choices.
+
+26
+00:01:35,000 --> 00:01:44,000
+You can decide to do nothing, or you can go to every single one of the machines and attempt to to to
+
+27
+00:01:44,000 --> 00:01:46,000
+find which one of them is broken.
+
+28
+00:01:46,000 --> 00:01:48,000
+This is a nightmare scenario.
+
+29
+00:01:48,000 --> 00:01:55,000
+This is a scenario that I had faced at Tia many, many years ago because I was an idiot and didn't have
+
+30
+00:01:55,000 --> 00:01:55,000
+one.
+
+31
+00:01:56,000 --> 00:01:59,000
+Now we do and we have them in every one of our locations.
+
+32
+00:01:59,000 --> 00:02:01,000
+We have IDs snorting in particular set up.
+
+33
+00:02:01,000 --> 00:02:07,000
+So if there is some kind of intrusion, especially like worm or viruses or malware on the student machines,
+
+34
+00:02:07,000 --> 00:02:09,000
+we could say, okay, it's that machine and that lab, let's go fix it.
+
+35
+00:02:10,000 --> 00:02:17,000
+IDs are able to suck up the network traffic on your network, analyze the traffic and say, that computer
+
+36
+00:02:17,000 --> 00:02:19,000
+over there, that one is bad.
+
+37
+00:02:19,000 --> 00:02:25,000
+That's why you need to have these particular things now when it comes to this.
+
+38
+00:02:25,000 --> 00:02:32,000
+It's basically a technology for real time monitoring and analysis of network activity and data for potential
+
+39
+00:02:32,000 --> 00:02:32,000
+intrusions.
+
+40
+00:02:33,000 --> 00:02:34,000
+Now, what is it going to do?
+
+41
+00:02:34,000 --> 00:02:39,000
+Well, it's going to monitor and analyze user and systems activities to see what's happening on it.
+
+42
+00:02:39,000 --> 00:02:41,000
+It's going to audit our systems and configuration.
+
+43
+00:02:41,000 --> 00:02:43,000
+If there's any vulnerabilities, it'll let you know.
+
+44
+00:02:43,000 --> 00:02:48,000
+It looks at the integrity of critical systems and any kind of data files.
+
+45
+00:02:48,000 --> 00:02:51,000
+It's going to recognize different patterns.
+
+46
+00:02:51,000 --> 00:02:55,000
+And maybe if there is any kind of abnormal activities out there.
+
+47
+00:02:56,000 --> 00:03:02,000
+Now in this video we want to talk, not just okay, this is what an IDs does, but I want to talk.
+
+48
+00:03:02,000 --> 00:03:05,000
+Exactly how does it is it a passive active.
+
+49
+00:03:06,000 --> 00:03:07,000
+Is it a behavioral based.
+
+50
+00:03:07,000 --> 00:03:10,000
+Is it a signature based IDs.
+
+51
+00:03:10,000 --> 00:03:12,000
+Um, is it an IDs or an IDs?
+
+52
+00:03:12,000 --> 00:03:14,000
+These are all terms that you can need to know for your exam.
+
+53
+00:03:14,000 --> 00:03:16,000
+So let's knock them out okay.
+
+54
+00:03:16,000 --> 00:03:23,000
+The first thing I want to talk about is how does an IDs know that this traffic is good or this traffic
+
+55
+00:03:23,000 --> 00:03:24,000
+is bad.
+
+56
+00:03:24,000 --> 00:03:29,000
+How does it is how is it able to differentiate good traffic versus bad traffic.
+
+57
+00:03:29,000 --> 00:03:31,000
+So this goes into its detection.
+
+58
+00:03:31,000 --> 00:03:38,000
+There's two ways the IDs is able to detect either it's a knowledge based system or it's a behavior or
+
+59
+00:03:38,000 --> 00:03:40,000
+slash anomaly based systems.
+
+60
+00:03:40,000 --> 00:03:44,000
+So knowledge based systems are also known as signature based systems.
+
+61
+00:03:44,000 --> 00:03:48,000
+They have a signature for all known vulnerabilities.
+
+62
+00:03:48,000 --> 00:03:54,000
+This thing has a database of all the vulnerabilities that are out there, all of the different worms
+
+63
+00:03:54,000 --> 00:03:55,000
+and attacks that are out there.
+
+64
+00:03:55,000 --> 00:03:56,000
+This is good.
+
+65
+00:03:56,000 --> 00:03:59,000
+I like these these types of systems.
+
+66
+00:03:59,000 --> 00:04:04,000
+They're you know, the main reason here is because it has a very low false alarm.
+
+67
+00:04:04,000 --> 00:04:10,000
+And what that means is this when this system tells you there is a virus, oh, there's probably a virus,
+
+68
+00:04:10,000 --> 00:04:11,000
+there is an intrusion.
+
+69
+00:04:11,000 --> 00:04:13,000
+There is a worm going on in there.
+
+70
+00:04:13,000 --> 00:04:17,000
+Alarms are more standardized and more easily to understand because it's coming from a signature.
+
+71
+00:04:17,000 --> 00:04:23,000
+The same way you have to update your antivirus software with signatures the same way this particular
+
+72
+00:04:23,000 --> 00:04:24,000
+thing works.
+
+73
+00:04:24,000 --> 00:04:29,000
+The disadvantage with this though, you have to continuously update the signatures.
+
+74
+00:04:29,000 --> 00:04:35,000
+Like if you have snort, you have to go and get the definitions, the updates on a consistent basis.
+
+75
+00:04:36,000 --> 00:04:41,000
+Um, and the other problem, if it's a signature based system, is you're waiting on the manufacturer
+
+76
+00:04:41,000 --> 00:04:48,000
+of the device or the software to actually send you the signature for new, unique, or for all the new
+
+77
+00:04:48,000 --> 00:04:49,000
+attacks that are coming out.
+
+78
+00:04:49,000 --> 00:04:55,000
+So if there's a new attack, a unique attack that the manufacturer doesn't know about yet, you're going
+
+79
+00:04:55,000 --> 00:04:59,000
+to get killed with it because the devices just doesn't know about it.
+
+80
+00:04:59,000 --> 00:05:04,000
+Now, what you should do is then turn the device into what's called an anomaly based device, or also
+
+81
+00:05:04,000 --> 00:05:06,000
+known as behavioral devices.
+
+82
+00:05:06,000 --> 00:05:09,000
+So behavioral based detection is this.
+
+83
+00:05:09,000 --> 00:05:15,000
+What it does is that it creates a baseline or learn the patterns of the normal activity within your
+
+84
+00:05:15,000 --> 00:05:16,000
+network.
+
+85
+00:05:16,000 --> 00:05:21,000
+It then it builds this statistical pattern of traffic within your network.
+
+86
+00:05:21,000 --> 00:05:25,000
+Any deviations, any variations from that.
+
+87
+00:05:25,000 --> 00:05:32,000
+It's going to tell you the great thing, the reason why it does this, since it's adapting to the traffic,
+
+88
+00:05:32,000 --> 00:05:35,000
+anything that's abnormal that people haven't done before, boom.
+
+89
+00:05:35,000 --> 00:05:38,000
+It tells you right away that there's something going on there.
+
+90
+00:05:38,000 --> 00:05:44,000
+You should check it out so it's able to tell you new or unique attacks that are out there.
+
+91
+00:05:46,000 --> 00:05:49,000
+It's less dependent on operating system vulnerability.
+
+92
+00:05:49,000 --> 00:05:52,000
+It's not going to find, you know, this is not going to affect it.
+
+93
+00:05:52,000 --> 00:05:54,000
+Now the disadvantage is there.
+
+94
+00:05:54,000 --> 00:05:56,000
+It's a higher false alarm.
+
+95
+00:05:56,000 --> 00:05:58,000
+This is going to suck.
+
+96
+00:05:58,000 --> 00:06:03,000
+Because if somebody decides to transfer a big file, the IDs is like, well, they've never done that
+
+97
+00:06:03,000 --> 00:06:07,000
+before and sends out an alarm and you're probably going to go investigate it.
+
+98
+00:06:07,000 --> 00:06:10,000
+Uh, usage pattern often changes in network.
+
+99
+00:06:10,000 --> 00:06:17,000
+And because of this, if user if user behavior pattern changes lots of false alarms.
+
+100
+00:06:17,000 --> 00:06:18,000
+Now.
+
+101
+00:06:18,000 --> 00:06:23,000
+IEDs are generally going to be a passive device.
+
+102
+00:06:23,000 --> 00:06:28,000
+Passive means that they just sit back and write passive responses.
+
+103
+00:06:28,000 --> 00:06:29,000
+They just sit back.
+
+104
+00:06:29,000 --> 00:06:34,000
+They make a log of the event, and they just tell you they'll send you a notification, either through
+
+105
+00:06:34,000 --> 00:06:38,000
+an email or a text message saying, hey, you know what?
+
+106
+00:06:39,000 --> 00:06:41,000
+With that email, you know what?
+
+107
+00:06:41,000 --> 00:06:44,000
+There is a there is a virus on that machine.
+
+108
+00:06:44,000 --> 00:06:46,000
+There's a worm on that particular machine.
+
+109
+00:06:46,000 --> 00:06:51,000
+So they're just basically telling you they're not going to do anything about the attack.
+
+110
+00:06:51,000 --> 00:06:54,000
+They're just going to they're just going to inform you that it's there.
+
+111
+00:06:55,000 --> 00:06:59,000
+Now, an active response is when it changes the environment to block it.
+
+112
+00:06:59,000 --> 00:07:05,000
+Modifying ACLs, blocking ports, blocking traffic, blocking certain network address, disable communications
+
+113
+00:07:05,000 --> 00:07:06,000
+on network segments.
+
+114
+00:07:06,000 --> 00:07:11,000
+This is more of going to be of an IPS, not just an IDs, which we'll come to in a little while.
+
+115
+00:07:13,000 --> 00:07:18,000
+Now, when it comes to IDs, there's really two main ways you're going to have them.
+
+116
+00:07:18,000 --> 00:07:19,000
+Ideally, you're going to have both.
+
+117
+00:07:19,000 --> 00:07:24,000
+You're going to have what's called a whole space IDs, and you're going to have a network based IDs.
+
+118
+00:07:25,000 --> 00:07:30,000
+Now, a host based IDs is something that you're going to install on your computer, on your desktop,
+
+119
+00:07:30,000 --> 00:07:33,000
+just like you would on anti-malware.
+
+120
+00:07:33,000 --> 00:07:39,000
+Now, if you have endpoint security software like Symantec's or Broadcom endpoint, McAfee endpoint
+
+121
+00:07:39,000 --> 00:07:45,000
+endpoint security software generally will come with a host based IDs on it.
+
+122
+00:07:46,000 --> 00:07:50,000
+Well, this is going to do is going to just monitor the host machine.
+
+123
+00:07:50,000 --> 00:07:55,000
+Maybe you go to a particular website, maybe you were downloading something, maybe an email brought
+
+124
+00:07:55,000 --> 00:07:57,000
+in a particular malware.
+
+125
+00:07:58,000 --> 00:08:02,000
+The host base IDs is going to be able to detect that.
+
+126
+00:08:02,000 --> 00:08:06,000
+Now this is going to respond by logging the activity and notifying you.
+
+127
+00:08:06,000 --> 00:08:12,000
+But it's probably going to notify a central console that, for example, the help desk, that something
+
+128
+00:08:12,000 --> 00:08:13,000
+needs to be done here.
+
+129
+00:08:13,000 --> 00:08:17,000
+Now the advantages there is that it can detect anomalies on the whole systems.
+
+130
+00:08:17,000 --> 00:08:20,000
+Uh, that that the network IDs can.
+
+131
+00:08:20,000 --> 00:08:24,000
+So if there's something going on in this machine that doesn't flow around the network traffic, the
+
+132
+00:08:24,000 --> 00:08:25,000
+network IDs can, but this could.
+
+133
+00:08:26,000 --> 00:08:30,000
+Now, the disadvantage, it's always going to be more costly because it's a per device.
+
+134
+00:08:30,000 --> 00:08:35,000
+So if you have a 10,000 device imagine 10,000 times the cost of each of those things.
+
+135
+00:08:36,000 --> 00:08:40,000
+Lots of administrative attention on each machine can detect network attacks.
+
+136
+00:08:40,000 --> 00:08:49,000
+One of the problems I have with installing endpoint security, even though we need it with Hids in particular,
+
+137
+00:08:49,000 --> 00:08:51,000
+is because it just consumes a lot of resources.
+
+138
+00:08:51,000 --> 00:08:54,000
+It slows your machine down, not significantly, but it does.
+
+139
+00:08:54,000 --> 00:08:59,000
+If you're running high, intense applications and you really need all your power and you put that IDs
+
+140
+00:08:59,000 --> 00:09:01,000
+on there, you might want to up your Ram and CPU.
+
+141
+00:09:03,000 --> 00:09:05,000
+Easier for intrusion to to discover and disable.
+
+142
+00:09:05,000 --> 00:09:09,000
+And I h IDs because they're right on the machine.
+
+143
+00:09:09,000 --> 00:09:15,000
+With less security, the logs are maintained in the system, and that means that hackers can easily
+
+144
+00:09:15,000 --> 00:09:18,000
+manipulate it, especially if it's on one machine.
+
+145
+00:09:18,000 --> 00:09:20,000
+Your machine in particular.
+
+146
+00:09:21,000 --> 00:09:23,000
+Now the other one is going to be a network based idea.
+
+147
+00:09:23,000 --> 00:09:25,000
+So what exactly is that?
+
+148
+00:09:25,000 --> 00:09:30,000
+A network based IDs is not just a piece of software on a desktop.
+
+149
+00:09:30,000 --> 00:09:32,000
+A network based IDs is a computer.
+
+150
+00:09:32,000 --> 00:09:33,000
+Like if you have snort.
+
+151
+00:09:33,000 --> 00:09:34,000
+All right.
+
+152
+00:09:34,000 --> 00:09:36,000
+So if I open the calculator.
+
+153
+00:09:36,000 --> 00:09:44,000
+So for example if you have snort you would install snort on a computer.
+
+154
+00:09:44,000 --> 00:09:45,000
+All right.
+
+155
+00:09:45,000 --> 00:09:46,000
+Just a normal desktop.
+
+156
+00:09:46,000 --> 00:09:50,000
+And what you're going to do is you're just going to plug it in to the switch.
+
+157
+00:09:50,000 --> 00:09:55,000
+Now once you guys look at this diagram that I have here, here's how you would set up your network.
+
+158
+00:09:55,000 --> 00:09:58,000
+You would first take your switch.
+
+159
+00:09:58,000 --> 00:10:04,000
+You would install snort on a normal everyday computer, ideally a type of a server.
+
+160
+00:10:04,000 --> 00:10:08,000
+And you're going to do what's called port spanning Port Spanner or Port Marion.
+
+161
+00:10:08,000 --> 00:10:10,000
+What this means let me get the switch here.
+
+162
+00:10:10,000 --> 00:10:18,000
+So what this means is this you would have to go into the switch and you would select one of these ports
+
+163
+00:10:18,000 --> 00:10:19,000
+to be this port spanner.
+
+164
+00:10:19,000 --> 00:10:25,000
+Let's say you go with this port right here, the second port you would go into the switches configuration.
+
+165
+00:10:25,000 --> 00:10:28,000
+If you guys studied Cisco you'll be familiar with this.
+
+166
+00:10:28,000 --> 00:10:30,000
+If you go into the switch you would port span this switch.
+
+167
+00:10:30,000 --> 00:10:35,000
+And what's going to happen here is that all traffic that comes through the rest of these switches,
+
+168
+00:10:35,000 --> 00:10:40,000
+all these ports will be copied to this second port that I have here.
+
+169
+00:10:40,000 --> 00:10:43,000
+So what this is doing is that all traffic.
+
+170
+00:10:43,000 --> 00:10:49,000
+So let's say somebody is talking from this port here to this port, maybe this port to this port, this
+
+171
+00:10:49,000 --> 00:10:49,000
+port, to this port.
+
+172
+00:10:49,000 --> 00:10:50,000
+What?
+
+173
+00:10:50,000 --> 00:10:50,000
+It doesn't matter.
+
+174
+00:10:51,000 --> 00:10:55,000
+Okay, as all these ports are talking, traffic coming in and out, all these ports.
+
+175
+00:10:55,000 --> 00:11:01,000
+This switch is sending a copy of every single one of the frames to that port.
+
+176
+00:11:02,000 --> 00:11:03,000
+Now.
+
+177
+00:11:03,000 --> 00:11:04,000
+What happens then?
+
+178
+00:11:04,000 --> 00:11:11,000
+Well, what's going to happen then is that remember, the snort box is connected to that span port.
+
+179
+00:11:12,000 --> 00:11:19,000
+The snort box snorts up all of this traffic, analyzes it in its database, and it's going to be able
+
+180
+00:11:19,000 --> 00:11:24,000
+to tell you if there is some kind of intrusion on this machine, or this machine or that machine or
+
+181
+00:11:24,000 --> 00:11:26,000
+that segment and so on.
+
+182
+00:11:26,000 --> 00:11:28,000
+So it reads all the incoming packet.
+
+183
+00:11:28,000 --> 00:11:31,000
+It searches for any kind of suspicious patterns.
+
+184
+00:11:31,000 --> 00:11:34,000
+Uh, when threats are discovered based on the severity.
+
+185
+00:11:36,000 --> 00:11:37,000
+Uh, it will alert you now.
+
+186
+00:11:37,000 --> 00:11:40,000
+It cannot monitor encrypted.
+
+187
+00:11:40,000 --> 00:11:40,000
+It's going to be this one.
+
+188
+00:11:40,000 --> 00:11:41,000
+This.
+
+189
+00:11:41,000 --> 00:11:43,000
+It can't monitor encrypted traffic.
+
+190
+00:11:43,000 --> 00:11:49,000
+If you use a lot of encrypted traffic, it may not be able to see it harder for attackers to discover.
+
+191
+00:11:49,000 --> 00:11:55,000
+Have very little, little negative effect on traffic because it's just copying traffic over.
+
+192
+00:11:55,000 --> 00:12:00,000
+It's not like it's going to be flying extra traffic around the network now.
+
+193
+00:12:00,000 --> 00:12:06,000
+And Nids is like, snort, I think is something we should all have on our networks.
+
+194
+00:12:06,000 --> 00:12:06,000
+Why?
+
+195
+00:12:06,000 --> 00:12:08,000
+Because once again it's free.
+
+196
+00:12:08,000 --> 00:12:11,000
+Please install it if you don't have it now.
+
+197
+00:12:12,000 --> 00:12:13,000
+All right.
+
+198
+00:12:13,000 --> 00:12:14,000
+You're not really going to find many things.
+
+199
+00:12:14,000 --> 00:12:17,000
+That is pure ideas in today's world.
+
+200
+00:12:17,000 --> 00:12:22,000
+Today's world with all the unified devices that are out there, we're going to get some kind of an IP.
+
+201
+00:12:22,000 --> 00:12:24,000
+A snort is technically an IPS.
+
+202
+00:12:24,000 --> 00:12:26,000
+So what exactly is the IPS?
+
+203
+00:12:26,000 --> 00:12:28,000
+An IPS is an inline device.
+
+204
+00:12:28,000 --> 00:12:29,000
+I want you guys watch this diagram here.
+
+205
+00:12:29,000 --> 00:12:31,000
+So you see this firewall.
+
+206
+00:12:31,000 --> 00:12:35,000
+The IDs sits like a normal box off the firewall.
+
+207
+00:12:35,000 --> 00:12:39,000
+It grabs traffic to protect your internal network.
+
+208
+00:12:39,000 --> 00:12:46,000
+Notice the IPS technically is the firewall a lot of IPS like so this has an IPS built into it.
+
+209
+00:12:46,000 --> 00:12:49,000
+You just have to pay to enable its license.
+
+210
+00:12:49,000 --> 00:12:56,000
+So what an IPS does is that not only does it examine the traffic to detect intrusions, but if it finds
+
+211
+00:12:56,000 --> 00:13:01,000
+intrusions or problems, it prevents the vulnerabilities it prevents.
+
+212
+00:13:01,000 --> 00:13:08,000
+It can shut segments down, it can shut hoses off, it can choose what to forward and what to block.
+
+213
+00:13:08,000 --> 00:13:11,000
+So it prevents attacks from happening in your network.
+
+214
+00:13:11,000 --> 00:13:14,000
+So this is something important to consider.
+
+215
+00:13:14,000 --> 00:13:22,000
+IPS IPS is of course going to be better than an IDs system, but any which way.
+
+216
+00:13:22,000 --> 00:13:26,000
+Remember snort is free and it is an ID it is a network IPS.
+
+217
+00:13:26,000 --> 00:13:30,000
+If you go to the website and you look at it, you'll notice it says that.
+
+218
+00:13:30,000 --> 00:13:31,000
+All right.
+
+219
+00:13:31,000 --> 00:13:37,000
+To end this discussion, IDs IPS are mandatory devices in my opinion, on any network.
+
+220
+00:13:37,000 --> 00:13:39,000
+In my opinion, this is not for your exam.
+
+221
+00:13:39,000 --> 00:13:41,000
+I'm just telling you this from experience.
+
+222
+00:13:41,000 --> 00:13:47,000
+If you have a network that's more than ten computers, please put an IDs in just between me and you.
+
+223
+00:13:47,000 --> 00:13:49,000
+If you're installing snort, it doesn't need a lot of resources.
+
+224
+00:13:49,000 --> 00:13:53,000
+Use an old box, old computer you have in a corner.
+
+225
+00:13:53,000 --> 00:13:55,000
+Put an SSD into it.
+
+226
+00:13:55,000 --> 00:13:56,000
+Install snort, put Linux on it.
+
+227
+00:13:56,000 --> 00:13:58,000
+Do not install on windows.
+
+228
+00:13:58,000 --> 00:14:03,000
+It doesn't work really well and have some fun monitoring traffic and securing your network.
+

11 - Security Principles/011 Load Balancer OB 3.2_en.srt

@@ -0,0 +1,380 @@
+1
+00:00:00,000 --> 00:00:07,000
+When you're building large networks, that's going to take in tens of thousands or millions of requests.
+
+2
+00:00:07,000 --> 00:00:13,000
+One critical device that you're going to need to set up is something we call a load balancer.
+
+3
+00:00:13,000 --> 00:00:15,000
+What exactly is it?
+
+4
+00:00:15,000 --> 00:00:15,000
+What?
+
+5
+00:00:15,000 --> 00:00:16,000
+I want to show you a picture of it.
+
+6
+00:00:16,000 --> 00:00:20,000
+Let's just jump a couple of slides around before we come back to it.
+
+7
+00:00:20,000 --> 00:00:24,000
+So I want you guys watch this particular diagram again.
+
+8
+00:00:24,000 --> 00:00:25,000
+We'll come back to this in a minute.
+
+9
+00:00:25,000 --> 00:00:29,000
+But what a load balancer does is exactly what it says it does.
+
+10
+00:00:29,000 --> 00:00:31,000
+It balances a load.
+
+11
+00:00:31,000 --> 00:00:37,000
+Let's say you have let's say these five computers each represents 1000 connections.
+
+12
+00:00:37,000 --> 00:00:39,000
+So right now you've got 5000 connections coming in.
+
+13
+00:00:39,000 --> 00:00:40,000
+You have a choice.
+
+14
+00:00:40,000 --> 00:00:44,000
+You can just have one single web server taking all the connections.
+
+15
+00:00:44,000 --> 00:00:48,000
+And if that server dies oh well every no more internet site for them.
+
+16
+00:00:48,000 --> 00:00:49,000
+Your sites down.
+
+17
+00:00:49,000 --> 00:00:51,000
+The best thing here is to get a load balancer.
+
+18
+00:00:51,000 --> 00:00:56,000
+What a load balancer does is that it distributes the load between two different servers.
+
+19
+00:00:56,000 --> 00:00:59,000
+So look at it right now it's given this one server.
+
+20
+00:00:59,000 --> 00:01:01,000
+It's computer one is getting this.
+
+21
+00:01:01,000 --> 00:01:03,000
+Then it's given this to computer two.
+
+22
+00:01:03,000 --> 00:01:05,000
+And when computer three comes in gives it to this one.
+
+23
+00:01:05,000 --> 00:01:09,000
+Computer four comes in gives it to this one, five comes in to this one.
+
+24
+00:01:09,000 --> 00:01:09,000
+Then six would go.
+
+25
+00:01:09,000 --> 00:01:15,000
+So it's going like this 123456789.
+
+26
+00:01:15,000 --> 00:01:16,000
+So what is it doing.
+
+27
+00:01:16,000 --> 00:01:18,000
+It's distributing the load between the machines.
+
+28
+00:01:18,000 --> 00:01:26,000
+That way one machine doesn't get all the load of the internet of the website requests is basically splitting
+
+29
+00:01:26,000 --> 00:01:27,000
+it 5050.
+
+30
+00:01:27,000 --> 00:01:33,000
+This of course helps to speed up the traffic on the speed up traffic hitting the system.
+
+31
+00:01:33,000 --> 00:01:34,000
+So what exactly is it?
+
+32
+00:01:34,000 --> 00:01:41,000
+Well, it's basically a device or software that evenly distributes network or application traffic across
+
+33
+00:01:41,000 --> 00:01:45,000
+multiple servers to prevent any single one of them from becoming overburdened.
+
+34
+00:01:45,000 --> 00:01:48,000
+It improves performance and reliability.
+
+35
+00:01:48,000 --> 00:01:48,000
+It makes it quick.
+
+36
+00:01:48,000 --> 00:01:52,000
+But if one of those servers die, your whole website doesn't go offline.
+
+37
+00:01:52,000 --> 00:01:56,000
+It does become slower because now one machine has to serve all of them.
+
+38
+00:01:56,000 --> 00:01:59,000
+Load balancers comes in different in two kinds.
+
+39
+00:01:59,000 --> 00:02:01,000
+You have a hardware and a software.
+
+40
+00:02:01,000 --> 00:02:06,000
+What I have here is a hardware load balancer from Barracuda, very famous device.
+
+41
+00:02:06,000 --> 00:02:13,000
+So a hardware load balancer is a physical device specifically designed for balancing the load.
+
+42
+00:02:13,000 --> 00:02:19,000
+They are more powerful, more expensive, and most of most of most of the load balancers we have today,
+
+43
+00:02:19,000 --> 00:02:23,000
+especially on large server farms, web server farms are going to be these kinds of devices.
+
+44
+00:02:23,000 --> 00:02:24,000
+You could do this.
+
+45
+00:02:25,000 --> 00:02:26,000
+With software.
+
+46
+00:02:27,000 --> 00:02:31,000
+So for example Windows Server supports this.
+
+47
+00:02:31,000 --> 00:02:33,000
+These are applications that can run on a standard hardware.
+
+48
+00:02:33,000 --> 00:02:37,000
+And cloud environments are more flexible and more cost effective.
+
+49
+00:02:37,000 --> 00:02:41,000
+Now when you set up a load balancer, there's basically two kinds of setups.
+
+50
+00:02:41,000 --> 00:02:44,000
+You have what's called active passive.
+
+51
+00:02:44,000 --> 00:02:46,000
+And the other one is called active active.
+
+52
+00:02:46,000 --> 00:02:47,000
+So what is exactly this one.
+
+53
+00:02:47,000 --> 00:02:53,000
+So active passive is this this is really not to improve performance.
+
+54
+00:02:53,000 --> 00:02:56,000
+This one is to improve reliability.
+
+55
+00:02:56,000 --> 00:02:58,000
+What this means is that what you do.
+
+56
+00:02:59,000 --> 00:03:07,000
+Is you're going to have one server take on all of the requests, all of them.
+
+57
+00:03:07,000 --> 00:03:11,000
+Maybe this is good for you because you don't have a lot of requests.
+
+58
+00:03:11,000 --> 00:03:16,000
+Maybe you have a really beefy server with a big line, and you don't need to split the request between
+
+59
+00:03:16,000 --> 00:03:16,000
+them.
+
+60
+00:03:16,000 --> 00:03:22,000
+It doesn't make sense, because the request you have is only utilized in a small percentage of resources
+
+61
+00:03:22,000 --> 00:03:23,000
+on the machine.
+
+62
+00:03:23,000 --> 00:03:25,000
+So what you do, you set up this thing called active passive.
+
+63
+00:03:25,000 --> 00:03:26,000
+So one machine is active.
+
+64
+00:03:26,000 --> 00:03:28,000
+It's taking all the requests.
+
+65
+00:03:28,000 --> 00:03:32,000
+And then if this machine fails then this one kicks in.
+
+66
+00:03:32,000 --> 00:03:33,000
+So this is a failover server.
+
+67
+00:03:33,000 --> 00:03:37,000
+So if the primary one fails the failover kicks in.
+
+68
+00:03:37,000 --> 00:03:40,000
+So it has to have some kind of failover mechanism between them.
+
+69
+00:03:40,000 --> 00:03:41,000
+So the switch knows it.
+
+70
+00:03:41,000 --> 00:03:47,000
+The hardware load balancer generally will knows it ideally for scenarios where uninterrupted service
+
+71
+00:03:47,000 --> 00:03:48,000
+is critical.
+
+72
+00:03:49,000 --> 00:03:53,000
+But you don't need the power of just two of them at the same time.
+
+73
+00:03:53,000 --> 00:03:57,000
+It provides a reliable backup in case a primary one fails.
+
+74
+00:03:57,000 --> 00:04:01,000
+So once again, if you just don't need that power, this is going to work out.
+
+75
+00:04:01,000 --> 00:04:08,000
+Now, if you have massive amounts of client traffic coming in and you have 50 servers set up there,
+
+76
+00:04:08,000 --> 00:04:13,000
+and you need all of your servers to be hammering out those requests, this is your thing here.
+
+77
+00:04:13,000 --> 00:04:14,000
+Both.
+
+78
+00:04:15,000 --> 00:04:21,000
+Load balancers are active in shared traffic simultaneously, so they're both sharing the traffic.
+
+79
+00:04:21,000 --> 00:04:26,000
+Traffic is distributed between two, generally two load balancers or different hoses.
+
+80
+00:04:26,000 --> 00:04:28,000
+Um they use something called round robin.
+
+81
+00:04:28,000 --> 00:04:29,000
+So you get it, then you get it.
+
+82
+00:04:29,000 --> 00:04:31,000
+So it'll be like you get it, then you get it, then you get it.
+
+83
+00:04:31,000 --> 00:04:34,000
+If there was three of them, it would be like, you get it, you get it, you get it.
+
+84
+00:04:34,000 --> 00:04:38,000
+Usage for high end traffic environments this year.
+
+85
+00:04:38,000 --> 00:04:42,000
+The big advantages here good capacity and reliability.
+
+86
+00:04:42,000 --> 00:04:48,000
+Now this could be done with multiple load balancers or it could be done with a single load balancer.
+
+87
+00:04:48,000 --> 00:04:51,000
+Although if you have multiple load balancers because if this device fails you're in trouble.
+
+88
+00:04:51,000 --> 00:04:56,000
+So you could have multiple load balancers uh, different forms.
+
+89
+00:04:56,000 --> 00:04:59,000
+Maybe each load balancer has ten machines.
+
+90
+00:04:59,000 --> 00:05:02,000
+There are different ways to set this up for your exam.
+
+91
+00:05:02,000 --> 00:05:04,000
+Just understand what a load balancer is.
+
+92
+00:05:04,000 --> 00:05:05,000
+It is what it says it is.
+
+93
+00:05:05,000 --> 00:05:07,000
+It distributes loads between machines.
+
+94
+00:05:07,000 --> 00:05:14,000
+Key reason for that is going to be because we want to not just distribute the traffic, but we want
+
+95
+00:05:14,000 --> 00:05:20,000
+the reliability in case one of those machines fail, it doesn't bring down the entire network.
+

11 - Security Principles/012 802.1x and EAP OB 3.2_en.srt

@@ -0,0 +1,356 @@
+1
+00:00:00,000 --> 00:00:00,000
+All right.
+
+2
+00:00:00,000 --> 00:00:02,000
+Take a look at the switch that I have here.
+
+3
+00:00:02,000 --> 00:00:03,000
+So we got this switch.
+
+4
+00:00:03,000 --> 00:00:07,000
+We plug you're going to plug your computer into my switch.
+
+5
+00:00:07,000 --> 00:00:10,000
+And you're going to be able to gain access to the network.
+
+6
+00:00:10,000 --> 00:00:17,000
+Or are you one of the just having a switch lying around is one of the worst things you can ever do.
+
+7
+00:00:17,000 --> 00:00:23,000
+If you're right now, if your switch is set up to the point where anyone can just walk in, plug a computer
+
+8
+00:00:23,000 --> 00:00:28,000
+into it, and gain full network access without any form of authentication.
+
+9
+00:00:28,000 --> 00:00:29,000
+That is bad news.
+
+10
+00:00:29,000 --> 00:00:36,000
+So what we want to do is we want to be able we put this down before it kills me here.
+
+11
+00:00:36,000 --> 00:00:41,000
+We want to be able to do what is called port security.
+
+12
+00:00:41,000 --> 00:00:43,000
+But what exactly is that?
+
+13
+00:00:43,000 --> 00:00:48,000
+So port security is used to secure network ports on computers and network devices, and particularly
+
+14
+00:00:48,000 --> 00:00:55,000
+switches guarding against on authorized access and insurance, secure communication.
+
+15
+00:00:55,000 --> 00:00:57,000
+This is more than likely going to be secured.
+
+16
+00:00:57,000 --> 00:01:03,000
+Network switch ports now generally, port security can also mean things like filtering ports through
+
+17
+00:01:03,000 --> 00:01:04,000
+TCP and UDP.
+
+18
+00:01:04,000 --> 00:01:05,000
+This is going to be done with like firewalls.
+
+19
+00:01:06,000 --> 00:01:10,000
+It's meant to stop unauthorized access to your network.
+
+20
+00:01:10,000 --> 00:01:15,000
+But in this particular video, what I want to talk about is not just filtering traffic through ports.
+
+21
+00:01:15,000 --> 00:01:17,000
+This is going to be done generally through a firewall.
+
+22
+00:01:17,000 --> 00:01:21,000
+I want to talk about the physical port security, like on this switch.
+
+23
+00:01:21,000 --> 00:01:28,000
+And in particular there's two terms that we want to be familiar with something called 821 X and EAP
+
+24
+00:01:28,000 --> 00:01:31,000
+or Extensible Authentication Protocol.
+
+25
+00:01:31,000 --> 00:01:32,000
+Let me explain what this is to you.
+
+26
+00:01:32,000 --> 00:01:36,000
+So 821 x you have to come into the switch and enable these things.
+
+27
+00:01:36,000 --> 00:01:40,000
+You you configure the ports on the switch and you enable this.
+
+28
+00:01:40,000 --> 00:01:42,000
+This is an IEEE standard.
+
+29
+00:01:43,000 --> 00:01:44,000
+For port.
+
+30
+00:01:44,000 --> 00:01:46,000
+Port based access control.
+
+31
+00:01:46,000 --> 00:01:50,000
+It's used to authenticate device that are attempting to connect to your LAN.
+
+32
+00:01:50,000 --> 00:01:53,000
+And you can also do this for your wireless connection.
+
+33
+00:01:53,000 --> 00:01:59,000
+Also not just for your wired switch, but you can also enable it on your wireless.
+
+34
+00:01:59,000 --> 00:02:00,000
+Here's how it works.
+
+35
+00:02:00,000 --> 00:02:06,000
+When a device attempts to connect to a network that's that has 801 enabled, the authenticator blocks
+
+36
+00:02:06,000 --> 00:02:11,000
+all traffic except the 8021, and the client is authenticated.
+
+37
+00:02:11,000 --> 00:02:12,000
+Now I want to show you guys something.
+
+38
+00:02:12,000 --> 00:02:14,000
+I have a diagram of this from Wikipedia.
+
+39
+00:02:15,000 --> 00:02:21,000
+So when you want to connect to a network, notice the switch that is going to be utilizing.
+
+40
+00:02:22,000 --> 00:02:24,000
+That's going to be utilizing 801 x.
+
+41
+00:02:24,000 --> 00:02:31,000
+So what you do is you configure the switch to say if the computer does not authenticate and go through
+
+42
+00:02:31,000 --> 00:02:34,000
+8 to 1 x, we're not going to allow you access in.
+
+43
+00:02:34,000 --> 00:02:37,000
+So it only accepts that kind of access.
+
+44
+00:02:37,000 --> 00:02:38,000
+So here's how it works.
+
+45
+00:02:39,000 --> 00:02:40,000
+The supplicant is you.
+
+46
+00:02:40,000 --> 00:02:41,000
+That's the user.
+
+47
+00:02:41,000 --> 00:02:44,000
+You connect to the switch and you're trying to gain access to the network.
+
+48
+00:02:44,000 --> 00:02:51,000
+But before the switch can grant you access to the LAN resources, what you have to do, you have to
+
+49
+00:02:51,000 --> 00:02:55,000
+send a request to the authenticator to switch.
+
+50
+00:02:55,000 --> 00:03:00,000
+The authenticator then sends that request to an authentication server.
+
+51
+00:03:00,000 --> 00:03:04,000
+That authentication server is going to authenticate you username password.
+
+52
+00:03:04,000 --> 00:03:08,000
+It can do a variety of different things certificate based authentication.
+
+53
+00:03:08,000 --> 00:03:10,000
+So there's many different ways it can do this.
+
+54
+00:03:10,000 --> 00:03:16,000
+You can use a Radius server something we'll cover in another class in another video when the when the
+
+55
+00:03:16,000 --> 00:03:23,000
+authentication server said it's okay, then the authenticator tells you and then you can access resources.
+
+56
+00:03:24,000 --> 00:03:29,000
+Now the supplicant I just mentioned to you, you send the credential to the authenticator, which forwards
+
+57
+00:03:29,000 --> 00:03:30,000
+them to the authentication server.
+
+58
+00:03:30,000 --> 00:03:34,000
+And the authentication server is something that's going to run like a Radius server.
+
+59
+00:03:34,000 --> 00:03:39,000
+If the server approves it, it gives you access and then you can access the network.
+
+60
+00:03:39,000 --> 00:03:42,000
+Now you notice I have these things called EAP here.
+
+61
+00:03:42,000 --> 00:03:46,000
+See that EAP stands for Extensible Authentication Protocol.
+
+62
+00:03:46,000 --> 00:03:50,000
+You are authenticating to a particular device.
+
+63
+00:03:50,000 --> 00:03:53,000
+This here is this is the protocol that's going to allow that.
+
+64
+00:03:54,000 --> 00:03:56,000
+It's a framework frequently used in network access.
+
+65
+00:03:57,000 --> 00:03:58,000
+All right.
+
+66
+00:03:58,000 --> 00:04:02,000
+It's designed to support multiple authentication passwords, tokens, certificates.
+
+67
+00:04:02,000 --> 00:04:07,000
+So if you want to authenticate to my network and you plug a computer into my switch.
+
+68
+00:04:08,000 --> 00:04:11,000
+You're going to have to provide either some kind of certificate.
+
+69
+00:04:11,000 --> 00:04:13,000
+You can use tokens.
+
+70
+00:04:14,000 --> 00:04:15,000
+Uh, certificates is a good one.
+
+71
+00:04:15,000 --> 00:04:16,000
+I like that one.
+
+72
+00:04:17,000 --> 00:04:19,000
+The worst, of course, is passwords.
+
+73
+00:04:19,000 --> 00:04:21,000
+This thing is widely used.
+
+74
+00:04:21,000 --> 00:04:25,000
+It's mostly it was widely used in PGP or point to point connections.
+
+75
+00:04:26,000 --> 00:04:26,000
+Um.
+
+76
+00:04:27,000 --> 00:04:34,000
+But it's a lot of time now using 821 X, and it's used generally in conjunction with a Radius server
+
+77
+00:04:34,000 --> 00:04:35,000
+to centralize authentication.
+
+78
+00:04:35,000 --> 00:04:40,000
+That way you can have tons of switches all foward to a single.
+
+79
+00:04:41,000 --> 00:04:44,000
+Authentication server like a radius.
+
+80
+00:04:45,000 --> 00:04:47,000
+Why would you want this?
+
+81
+00:04:47,000 --> 00:04:47,000
+Right?
+
+82
+00:04:47,000 --> 00:04:48,000
+You think about this.
+
+83
+00:04:49,000 --> 00:04:53,000
+One of the worst things that can happen to somebody walking into a network and just plug a computer
+
+84
+00:04:53,000 --> 00:04:57,000
+into your to plug a computer into your network, gain all your network access.
+
+85
+00:04:57,000 --> 00:04:59,000
+That would severely suck.
+
+86
+00:04:59,000 --> 00:05:01,000
+The best thing to do is to have this on your network.
+
+87
+00:05:01,000 --> 00:05:07,000
+Now, it's not difficult to set up, but it is more setup that needs to get done.
+
+88
+00:05:07,000 --> 00:05:12,000
+That way, when somebody plugs a computer into your network, you're 100% sure this person actually
+
+89
+00:05:12,000 --> 00:05:14,000
+belongs in the network.
+

11 - Security Principles/013 Firewalls OB 3.2_en.srt

@@ -0,0 +1,520 @@
+1
+00:00:00,000 --> 00:00:04,000
+In this course, I discussed a lot of different ways to secure a network.
+
+2
+00:00:04,000 --> 00:00:11,000
+But when it comes to network security, Network Security 101 is a firewall.
+
+3
+00:00:11,000 --> 00:00:17,000
+And in this video we're going to talk about firewalls in particularly like this little firewall that
+
+4
+00:00:17,000 --> 00:00:19,000
+I have right here.
+
+5
+00:00:19,000 --> 00:00:19,000
+All right.
+
+6
+00:00:19,000 --> 00:00:20,000
+That one has two USBs.
+
+7
+00:00:20,000 --> 00:00:21,000
+This one doesn't.
+
+8
+00:00:21,000 --> 00:00:23,000
+All right let's get started with different kinds of firewall.
+
+9
+00:00:23,000 --> 00:00:26,000
+And I'm going to explain to you that this is an next generation firewall.
+
+10
+00:00:26,000 --> 00:00:28,000
+And what makes this one unique.
+
+11
+00:00:28,000 --> 00:00:29,000
+Let's get started.
+
+12
+00:00:30,000 --> 00:00:36,000
+When it comes to basic network security, one of the most basic things you've got to have on a computer
+
+13
+00:00:37,000 --> 00:00:38,000
+or on a network is a firewall.
+
+14
+00:00:38,000 --> 00:00:44,000
+Now firewalls comes in to basically going to come in two main designs.
+
+15
+00:00:44,000 --> 00:00:48,000
+You have, uh, host based firewalls and network firewalls.
+
+16
+00:00:48,000 --> 00:00:49,000
+This is a network firewall.
+
+17
+00:00:49,000 --> 00:00:55,000
+You have a host based firewall that's installed on your physical box, like on your your desktop, like
+
+18
+00:00:55,000 --> 00:00:56,000
+Windows Firewall.
+
+19
+00:00:56,000 --> 00:00:59,000
+Now, what exactly is it?
+
+20
+00:00:59,000 --> 00:01:02,000
+Well, a network security system, it's basically a network.
+
+21
+00:01:02,000 --> 00:01:05,000
+The monitors and controls incoming and outgoing network traffic.
+
+22
+00:01:05,000 --> 00:01:10,000
+Whether that's coming into your host or coming into your network, typically establishes a barrier between
+
+23
+00:01:10,000 --> 00:01:14,000
+a trusted, secure internal network and an outside external network.
+
+24
+00:01:14,000 --> 00:01:19,000
+So if it's a network, if it's a network based firewall, they're talking about this one here has a
+
+25
+00:01:19,000 --> 00:01:20,000
+Wang port.
+
+26
+00:01:22,000 --> 00:01:27,000
+Anything connected here would be considered on the public side, and anything connected here, the land
+
+27
+00:01:27,000 --> 00:01:29,000
+port would be considered good traffic.
+
+28
+00:01:29,000 --> 00:01:32,000
+Now it's implemented in hardware and software.
+
+29
+00:01:32,000 --> 00:01:35,000
+So obviously this is an appliance that we would have.
+
+30
+00:01:35,000 --> 00:01:41,000
+Of course you would have software firewalls like something uh, that you would install like like Windows
+
+31
+00:01:41,000 --> 00:01:41,000
+Firewall.
+
+32
+00:01:41,000 --> 00:01:42,000
+That's a good example.
+
+33
+00:01:42,000 --> 00:01:46,000
+But you can also have like Symantec's or Broadcom endpoint, McAfee endpoint.
+
+34
+00:01:46,000 --> 00:01:49,000
+These will generally come with software based firewalls.
+
+35
+00:01:49,000 --> 00:01:54,000
+They're going to enforce a security policy like allow or disallow these kinds of traffic.
+
+36
+00:01:54,000 --> 00:01:58,000
+They control the flow of traffic does not differentiate data versus command.
+
+37
+00:01:58,000 --> 00:02:02,000
+It just doesn't know whether something is a command or a particular data.
+
+38
+00:02:02,000 --> 00:02:06,000
+So it might be difficult to detect that controls the flow of traffic.
+
+39
+00:02:06,000 --> 00:02:10,000
+Um, controls the flow of traffic between hosts and network.
+
+40
+00:02:10,000 --> 00:02:16,000
+Now, there are different kinds of firewalls that we want to be familiar with for our exam.
+
+41
+00:02:16,000 --> 00:02:23,000
+The first kind of firewall that came out when I was a little boy was packet filtering firewalls.
+
+42
+00:02:23,000 --> 00:02:26,000
+And these things are not firewalls, they were just routers.
+
+43
+00:02:26,000 --> 00:02:32,000
+When an access control list, they were subject to many kinds of attacks and they do not exist today.
+
+44
+00:02:33,000 --> 00:02:37,000
+Today we're all stateful packet inspection.
+
+45
+00:02:37,000 --> 00:02:38,000
+This was known as stateless.
+
+46
+00:02:38,000 --> 00:02:43,000
+The reason for this is because this type of firewall didn't know traffic that left.
+
+47
+00:02:43,000 --> 00:02:46,000
+So it was subject to something called source routing.
+
+48
+00:02:46,000 --> 00:02:49,000
+Once again, this thing doesn't really exist.
+
+49
+00:02:49,000 --> 00:02:54,000
+All firewalls today and all the firewalls that I'm going to be talking about, such as web application
+
+50
+00:02:54,000 --> 00:03:04,000
+firewalls, utms, and next gen firewalls are all based on stateful packet inspection or Spice or stateful
+
+51
+00:03:04,000 --> 00:03:05,000
+inspection firewalls.
+
+52
+00:03:05,000 --> 00:03:08,000
+This is the most they're more advanced than packet filtering.
+
+53
+00:03:08,000 --> 00:03:09,000
+They keep a track.
+
+54
+00:03:09,000 --> 00:03:12,000
+They have a state table of who left and who's coming back in.
+
+55
+00:03:12,000 --> 00:03:19,000
+They're incredibly popular on all firewall technology, including what I have here is based on it now.
+
+56
+00:03:20,000 --> 00:03:26,000
+One kind of firewall that is popular if you're hosting web servers is going to be something called a
+
+57
+00:03:26,000 --> 00:03:29,000
+WAF or a web application firewall.
+
+58
+00:03:29,000 --> 00:03:34,000
+The design to protect web applications by filtering and monitoring web traffic.
+
+59
+00:03:34,000 --> 00:03:39,000
+Let me show you guys a particular diagram from a very famous company called Akamai.
+
+60
+00:03:39,000 --> 00:03:42,000
+So imagine you have a web for a web server farm.
+
+61
+00:03:42,000 --> 00:03:43,000
+All right.
+
+62
+00:03:43,000 --> 00:03:44,000
+All these are all your web servers.
+
+63
+00:03:44,000 --> 00:03:51,000
+You have all kinds of end users coming through the internet to get to your web server.
+
+64
+00:03:51,000 --> 00:03:59,000
+You put the web application firewall between you and the public, any kind of negative traffic that
+
+65
+00:03:59,000 --> 00:04:06,000
+is attempting to hit your web servers, things such as SQL injection, cross site scripting, session
+
+66
+00:04:06,000 --> 00:04:11,000
+hijacking, anything that's negative that's going to attempt to hit your.
+
+67
+00:04:12,000 --> 00:04:14,000
+Hit your, uh, your web server.
+
+68
+00:04:14,000 --> 00:04:16,000
+This thing is going to stop.
+
+69
+00:04:16,000 --> 00:04:20,000
+So this is really important if you're running web applications.
+
+70
+00:04:21,000 --> 00:04:23,000
+Uh, they operate at the application layer.
+
+71
+00:04:23,000 --> 00:04:24,000
+The rules are customized.
+
+72
+00:04:24,000 --> 00:04:26,000
+They're generally could be a hardware or software.
+
+73
+00:04:26,000 --> 00:04:31,000
+But a lot of times now, being that a lot of people have all their web servers are in the cloud, they're
+
+74
+00:04:31,000 --> 00:04:33,000
+probably going to be part of a cloud service.
+
+75
+00:04:34,000 --> 00:04:38,000
+Now, the other two confuses a lot of folks.
+
+76
+00:04:38,000 --> 00:04:41,000
+And I'll tell you the difference between them, because as I go through them, they're going to sound
+
+77
+00:04:41,000 --> 00:04:42,000
+alike.
+
+78
+00:04:42,000 --> 00:04:50,000
+Unified threat management systems are this this, by the way, is is this one this is an NDF w.
+
+79
+00:04:51,000 --> 00:04:55,000
+So if you go to Sonicwall and you look up Sonicwall firewalls, you'll see this this big across the
+
+80
+00:04:55,000 --> 00:04:58,000
+top next generation firewalls.
+
+81
+00:04:58,000 --> 00:04:59,000
+But what exactly is this one now?
+
+82
+00:04:59,000 --> 00:05:00,000
+Utms.
+
+83
+00:05:00,000 --> 00:05:07,000
+This is a great this is a big comprehensive solution that includes things like antivirus, anti-spyware,
+
+84
+00:05:07,000 --> 00:05:11,000
+firewalls, intrusion detections, preventions, and content filtering.
+
+85
+00:05:12,000 --> 00:05:13,000
+They're easy to use.
+
+86
+00:05:13,000 --> 00:05:14,000
+They're very.
+
+87
+00:05:14,000 --> 00:05:20,000
+They come pre-built with many policies ideal for small to mid sized business.
+
+88
+00:05:20,000 --> 00:05:22,000
+Now it's going to sound the same.
+
+89
+00:05:22,000 --> 00:05:24,000
+Okay, I'm just giving you a heads up now.
+
+90
+00:05:24,000 --> 00:05:28,000
+Far more advanced than traditional firewalls include functionalities.
+
+91
+00:05:28,000 --> 00:05:29,000
+Deep packet inspection.
+
+92
+00:05:29,000 --> 00:05:36,000
+They include intrusion prevention systems application awareness deep packet inspection.
+
+93
+00:05:36,000 --> 00:05:39,000
+They can actually see within the packet good threat intelligence.
+
+94
+00:05:39,000 --> 00:05:44,000
+They will also come with antivirus, anti-spyware firewall, intrusion detection, prevention system
+
+95
+00:05:44,000 --> 00:05:46,000
+and content filtering.
+
+96
+00:05:46,000 --> 00:05:50,000
+These two things sound very much alike.
+
+97
+00:05:50,000 --> 00:05:55,000
+Now, if you are a small business and you just want something to take out the box and you just plug
+
+98
+00:05:55,000 --> 00:05:58,000
+it in and it comes with a great set of policies.
+
+99
+00:05:58,000 --> 00:06:01,000
+UTM is easy to manage and it comes with most policies.
+
+100
+00:06:01,000 --> 00:06:07,000
+If you're looking for something more customizable to best match your business needs, then you get the
+
+101
+00:06:07,000 --> 00:06:08,000
+Ngfw.
+
+102
+00:06:08,000 --> 00:06:11,000
+These particular are the engine firewalls.
+
+103
+00:06:11,000 --> 00:06:18,000
+The engine firewalls are much more customizable, more robust than the Utms.
+
+104
+00:06:19,000 --> 00:06:20,000
+Okay, so keep that in mind.
+
+105
+00:06:20,000 --> 00:06:22,000
+The difference is customization.
+
+106
+00:06:22,000 --> 00:06:26,000
+One is just really more customization than others.
+
+107
+00:06:26,000 --> 00:06:27,000
+Okay.
+
+108
+00:06:27,000 --> 00:06:29,000
+Great discussion on firewalls.
+
+109
+00:06:29,000 --> 00:06:36,000
+Now I'm not sure if you guys remember the OSI model from previous classes, but one of the things that
+
+110
+00:06:36,000 --> 00:06:42,000
+we should be familiar with is where firewalls operate layer four and layer seven.
+
+111
+00:06:42,000 --> 00:06:49,000
+So layer four firewalls focus on data transport because they operate at the transport layer, the control
+
+112
+00:06:49,000 --> 00:06:50,000
+traffic based on TCP, UDP.
+
+113
+00:06:51,000 --> 00:06:54,000
+You got to remember something at the basic level.
+
+114
+00:06:54,000 --> 00:06:56,000
+All firewalls do one thing.
+
+115
+00:06:56,000 --> 00:07:03,000
+They block ports at the most conceptual level of firewall should block ports and ports operate at layer
+
+116
+00:07:03,000 --> 00:07:06,000
+four, your transport layer, not your network layer.
+
+117
+00:07:06,000 --> 00:07:08,000
+That's going to be IP.
+
+118
+00:07:09,000 --> 00:07:16,000
+Now, if the firewall can read into the application and stop certain traffic based on things like a
+
+119
+00:07:16,000 --> 00:07:22,000
+URL, this is going to be a layer four firewall inspects the content of the traffic there, make more
+
+120
+00:07:22,000 --> 00:07:26,000
+informed pretty much decisions, so keep that in mind.
+
+121
+00:07:26,000 --> 00:07:28,000
+Now application.
+
+122
+00:07:28,000 --> 00:07:34,000
+Anytime you hear the terms application firewall that is considered application firewall is considered
+
+123
+00:07:34,000 --> 00:07:35,000
+a layer seven.
+
+124
+00:07:35,000 --> 00:07:37,000
+Because remember layer seven is application.
+
+125
+00:07:37,000 --> 00:07:41,000
+But generally if the exam doesn't specify anything it says what layer is a firewall.
+
+126
+00:07:41,000 --> 00:07:42,000
+It's layer four.
+
+127
+00:07:42,000 --> 00:07:46,000
+Unless they say something like web application firewall.
+
+128
+00:07:46,000 --> 00:07:51,000
+Uh, by the way, proxy servers are also a type of a firewall.
+
+129
+00:07:51,000 --> 00:07:54,000
+And that's a proxy server is a layer seven device.
+
+130
+00:07:54,000 --> 00:07:58,000
+So keep that in mind in case you got a question about that on your test.
+

11 - Security Principles/014 VPN OB 3.2_en.srt

@@ -0,0 +1,672 @@
+1
+00:00:00,000 --> 00:00:03,000
+One very popular thing to do today is to work from home.
+
+2
+00:00:03,000 --> 00:00:07,000
+Maybe you're doing that right now, or maybe you're looking for a job to work from home.
+
+3
+00:00:07,000 --> 00:00:14,000
+The technology that allows work from home, that allows you to connect to a corporate network and utilize
+
+4
+00:00:14,000 --> 00:00:19,000
+all the corporate network resources, is called a VPN.
+
+5
+00:00:19,000 --> 00:00:20,000
+So what exactly is that?
+
+6
+00:00:21,000 --> 00:00:23,000
+Well, here's what it is.
+
+7
+00:00:23,000 --> 00:00:28,000
+A VPN is a technology that creates an encrypted connection over a less secure network.
+
+8
+00:00:28,000 --> 00:00:34,000
+It builds on top of an existing physical network, provides a connection mechanism between you and that
+
+9
+00:00:34,000 --> 00:00:38,000
+corporate network, generally across a public network such as the internet.
+
+10
+00:00:38,000 --> 00:00:41,000
+It allows secure connection between endpoints.
+
+11
+00:00:41,000 --> 00:00:48,000
+Basically, it's going to allow employees to securely access corporate intranet or internal resources
+
+12
+00:00:48,000 --> 00:00:50,000
+can securely connect.
+
+13
+00:00:50,000 --> 00:00:53,000
+It can even connect global offices together.
+
+14
+00:00:53,000 --> 00:00:56,000
+And it provides a connection over the public internet.
+
+15
+00:00:56,000 --> 00:00:58,000
+Now let me give you some good examples of this.
+
+16
+00:00:58,000 --> 00:01:01,000
+So I use VPNs quite often.
+
+17
+00:01:01,000 --> 00:01:03,000
+In fact, I work from home quite a lot.
+
+18
+00:01:03,000 --> 00:01:07,000
+When I'm at home, I want to be able to access the server at work.
+
+19
+00:01:07,000 --> 00:01:11,000
+That server at work has a database with all the students and the information for the school.
+
+20
+00:01:11,000 --> 00:01:16,000
+It has a file server for different documents that I need access to so I could stay home.
+
+21
+00:01:16,000 --> 00:01:20,000
+I connect to my workplace VPN and then it's like I'm sitting there.
+
+22
+00:01:20,000 --> 00:01:27,000
+I have access to every single thing in the actual network to have a bunch of locations.
+
+23
+00:01:27,000 --> 00:01:30,000
+For example, we have a location in Long Island, New York and Manhattan.
+
+24
+00:01:31,000 --> 00:01:33,000
+In New York City, Midtown Manhattan.
+
+25
+00:01:33,000 --> 00:01:40,000
+We connect these two locations with a VPN, so folks in Manhattan can share data with folks in Long
+
+26
+00:01:40,000 --> 00:01:41,000
+Island.
+
+27
+00:01:41,000 --> 00:01:43,000
+So VPNs are pretty robust.
+
+28
+00:01:43,000 --> 00:01:49,000
+You can use it as a user access VPN, like I'm using it to connect to my workplace, or you can use
+
+29
+00:01:49,000 --> 00:01:51,000
+it to connect different sites together.
+
+30
+00:01:51,000 --> 00:01:52,000
+Now.
+
+31
+00:01:54,000 --> 00:01:55,000
+Take a look at this here.
+
+32
+00:01:55,000 --> 00:01:58,000
+This here is called a site to site VPN.
+
+33
+00:01:58,000 --> 00:01:59,000
+This is like site one.
+
+34
+00:01:59,000 --> 00:02:02,000
+Could be like our new Manhattan site.
+
+35
+00:02:02,000 --> 00:02:05,000
+Site two could be like our Long Island site.
+
+36
+00:02:05,000 --> 00:02:09,000
+And notice it's going across the internet utilizing VPN devices.
+
+37
+00:02:09,000 --> 00:02:11,000
+What would you say would do that?
+
+38
+00:02:11,000 --> 00:02:14,000
+This is what we use to do our VPN.
+
+39
+00:02:14,000 --> 00:02:16,000
+Our Sonicwall is our VPN buddy.
+
+40
+00:02:16,000 --> 00:02:21,000
+We set up the VPN on this device, and I'm going to go through some of the technology that this thing
+
+41
+00:02:21,000 --> 00:02:22,000
+uses.
+
+42
+00:02:22,000 --> 00:02:29,000
+This thing uses IPsec is what it utilizes to create a tunnel between the two endpoints.
+
+43
+00:02:29,000 --> 00:02:32,000
+And we'll describe what that is coming up in a few minutes.
+
+44
+00:02:32,000 --> 00:02:33,000
+So.
+
+45
+00:02:33,000 --> 00:02:37,000
+This type of VPN is a virtual point to point connection.
+
+46
+00:02:38,000 --> 00:02:45,000
+All right through and it encapsulate the data, virtual encapsulation of the data to the untrusted internet.
+
+47
+00:02:45,000 --> 00:02:47,000
+So it's all encrypted.
+
+48
+00:02:47,000 --> 00:02:48,000
+How does it do it?
+
+49
+00:02:48,000 --> 00:02:50,000
+Well, it does it by tunnelling.
+
+50
+00:02:51,000 --> 00:02:51,000
+All right.
+
+51
+00:02:51,000 --> 00:02:56,000
+Tunneling means that it encapsulate all the packets inside of something else.
+
+52
+00:02:57,000 --> 00:03:00,000
+When it comes to tunneling, they're basically two tunnels.
+
+53
+00:03:00,000 --> 00:03:06,000
+VPNs utilizes in today's world to transport confidential companies data.
+
+54
+00:03:06,000 --> 00:03:13,000
+We're going to utilize either a TLS tunnel or we're going to be using L2, TCP with IPsec tunnels.
+
+55
+00:03:13,000 --> 00:03:14,000
+All right.
+
+56
+00:03:14,000 --> 00:03:17,000
+Those are going to be the two tunnels that we're going to be needing to know.
+
+57
+00:03:19,000 --> 00:03:26,000
+So the first thing I want to show you is what's called an LL2MLS tunnel or SSL tunnels.
+
+58
+00:03:26,000 --> 00:03:33,000
+These are tunnels or tunnels that are set up utilizing TLS, SSL, the operator layer four of the OSI
+
+59
+00:03:33,000 --> 00:03:34,000
+model.
+
+60
+00:03:34,000 --> 00:03:40,000
+Now, if you remember from cryptography or if you haven't watched that section yet, go through it.
+
+61
+00:03:40,000 --> 00:03:43,000
+In cryptography, I go through the whole SSL handshake with you.
+
+62
+00:03:43,000 --> 00:03:44,000
+It's very secure.
+
+63
+00:03:44,000 --> 00:03:47,000
+We are using SSL all the time.
+
+64
+00:03:47,000 --> 00:03:50,000
+Every website you go to is protected with SSL.
+
+65
+00:03:50,000 --> 00:03:56,000
+What we're doing is we're encapsulating the VPN traffic or tunneling it into an SSL.
+
+66
+00:03:56,000 --> 00:03:59,000
+Now we're going to use this for encryption.
+
+67
+00:03:59,000 --> 00:04:01,000
+No need to open any additional ports.
+
+68
+00:04:01,000 --> 00:04:05,000
+Mostly use on user access VPN.
+
+69
+00:04:05,000 --> 00:04:06,000
+Now what does that mean.
+
+70
+00:04:06,000 --> 00:04:11,000
+These are going to be VPNs that you use to access a corporate network, not necessarily between site
+
+71
+00:04:11,000 --> 00:04:19,000
+to site, like my Manhattan location to our Long Island location, maybe just a website or access to
+
+72
+00:04:19,000 --> 00:04:26,000
+a client that needs access to a client that needs to be installed, something like OpenVPN we also use
+
+73
+00:04:26,000 --> 00:04:29,000
+as a client, but things like Sonicwall.
+
+74
+00:04:30,000 --> 00:04:32,000
+Has SSL based VPNs.
+
+75
+00:04:32,000 --> 00:04:35,000
+And with that, I'm going to show you guys what that looks like.
+
+76
+00:04:35,000 --> 00:04:39,000
+There's a link there that you guys can try that I have already opened for you.
+
+77
+00:04:39,000 --> 00:04:41,000
+So when you went to that link.
+
+78
+00:04:42,000 --> 00:04:43,000
+Uh, I want to show you.
+
+79
+00:04:43,000 --> 00:04:44,000
+Oh, here we go.
+
+80
+00:04:44,000 --> 00:04:46,000
+So when you guys went to that link.
+
+81
+00:04:48,000 --> 00:04:50,000
+This is a demo of their SSL based VPN.
+
+82
+00:04:50,000 --> 00:04:55,000
+So you would just view the demo and it's going to log you into the VPN.
+
+83
+00:04:55,000 --> 00:04:58,000
+So this is actually what what it looks like.
+
+84
+00:04:58,000 --> 00:05:00,000
+It doesn't want to work here for us.
+
+85
+00:05:00,000 --> 00:05:03,000
+Hopefully this works for us.
+
+86
+00:05:04,000 --> 00:05:06,000
+All right demo let's log in.
+
+87
+00:05:06,000 --> 00:05:07,000
+You just demo.
+
+88
+00:05:07,000 --> 00:05:08,000
+And the password is like password.
+
+89
+00:05:08,000 --> 00:05:10,000
+It puts it there for you.
+
+90
+00:05:10,000 --> 00:05:11,000
+So this is a VPN.
+
+91
+00:05:11,000 --> 00:05:13,000
+This is an SSL based VPN.
+
+92
+00:05:13,000 --> 00:05:18,000
+And basically I have access to things like a file share on their network.
+
+93
+00:05:18,000 --> 00:05:21,000
+And I can go in and I can access particular files.
+
+94
+00:05:21,000 --> 00:05:25,000
+As you can see, uh, I can go in and, um.
+
+95
+00:05:26,000 --> 00:05:27,000
+What else more we have here.
+
+96
+00:05:27,000 --> 00:05:30,000
+RDP to a particular computer.
+
+97
+00:05:30,000 --> 00:05:33,000
+Let's say we know what is going to log me into one of their systems.
+
+98
+00:05:33,000 --> 00:05:37,000
+So now look, I'm logging in to a system on their network.
+
+99
+00:05:38,000 --> 00:05:40,000
+This is all done through the web browser, right?
+
+100
+00:05:40,000 --> 00:05:42,000
+This is all done.
+
+101
+00:05:42,000 --> 00:05:43,000
+This is a computer.
+
+102
+00:05:43,000 --> 00:05:43,000
+It's already logged in.
+
+103
+00:05:43,000 --> 00:05:45,000
+Is this that screen?
+
+104
+00:05:45,000 --> 00:05:45,000
+See?
+
+105
+00:05:46,000 --> 00:05:50,000
+Yeah, it's a really old system that Sonic was given the demo on old server here.
+
+106
+00:05:50,000 --> 00:05:52,000
+So let me close this out.
+
+107
+00:05:53,000 --> 00:05:55,000
+So you can access Outlook Web access.
+
+108
+00:05:55,000 --> 00:05:58,000
+So it's just a demo that you can set up.
+
+109
+00:05:58,000 --> 00:06:00,000
+Now this is great.
+
+110
+00:06:00,000 --> 00:06:05,000
+If you set up a VPN like this, there's really nothing for no one to install.
+
+111
+00:06:05,000 --> 00:06:11,000
+It's heavily secured because it runs on TLS, which is pretty much the standards of all internet security.
+
+112
+00:06:11,000 --> 00:06:17,000
+Now let's talk of another kind of implementation we can implement.
+
+113
+00:06:17,000 --> 00:06:20,000
+And that's going to be what's called L2 Tpns.
+
+114
+00:06:20,000 --> 00:06:25,000
+L2 Tpns are layer two tunneling protocol.
+
+115
+00:06:25,000 --> 00:06:32,000
+These are kind of VPNs that were basically a hybrid of what was called L2 f and an older one called
+
+116
+00:06:32,000 --> 00:06:32,000
+PCP.
+
+117
+00:06:33,000 --> 00:06:34,000
+It's basically a point to point tunnel.
+
+118
+00:06:34,000 --> 00:06:40,000
+And it utilizes something called IPsec in order to encrypt your data, which we'll talk about in a minute.
+
+119
+00:06:40,000 --> 00:06:47,000
+It supports all types of radius are used on like windows boxes or Texas for, uh, Cisco boxes.
+
+120
+00:06:47,000 --> 00:06:51,000
+Now, IPsec is something you want to be familiar with for your exam.
+
+121
+00:06:51,000 --> 00:06:58,000
+Instead of using something such as TLS to secure your VPN, you can use IPsec.
+
+122
+00:06:58,000 --> 00:07:01,000
+IPsec is a standalone VPN protocol.
+
+123
+00:07:01,000 --> 00:07:09,000
+It's the main security anytime you set up L2tpv3, L2, TCP based VPNs, which you could do on my Sonicwall,
+
+124
+00:07:09,000 --> 00:07:11,000
+you're going to use IPsec.
+
+125
+00:07:11,000 --> 00:07:16,000
+IPsec comes in a variety of different components that you want to be familiar with for your exam.
+
+126
+00:07:16,000 --> 00:07:18,000
+If you're asking, what the hell is all this?
+
+127
+00:07:18,000 --> 00:07:26,000
+Well, when you set it up on the firewall on your VPN devices, particularly things like VPN concentrators,
+
+128
+00:07:26,000 --> 00:07:32,000
+when you set these things up, like on a VPN concentrator, especially IPsec, you have to determine,
+
+129
+00:07:32,000 --> 00:07:35,000
+do you want to set it up with RH or ESP?
+
+130
+00:07:35,000 --> 00:07:40,000
+Ideally, you'll do both RH if you configure this, provides authentication.
+
+131
+00:07:41,000 --> 00:07:44,000
+Integrity and non-repudiation of the data.
+
+132
+00:07:44,000 --> 00:07:48,000
+That's important because you don't want anybody to log in authentication.
+
+133
+00:07:48,000 --> 00:07:52,000
+You want to check if the data was modified and you want to be verified where the data is coming from.
+
+134
+00:07:53,000 --> 00:07:57,000
+E does not support, uh, encryption of the data.
+
+135
+00:07:57,000 --> 00:08:02,000
+It doesn't support confidentiality of data that's going to be encapsulating security payload.
+
+136
+00:08:02,000 --> 00:08:03,000
+So make sure you enable both boxes.
+
+137
+00:08:03,000 --> 00:08:06,000
+In fact, when you set up a VPN, these two are enabled by default.
+
+138
+00:08:06,000 --> 00:08:16,000
+Now also when you set up these kinds of firewalls, uh, VPNs, especially in IPsec, it runs in two
+
+139
+00:08:16,000 --> 00:08:19,000
+modes tunnel mode and transport mode.
+
+140
+00:08:19,000 --> 00:08:20,000
+In tunnel mode.
+
+141
+00:08:20,000 --> 00:08:25,000
+What's happening here is that it's it's protecting the IP header.
+
+142
+00:08:25,000 --> 00:08:29,000
+Notice this green box right here the IP header I could just highlight it.
+
+143
+00:08:29,000 --> 00:08:34,000
+It protects the IP header and trailer and the payload being the data.
+
+144
+00:08:35,000 --> 00:08:43,000
+It encapsulates everything an IP header includes, like the source IP and destination IP in transport
+
+145
+00:08:43,000 --> 00:08:45,000
+mode is just the payload that's being detected.
+
+146
+00:08:45,000 --> 00:08:47,000
+The final destination is visible.
+
+147
+00:08:47,000 --> 00:08:55,000
+So if you're going across a network where you control all the routers so it can encrypt and decrypt
+
+148
+00:08:55,000 --> 00:08:59,000
+the packet at every one of the routers, then it's okay to use tunnel mode.
+
+149
+00:08:59,000 --> 00:09:03,000
+But if it has to go across a network that you can't control, you're probably going to set it up in
+
+150
+00:09:03,000 --> 00:09:05,000
+transport mode.
+
+151
+00:09:05,000 --> 00:09:06,000
+Now.
+
+152
+00:09:07,000 --> 00:09:10,000
+When it comes to setting up a VPN.
+
+153
+00:09:10,000 --> 00:09:12,000
+In today's world.
+
+154
+00:09:12,000 --> 00:09:18,000
+As of right now, as I speak to you, more and more VPNs are being deployed with TLS setup, and the
+
+155
+00:09:18,000 --> 00:09:23,000
+reason for that is because TLS doesn't require you to open a bunch of ports.
+
+156
+00:09:23,000 --> 00:09:29,000
+Like if you want to set up an L2, TCP based VPN, it's much easier to configure and more familiar to
+
+157
+00:09:29,000 --> 00:09:30,000
+users.
+
+158
+00:09:30,000 --> 00:09:35,000
+And just like you saw with the Sonicwall, you could pretty much run it off of your browser versus L2.
+
+159
+00:09:35,000 --> 00:09:40,000
+TCP based VPNs almost always have to have you install a client on the machine.
+
+160
+00:09:40,000 --> 00:09:43,000
+That client needs to be configured.
+
+161
+00:09:43,000 --> 00:09:49,000
+Different types of L2, TCP, or VPN keys needs to be set up on the machine, so it's much more of an
+
+162
+00:09:49,000 --> 00:09:54,000
+administrative work if you control the machines like the clients, like the clients that people are
+
+163
+00:09:54,000 --> 00:09:57,000
+using at home is owned by the company.
+
+164
+00:09:57,000 --> 00:09:59,000
+The company sets it up and they can't do anything on that machine.
+
+165
+00:09:59,000 --> 00:10:00,000
+But companies work.
+
+166
+00:10:00,000 --> 00:10:03,000
+Then it's probably okay to use an L2, TCP based VPN.
+
+167
+00:10:03,000 --> 00:10:10,000
+If not, if people are working from home and they're utilizing their own machine, the best thing to
+
+168
+00:10:10,000 --> 00:10:14,000
+do is use a TLS or SSL VPN.
+

11 - Security Principles/015 SD-WAN OB 3.2_en.srt

@@ -0,0 +1,228 @@
+1
+00:00:00,000 --> 00:00:04,000
+In today's world, networking is becoming crazy complex.
+
+2
+00:00:04,000 --> 00:00:10,000
+You see, back in the days when you worked in a large network, you had generally one data center that
+
+3
+00:00:10,000 --> 00:00:14,000
+the company controlled and all the other branch offices would connect to it.
+
+4
+00:00:15,000 --> 00:00:18,000
+But today it's a lot complex.
+
+5
+00:00:18,000 --> 00:00:19,000
+And I want to show you a diagram.
+
+6
+00:00:20,000 --> 00:00:25,000
+Now I want you guys to forget all the connection into the cloud for now.
+
+7
+00:00:25,000 --> 00:00:30,000
+I want you guys just to look at this thing here with just where it says data center.
+
+8
+00:00:30,000 --> 00:00:36,000
+Back in the days when we had set up networks, what we would do is we would just have every branch would
+
+9
+00:00:36,000 --> 00:00:43,000
+connect to the data center, like this branch here would connect to the data center, this branch data
+
+10
+00:00:43,000 --> 00:00:45,000
+center, this branch data center, this branch, this branch, this branch.
+
+11
+00:00:46,000 --> 00:00:48,000
+And everything was like a centralized thing.
+
+12
+00:00:49,000 --> 00:00:52,000
+But now it's all over the place.
+
+13
+00:00:52,000 --> 00:01:00,000
+Right now the applications are in the cloud all over, split across different cloud based systems.
+
+14
+00:01:00,000 --> 00:01:06,000
+The applications are stored partially in the data center and partially in the cloud.
+
+15
+00:01:06,000 --> 00:01:08,000
+Now branch offices are going to the cloud.
+
+16
+00:01:08,000 --> 00:01:10,000
+They're also going to the data center.
+
+17
+00:01:10,000 --> 00:01:12,000
+Some of the app is in the cloud.
+
+18
+00:01:12,000 --> 00:01:14,000
+Some of it is in the data center.
+
+19
+00:01:14,000 --> 00:01:17,000
+Some of the policies in the data center, some of the policy in the cloud.
+
+20
+00:01:17,000 --> 00:01:20,000
+This can get complex very fast, very quick.
+
+21
+00:01:20,000 --> 00:01:22,000
+So there's a couple of things here.
+
+22
+00:01:23,000 --> 00:01:26,000
+Let's talk about software defined networking.
+
+23
+00:01:26,000 --> 00:01:35,000
+Software defined networking is basically to simplify a branch office networking and get optimal application
+
+24
+00:01:35,000 --> 00:01:36,000
+performance.
+
+25
+00:01:36,000 --> 00:01:42,000
+It provides a centralized control function to securely and intelligently intelligently transfer network
+
+26
+00:01:42,000 --> 00:01:43,000
+traffic.
+
+27
+00:01:43,000 --> 00:01:46,000
+What I need you guys to know for your exam is this.
+
+28
+00:01:46,000 --> 00:01:52,000
+This thing overlays your network and what it does is that it's going to allow for efficient network,
+
+29
+00:01:52,000 --> 00:02:01,000
+um, traffic that allows applications to be used correctly and efficiently, making data routing more
+
+30
+00:02:01,000 --> 00:02:02,000
+efficient.
+
+31
+00:02:02,000 --> 00:02:06,000
+You see, if we don't have this, the data routing would be all over the.
+
+32
+00:02:06,000 --> 00:02:10,000
+They would have to go and pull some of the data from the cloud and pull it, some of it from the data
+
+33
+00:02:10,000 --> 00:02:10,000
+center.
+
+34
+00:02:11,000 --> 00:02:17,000
+Another thing you want to have in here when you set this up is sassy SASE.
+
+35
+00:02:17,000 --> 00:02:20,000
+It stands for Secure Access Service Edge.
+
+36
+00:02:20,000 --> 00:02:22,000
+This is a cloud native network and architect.
+
+37
+00:02:22,000 --> 00:02:26,000
+It combines network security functions with Wan capability.
+
+38
+00:02:26,000 --> 00:02:31,000
+It merges the SD SD-Wan capabilities with security services.
+
+39
+00:02:31,000 --> 00:02:32,000
+What is it doing?
+
+40
+00:02:32,000 --> 00:02:38,000
+Well, this is going to allow those tunnels that you see between those connections to become encrypted,
+
+41
+00:02:38,000 --> 00:02:41,000
+to connect them to cloud based services, to make them more efficient.
+
+42
+00:02:41,000 --> 00:02:44,000
+So let's go back here and talk more about this.
+
+43
+00:02:45,000 --> 00:02:47,000
+So when you set up things like SD-Wan.
+
+44
+00:02:47,000 --> 00:02:53,000
+SD-Wan is going to allow you to efficiently utilize all types of network connections.
+
+45
+00:02:55,000 --> 00:02:57,000
+All types of multiple connections.
+
+46
+00:02:57,000 --> 00:03:02,000
+So imagine you're sitting in this branch office and you need to access some of the applications in the
+
+47
+00:03:02,000 --> 00:03:04,000
+cloud, some of it in the data center.
+
+48
+00:03:04,000 --> 00:03:06,000
+Applications can even be split apart.
+
+49
+00:03:06,000 --> 00:03:10,000
+Now you have SD-Wan, comes in, sets up a variety.
+
+50
+00:03:10,000 --> 00:03:16,000
+It's it's a type of software defined networking or Sdn that allows it.
+
+51
+00:03:16,000 --> 00:03:21,000
+It's basically a higher controller level that sits over all these connections and determines the best,
+
+52
+00:03:21,000 --> 00:03:25,000
+most efficient and secure path to get through the data.
+
+53
+00:03:25,000 --> 00:03:27,000
+If you're wondering, why do we do all this?
+
+54
+00:03:27,000 --> 00:03:34,000
+Well, imagine right now how complex networking is without getting too technical and in depth into it,
+
+55
+00:03:34,000 --> 00:03:36,000
+because you don't need it basically for your exam.
+
+56
+00:03:36,000 --> 00:03:38,000
+What this really is going to allow you to do?
+
+57
+00:03:39,000 --> 00:03:44,000
+All the apps the company is using is is going to make it faster and more secure to use.
+

11 - Security Principles/016 Selecting Effective Controls OB 3.2_en.srt

@@ -0,0 +1,400 @@
+1
+00:00:00,000 --> 00:00:07,000
+So far we have seen quite a lot of different security security network appliances that we can implement.
+
+2
+00:00:07,000 --> 00:00:13,000
+But there's a couple of things that we got to think about selecting the effective controls, selecting
+
+3
+00:00:13,000 --> 00:00:21,000
+the right amount of security to apply to a network, selecting the right device that we have to put
+
+4
+00:00:21,000 --> 00:00:28,000
+in our network, selecting the right configuration that we put onto these devices.
+
+5
+00:00:28,000 --> 00:00:31,000
+So in this video we want to talk about selecting effective controls.
+
+6
+00:00:31,000 --> 00:00:36,000
+What is the process of identifying and implementing the right security measure for your organization.
+
+7
+00:00:37,000 --> 00:00:40,000
+Now this is going to get very complex.
+
+8
+00:00:40,000 --> 00:00:43,000
+Every single organization is built differently.
+
+9
+00:00:43,000 --> 00:00:45,000
+Every organization has assets of different value.
+
+10
+00:00:45,000 --> 00:00:48,000
+Every organization values assets differently.
+
+11
+00:00:48,000 --> 00:00:53,000
+Some organization doesn't have much value on their data on their.
+
+12
+00:00:53,000 --> 00:00:54,000
+Because you know why?
+
+13
+00:00:54,000 --> 00:00:56,000
+Well, maybe some of the employee data.
+
+14
+00:00:56,000 --> 00:01:00,000
+But the company's main data don't really put a value on because it's all public knowledge.
+
+15
+00:01:00,000 --> 00:01:01,000
+Think of like a.
+
+16
+00:01:02,000 --> 00:01:03,000
+Like something on.
+
+17
+00:01:03,000 --> 00:01:04,000
+If you're managing Wikipedia.
+
+18
+00:01:04,000 --> 00:01:08,000
+All the data that Wikipedia have, it's pretty much public data.
+
+19
+00:01:08,000 --> 00:01:13,000
+The only thing that's private is their credit card information that they collect and the employee resources.
+
+20
+00:01:13,000 --> 00:01:16,000
+But if you work for the military, it's vastly different.
+
+21
+00:01:16,000 --> 00:01:23,000
+Everything there, most of it, especially like in the NSA, it's all private or top secret information
+
+22
+00:01:23,000 --> 00:01:24,000
+versus Wikipedia.
+
+23
+00:01:24,000 --> 00:01:31,000
+90% of what they collect is public data, vast differences between organization and what they value,
+
+24
+00:01:31,000 --> 00:01:33,000
+vast differences on how they value it.
+
+25
+00:01:33,000 --> 00:01:38,000
+So when you select security controls, these are things you have to consider.
+
+26
+00:01:38,000 --> 00:01:42,000
+And that starts with a risk assessment starts with a thorough risk assessment.
+
+27
+00:01:42,000 --> 00:01:49,000
+What exactly identify what exact risks do you guys face and how do you want to mitigate those potential
+
+28
+00:01:49,000 --> 00:01:50,000
+threats?
+
+29
+00:01:51,000 --> 00:01:54,000
+I mentioned at the beginning of this course Layered Defense.
+
+30
+00:01:55,000 --> 00:01:57,000
+You have to implement a variety of different controls.
+
+31
+00:01:57,000 --> 00:01:59,000
+No single point.
+
+32
+00:02:00,000 --> 00:02:00,000
+All right.
+
+33
+00:02:00,000 --> 00:02:01,000
+No single.
+
+34
+00:02:01,000 --> 00:02:02,000
+Everything needs layered.
+
+35
+00:02:02,000 --> 00:02:03,000
+Layered approach.
+
+36
+00:02:03,000 --> 00:02:07,000
+And what you should be consideration is what are the different layers.
+
+37
+00:02:07,000 --> 00:02:08,000
+How are you going to layer them?
+
+38
+00:02:08,000 --> 00:02:13,000
+You may have cameras in different locations and maybe you need security guard and cameras.
+
+39
+00:02:13,000 --> 00:02:19,000
+Maybe you you have particularly, uh, doors that are built a certain way and you don't have security
+
+40
+00:02:19,000 --> 00:02:21,000
+guards, things to consider.
+
+41
+00:02:21,000 --> 00:02:28,000
+But if there's one thing I know, but living long enough in this world, a lot of times the consideration
+
+42
+00:02:28,000 --> 00:02:31,000
+may come to selecting the right controls for your business.
+
+43
+00:02:31,000 --> 00:02:36,000
+Unfortunately, almost always comes back to money.
+
+44
+00:02:37,000 --> 00:02:38,000
+Evaluating the course.
+
+45
+00:02:38,000 --> 00:02:42,000
+What is the cost of implementing a control against the potential risk benefit that is given?
+
+46
+00:02:43,000 --> 00:02:48,000
+If there's one thing we're going to talk about when we get to a risk assessment is can't spend $10,
+
+47
+00:02:48,000 --> 00:02:51,000
+protecting $5 doesn't make sense.
+
+48
+00:02:51,000 --> 00:02:58,000
+A lot of times, the control that we select, the kind of firewall that we implement, the kind of IDs
+
+49
+00:02:58,000 --> 00:03:06,000
+that we put into place, um, whether we have a load balancer, the type of VPN we set up, a lot of
+
+50
+00:03:06,000 --> 00:03:08,000
+these things are going to be determined basically.
+
+51
+00:03:08,000 --> 00:03:09,000
+And do you have the budget for it?
+
+52
+00:03:09,000 --> 00:03:10,000
+Yeah.
+
+53
+00:03:10,000 --> 00:03:16,000
+We all want the latest and greatest engine firewall, but we can't afford it because it's super expensive.
+
+54
+00:03:16,000 --> 00:03:19,000
+So you have to be able to understand that cost is a big thing.
+
+55
+00:03:19,000 --> 00:03:24,000
+Another thing that you have to really keep in consideration is regulation.
+
+56
+00:03:24,000 --> 00:03:30,000
+Certain regulations will make it mandatory for you to encrypt and store certain data in a certain way.
+
+57
+00:03:30,000 --> 00:03:35,000
+For example, in HIPAA regulation, you're going to have to secure a certain medical records.
+
+58
+00:03:35,000 --> 00:03:37,000
+If you follow PCI compliance.
+
+59
+00:03:37,000 --> 00:03:41,000
+This is a kind of a standard that you're going to have to encrypt credit card information.
+
+60
+00:03:41,000 --> 00:03:47,000
+So the controls you select their technical stability, assessing the technical capability of feasibilities
+
+61
+00:03:47,000 --> 00:03:47,000
+controls.
+
+62
+00:03:47,000 --> 00:03:49,000
+Can you even implement it?
+
+63
+00:03:49,000 --> 00:03:55,000
+Does your environment even support a particular control that you want to implement every time you implement
+
+64
+00:03:55,000 --> 00:03:59,000
+a particular risk, maybe a new kind of firewall or a load balancer or something?
+
+65
+00:04:00,000 --> 00:04:07,000
+You know it identifies more risk into the organization's control, should be directly relevant for the
+
+66
+00:04:07,000 --> 00:04:09,000
+risk that they're implementing does.
+
+67
+00:04:10,000 --> 00:04:16,000
+And the other thing is that if you implement this control, does it result in reducing a particular
+
+68
+00:04:16,000 --> 00:04:18,000
+risk, the risk of hackers breaking in?
+
+69
+00:04:18,000 --> 00:04:19,000
+So you put a firewall in place.
+
+70
+00:04:19,000 --> 00:04:21,000
+Does the firewall address that?
+
+71
+00:04:22,000 --> 00:04:27,000
+The risk of a worm spreading around inside of a network.
+
+72
+00:04:27,000 --> 00:04:28,000
+Does the firewall address that?
+
+73
+00:04:28,000 --> 00:04:32,000
+Well, network firewalls generally is not going to stop a worm from spreading around inside of the network
+
+74
+00:04:32,000 --> 00:04:33,000
+if it's already there.
+
+75
+00:04:33,000 --> 00:04:35,000
+Host based firewalls does.
+
+76
+00:04:35,000 --> 00:04:42,000
+So you have to make sure that the what you're implementing addresses that risk stability and adaptability.
+
+77
+00:04:42,000 --> 00:04:44,000
+Controls should be able to scale with the company.
+
+78
+00:04:44,000 --> 00:04:52,000
+Don't buy a particular appliance, and it's only good for 100 users in the company right now is at 80,
+
+79
+00:04:52,000 --> 00:04:53,000
+and it's going to go to 200in a few months.
+
+80
+00:04:53,000 --> 00:04:54,000
+That's not scalable.
+
+81
+00:04:55,000 --> 00:05:01,000
+Always evaluate regular monitor, review and update these types of controls for effectiveness is going
+
+82
+00:05:01,000 --> 00:05:02,000
+to be important.
+
+83
+00:05:02,000 --> 00:05:04,000
+Monitor your environment.
+
+84
+00:05:05,000 --> 00:05:15,000
+If there's one thing we know in it that sometimes I can't stand is the constant nonstop change of technology,
+
+85
+00:05:15,000 --> 00:05:21,000
+such as different kinds of software, hardware, different kinds of attacks that comes out, pushes
+
+86
+00:05:21,000 --> 00:05:26,000
+us to consistently modify and change the technology that we work in.
+
+87
+00:05:27,000 --> 00:05:28,000
+Our environments will change.
+
+88
+00:05:28,000 --> 00:05:35,000
+Whatever it secure environment that you're working in right now will not will cease to exist and completely
+
+89
+00:05:35,000 --> 00:05:38,000
+do a major change.
+
+90
+00:05:39,000 --> 00:05:45,000
+I guarantee you, within the next 5 to 8 years on on a general rotation, every 5 to 8 years, the whole
+
+91
+00:05:45,000 --> 00:05:46,000
+thing will change.
+
+92
+00:05:46,000 --> 00:05:51,000
+All technology changes, all the operating systems will change, all the devices will change.
+
+93
+00:05:51,000 --> 00:05:55,000
+For example, Sonicwall is not going to allow us to keep using this particular device because they're
+
+94
+00:05:55,000 --> 00:05:56,000
+going to say it's outdated.
+
+95
+00:05:56,000 --> 00:05:57,000
+We'll have to get a new one.
+
+96
+00:05:58,000 --> 00:06:04,000
+So the and a consistent changes is the control effective new attacks will come out.
+
+97
+00:06:04,000 --> 00:06:05,000
+And then what are you going to do.
+
+98
+00:06:05,000 --> 00:06:09,000
+You're going to have to update your devices, update your software.
+
+99
+00:06:09,000 --> 00:06:13,000
+If there's one thing that's a constant when it managing security.
+
+100
+00:06:13,000 --> 00:06:19,000
+One thing that's that's a constant when managing security uh, is change.
+

11 - Security Principles/017 Quick Quiz.html

@@ -0,0 +1,479 @@
+<!DOCTYPE html>
+<html lang="en">
+    <head>
+        <meta charset="UTF-8" />
+        <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+        <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+        <title>Quiz</title>
+        <style>
+            * {
+                font-family: system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Oxygen, Ubuntu, Cantarell,
+                    "Open Sans", "Helvetica Neue", sans-serif;
+                margin: 0;
+                padding: 0;
+                box-sizing: border-box;
+                font-size: 16px;
+            }
+
+            main {
+                padding-top: 48px;
+            }
+
+            :root {
+                --large-device-width: 850px;
+                --primary-color: #0f172a;
+                --secondary-color: #020617;
+                --primary-text-color: #c7d1dd;
+                --secondary-text-color: #061602;
+                --success-background: hsl(159, 82%, 24%);
+                --success-foreground: hsl(164, 86%, 16%);
+                --success: hsl(160, 84%, 39%);
+                --danger: #ef4444;
+                --warning: #f59e0b;
+                --info-background: hsl(218, 81%, 8%);
+                --info-foreground: hsl(217, 91%, 85%);
+                --border-color: #d1d7dc;
+                --check-box-size: 20px;
+                /* control the size */
+                --check-box-color: var(--info-foreground);
+                /* the active color */
+            }
+
+            body {
+                position: relative;
+                background-color: #020617;
+                color: var(--primary-text-color);
+            }
+
+            #score-stats-container {
+                position: fixed;
+                z-index: 10;
+                top: 0;
+                height: 40px;
+                width: 100%;
+                background-color: var(--info-background);
+
+                padding: 0px 16px;
+                color: var(--info-foreground);
+                font-weight: 600;
+                display: flex;
+                align-items: center;
+                justify-content: space-between;
+            }
+
+            #quiz-container {
+                border-radius: 8px;
+                display: flex;
+                gap: 16px;
+                flex-direction: column;
+            }
+
+            input[type="radio"] {
+                height: var(--check-box-size);
+                aspect-ratio: 1;
+                border: calc(var(--check-box-size) / 8) solid #939393;
+                padding: calc(var(--check-box-size) / 8);
+                background: radial-gradient(farthest-side, var(--check-box-color) 94%, #0000) 50%/0 0 no-repeat
+                    content-box;
+                border-radius: 50%;
+                outline-offset: calc(var(--check-box-size) / 10);
+                -webkit-appearance: none;
+                -moz-appearance: none;
+                appearance: none;
+                cursor: pointer;
+                font-size: inherit;
+                transition: 0.3s;
+            }
+
+            input[type="radio"]:checked {
+                border-color: var(--check-box-color);
+                background-size: 100% 100%;
+            }
+
+            input[type="radio"]:disabled {
+                background: linear-gradient(#939393 0 0) 50%/100% 20% no-repeat content-box;
+                opacity: 0.5;
+                cursor: not-allowed;
+            }
+
+            label {
+                display: inline-flex;
+                align-items: center;
+                gap: 10px;
+                cursor: pointer;
+                padding: 4px 6px;
+                border-radius: 4px;
+            }
+
+            @media (max-width: 767px) {
+                input[type="radio"],
+                label {
+                    cursor: default;
+                }
+
+                #quiz-container {
+                    margin-left: 8px;
+                    margin-right: 8px;
+                }
+            }
+
+            /* PC (Desktop devices) */
+            @media (min-width: 768px) {
+                body {
+                    display: flex;
+                    justify-content: center;
+                }
+
+                main {
+                    max-width: var(--large-device-width);
+                }
+
+                #score-stats-container {
+                    max-width: var(--large-device-width);
+                }
+
+                dialog {
+                    max-width: var(--large-device-width);
+                }
+            }
+
+            @media print {
+                input[type="radio"] {
+                    background: none !important;
+                    border-color: #939393 !important;
+                }
+
+                input[type="radio"]:checked {
+                    border-color: #939393 !important;
+                }
+            }
+
+            .question-lable {
+                display: flex;
+                align-items: center;
+                gap: 8px;
+            }
+
+            button {
+                -webkit-tap-highlight-color: transparent;
+                -webkit-touch-callout: none;
+                -webkit-user-select: none;
+                user-select: none;
+                outline: none;
+                position: relative;
+                overflow: hidden;
+                cursor: pointer;
+            }
+
+            .button {
+                background-color: var(--success-background);
+                border: none;
+                color: #f4f5f7;
+                opacity: 0.8;
+                font-size: 18px;
+                flex-grow: 1;
+                padding: 8px 16px;
+                border-radius: 8px;
+            }
+
+            .button:hover {
+                opacity: 1;
+            }
+
+            .explanation-btn {
+                border: none;
+                color: var(--success);
+                background-color: transparent;
+            }
+
+            #submit-button:active::after {
+                background-color: #ef4444;
+            }
+
+            .single-question-container {
+                background-color: var(--primary-color);
+                display: flex;
+                flex-direction: column;
+                gap: 8px;
+                padding: 16px;
+                border-radius: 8px;
+            }
+
+            #modal-content {
+                padding: 16px;
+                line-height: 24px;
+            }
+
+            dialog::backdrop {
+                background: rgba(0, 0, 0, 0.5);
+            }
+
+            dialog {
+                position: fixed;
+                border: 1px solid var(--border-color);
+                background-color: var(--primary-color);
+                color: rgb(240, 241, 248);
+                padding: 16px;
+                border-radius: 8px;
+                width: 80vw;
+                max-height: 80vh;
+                overflow: auto;
+                top: 50%;
+                left: 50%;
+                -webkit-transform: translateX(-50%) translateY(-50%);
+                -moz-transform: translateX(-50%) translateY(-50%);
+                -ms-transform: translateX(-50%) translateY(-50%);
+                transform: translateX(-50%) translateY(-50%);
+            }
+
+            #close-modal-btn {
+                position: absolute;
+                top: 4px;
+                right: 4px;
+                padding: 2px 8px;
+                border-radius: 2px;
+                border: none;
+                background-color: var(--danger);
+            }
+
+            .correct-answer label {
+                border: 2px solid var(--success);
+                width: 100%;
+            }
+
+            .incorrect-answer label {
+                border: 2px solid var(--danger);
+                width: 100%;
+            }
+
+            .options-container {
+                display: flex;
+                flex-direction: column;
+                gap: 4px;
+            }
+
+            #quiz-meta-container {
+                border-radius: 8px;
+                background-color: var(--primary-color);
+                margin-bottom: 12px;
+                padding: 8px;
+            }
+
+            #quiz-title {
+                text-align: center;
+                font-size: 24px;
+                margin-bottom: 8px;
+            }
+
+            #quiz-description {
+                line-height: 1.5;
+                padding: 2px 6px;
+            }
+        </style>
+    </head>
+
+    <body onload="main()">
+        <main>
+            <section id="quiz-meta-container">
+                <h1 id="quiz-title"></h1>
+                <p id="quiz-description"></p>
+            </section>
+            <section id="score-stats-container">
+                <div id="score-card">
+                    Score: <span id="current-score">999</span> of
+                    <span id="pass-percent">999%</span>
+                </div>
+                <div>Correct: <span id="correct-answers">999</span></div>
+                <div>Incorrect: <span id="wrong-answers">999</span></div>
+            </section>
+
+            <section id="quiz-container"></section>
+
+            <dialog id="modal" class="modal-container">
+                <div id="modal-content">
+                    <p id="modal-text"></p>
+                </div>
+            </dialog>
+        </main>
+
+        <script>
+            const quizData = {"quiz_id": 6180138, "quiz_description": null, "quiz_title": "Quick Quiz", "pass_percent": null, "questions": [{"_class": "assessment", "id": 74728886, "assessment_type": "multiple-choice", "prompt": {"question": "<p>An organization decides to implement a system that segregates its network into different segments based on the function and security level. What is this an example of?</p>", "relatedLectureIds": "", "feedbacks": ["", "This scenario exemplifies the implementation of Security zones. By segregating the network into different segments based on function and security level, the organization can apply appropriate security measures for each zone, thereby enhancing overall security and managing risks more effectively. This differs from Device placement, which is about the strategic positioning of physical devices, and Attack surface, which refers to the total number of points where an unauthorized user can try to enter data or extract data.", "", ""], "answers": ["<p>Device placement</p>", "<p>Security zones</p>", "<p>Attack surface</p>", "<p>Connectivity</p>"]}, "correct_response": ["b"], "section": "", "question_plain": "An organization decides to implement a system that segregates its network into different segments based on the function and security level. What is this an example of?", "related_lectures": []}, {"_class": "assessment", "id": 74728890, "assessment_type": "multiple-choice", "prompt": {"question": "<p>A company's network automatically shuts down its connection when a system failure is detected to prevent potential security breaches. What type of failure mode does this represent?</p>", "relatedLectureIds": "", "feedbacks": ["", "This scenario represents a Fail-closed failure mode. In a fail-closed setup, when a system failure is detected, the network automatically shuts down its connection, which prevents potential security breaches during the downtime. This contrasts with Fail-open, where the system remains operational even after detecting a failure, potentially exposing it to security risks.", "", ""], "answers": ["<p>Fail-open</p>", "<p>Fail-closed</p>", "<p>Active device attribute</p>", "<p>Inline device placement</p>"]}, "correct_response": ["b"], "section": "", "question_plain": "A company's network automatically shuts down its connection when a system failure is detected to prevent potential security breaches. What type of failure mode does this represent?", "related_lectures": []}, {"_class": "assessment", "id": 74728896, "assessment_type": "multiple-choice", "prompt": {"question": "<p>A company uses a technology that inspects incoming and outgoing network traffic and blocks potential threats based on a set of security rules. What is this technology?</p>", "relatedLectureIds": "", "feedbacks": ["", "This scenario describes an Intrusion Prevention System (IPS). An IPS monitors network traffic to detect and prevent identified threats, acting based on predefined security rules. This is distinct from a Proxy server, which acts as an intermediary for requests from clients, a Load balancer, which distributes network traffic across multiple servers, and a Jump server, used as a secure and controlled entry point to a remote network.", "", ""], "answers": ["<p>Proxy server</p>", "<p>Intrusion Prevention System (IPS)</p>", "<p>Load balancer</p>", "<p>Jump server</p>"]}, "correct_response": ["b"], "section": "", "question_plain": "A company uses a technology that inspects incoming and outgoing network traffic and blocks potential threats based on a set of security rules. What is this technology?", "related_lectures": []}, {"_class": "assessment", "id": 74728898, "assessment_type": "multiple-choice", "prompt": {"question": "<p>A large corporation employs a solution that allows its employees to securely access the company's internal network from remote locations. What does this represent?</p>", "relatedLectureIds": "", "feedbacks": ["", "", "This scenario represents the use of a Virtual Private Network (VPN). A VPN allows secure access to a private network over the internet, enabling employees to access internal network resources remotely while maintaining data security and privacy. This is different from general Remote access, which can include non-VPN methods, Tunneling, which is a broader concept often part of VPN technology, and SD-WAN, which is a more specific approach to managing wide-area networks.", ""], "answers": ["<p>Remote access</p>", "<p>Tunneling</p>", "<p>Virtual Private Network (VPN)</p>", "<p>Software-defined wide area network (SD-WAN)</p>"]}, "correct_response": ["c"], "section": "", "question_plain": "A large corporation employs a solution that allows its employees to securely access the company's internal network from remote locations. What does this represent?", "related_lectures": []}, {"_class": "assessment", "id": 74728906, "assessment_type": "multiple-choice", "prompt": {"question": "<p>To enhance network security, a company implements a switch that requires devices to be authenticated before they can access the network. What technology is being used?</p>", "relatedLectureIds": "", "feedbacks": ["This scenario describes the use of Port security with 802.1X. The 802.1X standard is used to control network access, requiring devices to be authenticated before they can access the network. This helps in preventing unauthorized devices from connecting to the network. EAP is a protocol used in network access authentication, but 802.1X specifically refers to the port-based network access control.", "", "", ""], "answers": ["<p>Port security with 802.1X</p>", "<p>EAP (Extensible Authentication Protocol)</p>", "<p>Firewall</p>", "<p>Jump server</p>"]}, "correct_response": ["a"], "section": "", "question_plain": "To enhance network security, a company implements a switch that requires devices to be authenticated before they can access the network. What technology is being used?", "related_lectures": []}]};
+            let correct = new Set();
+            let incorrect = new Set();
+            let totalNumberOfQuestions = 0;
+            const quizTitle = quizData.quiz_title;
+            const quizDescription = quizData.quiz_description;
+            const questionData = quizData.questions;
+            const passPercent = quizData.pass_percent;
+            const modalTextElement = document.getElementById("modal-text");
+            const quizContainerElement = document.getElementById("quiz-container");
+
+            const dialog = document.querySelector("dialog");
+            const showButton = document.getElementById("view-explanatin");
+            const closeButton = document.getElementById("close-modal-btn");
+            const quizTitleElement = document.getElementById("quiz-title");
+            const quizDescriptionElement = document.getElementById("quiz-description");
+
+            function main() {
+                // update quiz meta data
+                document.title = quizTitle;
+                quizTitleElement.innerHTML = quizTitle;
+                quizDescriptionElement.innerHTML = quizDescription;
+
+                const passPercentElement = document.getElementById("pass-percent");
+                passPercentElement.innerHTML = passPercent + "%";
+                totalNumberOfQuestions = questionData.length;
+                // shuffle the questionData to randomize the order of the questions
+                for (let i = questionData.length - 1; i > 0; i--) {
+                    const j = Math.floor(Math.random() * (i + 1));
+                    [questionData[i], questionData[j]] = [questionData[j], questionData[i]];
+                }
+
+                let formattedQuestions = questionData.map(formatSingleQuestionData);
+                updateScore();
+                // display the formattedQuestions
+                formattedQuestions.forEach((question, idx) => {
+                    renderSingleQuestion(question, idx + 1);
+                });
+            }
+
+            /**
+             * Formats the question data from the given QuizData object.
+             *
+             * @param {Object} singleQuizData - The singleQuizData object containing prompt and correct_response.
+             * @return {Object} The formatted question object with the following properties:
+             *   - id: The ID of the question.
+             *   - question: The text of the question.
+             *   - answers: The array of answer options.
+             *   - correctAnswer: The text of the correct answer.
+             *   - explanation: The explanation of the correct answer.
+             */
+            function formatSingleQuestionData(singleQuizData = null) {
+                const { prompt, correct_response, id } = singleQuizData;
+                const questionText = prompt.question;
+                const answers = prompt.answers;
+                const correctAnswer = correct_response[0];
+                const correctAnswerText = answers[correctAnswer.toLowerCase().charCodeAt(0) - 97];
+                const questionObj = {
+                    id: id,
+                    question: questionText,
+                    answers: answers,
+                    correctAnswer: correctAnswerText,
+                    explanation: prompt?.explanation || "",
+                };
+                return questionObj;
+            }
+
+            /**
+             * Renders a single question with its options and submit button.
+             *
+             * @param {Object} singleQuestionData - The data of the question to render.
+             * @param {number} rootIndex - The index of the question in the quiz.
+             * @return {void} return nothing.
+             */
+
+            const renderSingleQuestion = (singleQuestionData = {}, rootIndex = 1) => {
+                const { id, explanation, answers, correctAnswer, question } = singleQuestionData;
+                // shuffle the answers to randomize the order of the answers
+                for (let i = answers.length - 1; i > 0; i--) {
+                    const j = Math.floor(Math.random() * (i + 1));
+                    [answers[i], answers[j]] = [answers[j], answers[i]];
+                }
+                const optionsHTML = answers
+                    .map((option, index) => {
+                        const optionId = `${id}_${index}`;
+
+                        return `
+        <div class="question-lable">
+          <input type="radio" id="${optionId}" name="${"answer"}" value="${option}" />
+          <label for="${optionId}">${option}</label>
+        </div>
+      `;
+                    })
+
+                    .join("");
+
+                const container = document.createElement("div");
+                container.innerHTML = `
+        <form data-correct-answer="${correctAnswer}" data-question-id="${id}" class="single-question-container" onsubmit="submitButtonListener(event)">
+          <div style="display: flex;justify-content: space-between;">
+            <p style="font-weight: 600">Question ${rootIndex}:</p>
+            <button type="button" onclick="renderExplanation(event)" id="${`explanation-${id}`}" data-explanation="${explanation}" class="explanation-btn">View Explanation</button>
+          </div>
+          <p style="margin-bottom: 8px;line-height: 1.5">${question}</p>
+          <div class="options-container">
+            ${optionsHTML}
+          </div>
+          <div style="display: flex; gap: 8px;">
+            <button type="submit" id="submit-button" class="button">Submit</button>
+          </div>
+        </form>
+      `;
+                quizContainerElement.appendChild(container);
+            };
+
+            /**
+             * Updates the score on the page based on the number of correct and incorrect answers.
+             *
+             * @return {void} This function does not return a value.
+             */
+            function updateScore() {
+                const currentParcentageElement = document.getElementById("current-score");
+                const correctAnswerElement = document.getElementById("correct-answers");
+                const wrongAnswerElement = document.getElementById("wrong-answers");
+                correctAnswerElement.innerHTML = correct.size;
+                wrongAnswerElement.innerHTML = incorrect.size;
+                const score = Number((correct.size / totalNumberOfQuestions) * 100).toFixed(2);
+                currentParcentageElement.innerHTML = score;
+            }
+
+            /**
+             * Handles the event when the submit button is clicked.
+             *
+             * @param {Event} e - The event object.
+             * @return {void} This function does not return anything.
+             */
+            const submitButtonListener = (e) => {
+                e.preventDefault();
+                const formData = new FormData(e.target);
+                const form = e.target;
+                const selectedOption = e.target.querySelector('input[type="radio"]:checked');
+                if (!selectedOption) {
+                    alert("Please select an answer!");
+                    return;
+                }
+
+                let isCorrect = false;
+                const { answer: userAnswer } = Object.fromEntries(formData.entries());
+                const correctAnswer = e.target.dataset.correctAnswer;
+                const questionId = e.target.dataset.questionId;
+                if (userAnswer == correctAnswer) {
+                    correct.add(questionId);
+                    incorrect.delete(questionId);
+                    isCorrect = true;
+                } else {
+                    incorrect.add(e.target.dataset.questionId);
+                    correct.delete(questionId);
+                }
+                updateScore();
+
+                const resultClass = isCorrect ? "correct-answer" : "incorrect-answer";
+
+                form.querySelectorAll(".question-lable").forEach((label) => {
+                    label.classList.remove("correct-answer", "incorrect-answer");
+                });
+                selectedOption.closest(".question-lable").classList.add(resultClass);
+            };
+
+            function renderExplanation(ev) {
+                modalTextElement.innerHTML = ev.target.dataset?.explanation || "no explanation found";
+                dialog.showModal();
+                dialog.addEventListener("click", (event) => {
+                    if (event.target === dialog) {
+                        dialog.close();
+                    }
+                });
+            }
+        </script>
+    </body>
+</html>

12 - Data Protection/001 Regulated Data OB 3.3_en.srt

@@ -0,0 +1,148 @@
+1
+00:00:00,000 --> 00:00:07,000
+Most organizations nowadays will follow some kind of regulations pertaining to the data that it collects.
+
+2
+00:00:07,000 --> 00:00:12,000
+In today's world, especially in the United States, we have tons of laws that we have to follow, whether
+
+3
+00:00:12,000 --> 00:00:18,000
+it's collecting medical information and having to follow HIPAA compliance, collecting credit card information,
+
+4
+00:00:18,000 --> 00:00:22,000
+and following things such as PCI standards now.
+
+5
+00:00:23,000 --> 00:00:26,000
+What happens is this is known as regulated data.
+
+6
+00:00:26,000 --> 00:00:32,000
+This includes data that's subject to all kinds of regulatory requirements, different kind of laws and
+
+7
+00:00:32,000 --> 00:00:34,000
+regulations, personal data.
+
+8
+00:00:34,000 --> 00:00:41,000
+So if you work in places, if you collect personal data and your organization does business or is located
+
+9
+00:00:41,000 --> 00:00:43,000
+in Europe, you'll have to follow GDPR.
+
+10
+00:00:44,000 --> 00:00:45,000
+Uh, in the United States.
+
+11
+00:00:45,000 --> 00:00:51,000
+Here we have things like HIPAA compliance where health health information and then financial data,
+
+12
+00:00:52,000 --> 00:00:55,000
+uh, for PCI compliance is going to be like credit card information.
+
+13
+00:00:55,000 --> 00:01:01,000
+Now, all of these laws here, uh, that are covered, we're going to be covering some of these laws
+
+14
+00:01:01,000 --> 00:01:03,000
+a little bit later in this course.
+
+15
+00:01:03,000 --> 00:01:04,000
+So hold on to that.
+
+16
+00:01:04,000 --> 00:01:09,000
+But for now we want to talk about how just that data is regulated.
+
+17
+00:01:09,000 --> 00:01:14,000
+Don't think that by collecting people's information, especially people's name, address, social security
+
+18
+00:01:14,000 --> 00:01:20,000
+number, health care information, like diseases, they may have, medications, they may be taken credit
+
+19
+00:01:20,000 --> 00:01:21,000
+card information.
+
+20
+00:01:21,000 --> 00:01:24,000
+This is all data that's going to be regulated.
+
+21
+00:01:24,000 --> 00:01:32,000
+In fact things that GDPR, the general data protection, this uh, things like GDPR, this is a this
+
+22
+00:01:32,000 --> 00:01:36,000
+is a this is basically a law that protects Europeans.
+
+23
+00:01:36,000 --> 00:01:36,000
+Okay.
+
+24
+00:01:36,000 --> 00:01:38,000
+Or the European Union citizens data.
+
+25
+00:01:38,000 --> 00:01:41,000
+Things like browsing information is what this collects.
+
+26
+00:01:41,000 --> 00:01:48,000
+So when you start collecting data on your users, you have to keep in mind that a lot of the data will
+
+27
+00:01:48,000 --> 00:01:54,000
+be subject to certain laws and regulations within the country that you're collecting that data from.
+
+28
+00:01:54,000 --> 00:01:59,000
+Compliance with these legal and regulatory standards are critical.
+
+29
+00:01:59,000 --> 00:02:05,000
+First of all, it will be against the law if you don't, and it's probably going to be mandatory.
+
+30
+00:02:05,000 --> 00:02:12,000
+This involves good security measurements, access control, and of course ensuring the privacy or confidentiality
+
+31
+00:02:12,000 --> 00:02:15,000
+and integrity of the data.
+
+32
+00:02:15,000 --> 00:02:22,000
+So don't think that you can just set up a business or don't think most companies can just go and set
+
+33
+00:02:22,000 --> 00:02:28,000
+up businesses, start collecting information and not worry about the laws that they should be following.
+
+34
+00:02:28,000 --> 00:02:35,000
+So make sure as a security professional, you are aware of what local laws within your country that
+
+35
+00:02:35,000 --> 00:02:38,000
+you should be following when it comes to data compliance.
+
+36
+00:02:38,000 --> 00:02:43,000
+And also if you're collecting data from overseas or you're doing business overseas from your country,
+
+37
+00:02:43,000 --> 00:02:46,000
+what laws you should be following there also.
+

12 - Data Protection/002 Intellectual Property OB 3.3_en.srt

@@ -0,0 +1,696 @@
+1
+00:00:00,000 --> 00:00:08,000
+People and organizations in today's world create specific things such as invention, expression, such
+
+2
+00:00:08,000 --> 00:00:12,000
+as art, or expressions like write in a book.
+
+3
+00:00:12,000 --> 00:00:16,000
+These things that they create is valuable to them and is worth money to them.
+
+4
+00:00:17,000 --> 00:00:23,000
+In fact, I am an author and I wrote one of the world's best selling project management book, the PMP
+
+5
+00:00:23,000 --> 00:00:25,000
+Exam Prep Simplified.
+
+6
+00:00:25,000 --> 00:00:29,000
+Now, this particular book is an expression of me.
+
+7
+00:00:29,000 --> 00:00:31,000
+This particular book does bring me in an income.
+
+8
+00:00:31,000 --> 00:00:36,000
+And for anybody to steal my particular work would result in damages to me.
+
+9
+00:00:36,000 --> 00:00:41,000
+You see, organizations also have this problem, especially with people that create inventions.
+
+10
+00:00:41,000 --> 00:00:45,000
+If you make a unique invention that only you.
+
+11
+00:00:46,000 --> 00:00:48,000
+Uh, should be using in order to profit from that invention.
+
+12
+00:00:48,000 --> 00:00:50,000
+Because that is your idea.
+
+13
+00:00:50,000 --> 00:00:52,000
+You need to protect your invention.
+
+14
+00:00:52,000 --> 00:00:54,000
+I need to protect my expression.
+
+15
+00:00:54,000 --> 00:00:57,000
+You see, this is called intellectual property.
+
+16
+00:00:58,000 --> 00:00:59,000
+This is the creation.
+
+17
+00:00:59,000 --> 00:01:01,000
+This is creations of the mind.
+
+18
+00:01:01,000 --> 00:01:09,000
+Like inventions, literacy work, artistic work, design symbols and names that is used in commerce.
+
+19
+00:01:09,000 --> 00:01:16,000
+Now, in this video, I want to go through the different ways we can that we can use to protect our
+
+20
+00:01:16,000 --> 00:01:17,000
+intellectual property.
+
+21
+00:01:17,000 --> 00:01:17,000
+Our.
+
+22
+00:01:17,000 --> 00:01:21,000
+The organization thinks that copyrights and patents and trademarks.
+
+23
+00:01:21,000 --> 00:01:23,000
+That's what we're cover in this video.
+
+24
+00:01:23,000 --> 00:01:29,000
+IP theft can result in significant economic loss and competitive disadvantage.
+
+25
+00:01:29,000 --> 00:01:34,000
+Now, if this is something that I have personal experience with because I have personally experienced
+
+26
+00:01:34,000 --> 00:01:41,000
+this, my study guide or my book was published on Amazon, and Amazon has exclusive rights as the only
+
+27
+00:01:41,000 --> 00:01:43,000
+distributor of the book.
+
+28
+00:01:44,000 --> 00:01:46,000
+After a couple of years and it was doing well.
+
+29
+00:01:46,000 --> 00:01:50,000
+All of a sudden we started having a seller that started to sell my book.
+
+30
+00:01:50,000 --> 00:01:51,000
+They were buying.
+
+31
+00:01:51,000 --> 00:01:55,000
+They were printing the book themselves and selling it on Amazon.
+
+32
+00:01:55,000 --> 00:01:59,000
+They were priced at Amazon, so people were buying their book and we didn't realize it for a while.
+
+33
+00:01:59,000 --> 00:02:03,000
+So we actually lost a significant amount of money due to IP theft.
+
+34
+00:02:03,000 --> 00:02:05,000
+This book is copyrighted.
+
+35
+00:02:05,000 --> 00:02:11,000
+Protection includes rights management, strict access control, even watermarking to trace and identify
+
+36
+00:02:11,000 --> 00:02:13,000
+unauthorized copies.
+
+37
+00:02:13,000 --> 00:02:15,000
+Now, the book does have a unique mark that we know.
+
+38
+00:02:15,000 --> 00:02:17,000
+If you copy it, we'll know.
+
+39
+00:02:17,000 --> 00:02:22,000
+So how does organizations protect their intellectual property?
+
+40
+00:02:22,000 --> 00:02:27,000
+Well, let's go through some of the most common ways that you're going to need to know for your exam.
+
+41
+00:02:27,000 --> 00:02:30,000
+The first one here I have is copyrights.
+
+42
+00:02:30,000 --> 00:02:37,000
+So copyrights are laws that protects against unauthorized duplication of an original creative work.
+
+43
+00:02:37,000 --> 00:02:41,000
+Now when people think of okay, what can I copyright?
+
+44
+00:02:41,000 --> 00:02:49,000
+Well, these are some of the things here that you can copyright, literacy work, musical work, uh,
+
+45
+00:02:49,000 --> 00:02:56,000
+all kinds of pictorial work like pictures, motion pictures, sound recordings, architectural work,
+
+46
+00:02:56,000 --> 00:02:59,000
+all of these are copyrightable.
+
+47
+00:02:59,000 --> 00:03:03,000
+Now I want to before I get into this, I want to make something clear.
+
+48
+00:03:03,000 --> 00:03:09,000
+The moment work is created, it is copyrighted.
+
+49
+00:03:10,000 --> 00:03:11,000
+There's two kinds of copyrights.
+
+50
+00:03:11,000 --> 00:03:13,000
+In the United States.
+
+51
+00:03:13,000 --> 00:03:17,000
+There is a regular copyright, and then there's a registered copyright.
+
+52
+00:03:18,000 --> 00:03:25,000
+The moment you have an idea of an expression of some kind and you draw it on a piece of paper, or you
+
+53
+00:03:25,000 --> 00:03:29,000
+write it down on a piece of paper, it is automatically copyrighted.
+
+54
+00:03:29,000 --> 00:03:32,000
+You do not need to register it.
+
+55
+00:03:33,000 --> 00:03:40,000
+Now, if you feel that this work will be public, will be on the public shelves, such as a book on
+
+56
+00:03:40,000 --> 00:03:45,000
+Amazon, or you're going to be selling this picture online, or it's going to be like a motion picture
+
+57
+00:03:45,000 --> 00:03:49,000
+where everybody's going to be seeing it, or it's going to be some kind of play or something like that,
+
+58
+00:03:50,000 --> 00:03:52,000
+then it's best to get it registered.
+
+59
+00:03:52,000 --> 00:03:58,000
+A registered copyright is when you go to your copyright office, like we do here in the United States,
+
+60
+00:03:58,000 --> 00:04:01,000
+and we submit the work to the Copyright Office.
+
+61
+00:04:01,000 --> 00:04:02,000
+And we claim that that is our work.
+
+62
+00:04:02,000 --> 00:04:09,000
+The Copyright Office then puts a stamp on it that says, as of this day, Bob says this is his work.
+
+63
+00:04:09,000 --> 00:04:14,000
+They actually don't check to see if anybody else owns it, but they're just saying that that it is there.
+
+64
+00:04:15,000 --> 00:04:16,000
+Now, why do we want to register?
+
+65
+00:04:16,000 --> 00:04:18,000
+What's the benefit of registration?
+
+66
+00:04:18,000 --> 00:04:23,000
+When you register a copyright, it's the only time you can actually bring lawsuits against people.
+
+67
+00:04:23,000 --> 00:04:24,000
+So if anybody.
+
+68
+00:04:24,000 --> 00:04:30,000
+So let's say you wrote something down on a copyright and somebody else stole your idea and you're sure
+
+69
+00:04:30,000 --> 00:04:32,000
+of it, you can't sue them yet.
+
+70
+00:04:32,000 --> 00:04:33,000
+You have to go and register it.
+
+71
+00:04:33,000 --> 00:04:34,000
+Then you can sue them.
+
+72
+00:04:34,000 --> 00:04:35,000
+So it's best to do it right away.
+
+73
+00:04:36,000 --> 00:04:42,000
+Uh, also, you're entitled to all kinds of different damages in case somebody steals your copyright.
+
+74
+00:04:42,000 --> 00:04:43,000
+This is not a law course.
+
+75
+00:04:43,000 --> 00:04:48,000
+I'm not going to get into the specifics, but if you do have work that are made, publish, go and register
+
+76
+00:04:48,000 --> 00:04:48,000
+it.
+
+77
+00:04:48,000 --> 00:04:49,000
+Registry.
+
+78
+00:04:50,000 --> 00:04:51,000
+Registering a copyright.
+
+79
+00:04:51,000 --> 00:04:53,000
+It's actually something that is very easy.
+
+80
+00:04:53,000 --> 00:04:54,000
+I did it myself online.
+
+81
+00:04:54,000 --> 00:04:55,000
+It takes about ten minutes.
+
+82
+00:04:55,000 --> 00:04:57,000
+Do not pay companies to do it.
+
+83
+00:04:57,000 --> 00:05:01,000
+And I think I paid about $40 to register the book, so keep that in mind.
+
+84
+00:05:01,000 --> 00:05:03,000
+It's not difficult.
+
+85
+00:05:03,000 --> 00:05:05,000
+Now remember remember what I'm talking about.
+
+86
+00:05:05,000 --> 00:05:09,000
+Copyrights does not have to be registered to have the protection.
+
+87
+00:05:09,000 --> 00:05:12,000
+The protection we're talking about is right here.
+
+88
+00:05:12,000 --> 00:05:16,000
+So remember a copyright is an expression of idea or resources.
+
+89
+00:05:16,000 --> 00:05:22,000
+Authors can control how whoever owns the copyright controls how the work is distributed, reproduced
+
+90
+00:05:22,000 --> 00:05:23,000
+and used now.
+
+91
+00:05:24,000 --> 00:05:28,000
+Copyrights are valid for very long periods of time.
+
+92
+00:05:28,000 --> 00:05:36,000
+It's valid generally for 70 years after the death of the last remaining author, unless it's work for
+
+93
+00:05:36,000 --> 00:05:36,000
+hire.
+
+94
+00:05:36,000 --> 00:05:44,000
+So work for hire is this work for hire is when somebody hires you to create work for an organization.
+
+95
+00:05:44,000 --> 00:05:48,000
+So if you go to a company and you wrote procedures and policies, that's called work for hire, work
+
+96
+00:05:48,000 --> 00:05:49,000
+for hire.
+
+97
+00:05:49,000 --> 00:05:56,000
+An anonymous works are protected for 95 years from the date of the first publication of 120 days from
+
+98
+00:05:56,000 --> 00:05:58,000
+the date of creation, which one ever is shortest?
+
+99
+00:05:58,000 --> 00:06:03,000
+If it was published dated, it's 95 years or it's 120 years.
+
+100
+00:06:04,000 --> 00:06:09,000
+So let's say you're a bad person and you want to steal my book, right?
+
+101
+00:06:09,000 --> 00:06:10,000
+My PMP study guide.
+
+102
+00:06:10,000 --> 00:06:17,000
+Well, if you want to steal it well or use it, I'm going to sue you because I have the legal copyright.
+
+103
+00:06:17,000 --> 00:06:22,000
+But if you want to wait for the copyright to expire to republish the work, you have to wait.
+
+104
+00:06:22,000 --> 00:06:26,000
+You have to wait for me to die and then you have to wait 70 years.
+
+105
+00:06:27,000 --> 00:06:31,000
+Penalties can penalties is going to be up to $1.1 million in damages.
+
+106
+00:06:31,000 --> 00:06:31,000
+Now.
+
+107
+00:06:31,000 --> 00:06:34,000
+This number can change depending on when you're watching this video.
+
+108
+00:06:34,000 --> 00:06:36,000
+Ten years in prison now.
+
+109
+00:06:37,000 --> 00:06:41,000
+This is copyright and these are things that are copyrightable that I have here.
+
+110
+00:06:41,000 --> 00:06:47,000
+Now, the other thing here that we can use to protect our IP is going to be trademarks.
+
+111
+00:06:47,000 --> 00:06:55,000
+Trademarks protect words, names, symbols, sounds, shapes, colors, musical tones or a combination.
+
+112
+00:06:56,000 --> 00:07:01,000
+Uh, they protect someone from stealing another person's quote unquote look and feel.
+
+113
+00:07:01,000 --> 00:07:04,000
+The primary purpose is to avoid confusion in the marketplace.
+
+114
+00:07:04,000 --> 00:07:06,000
+This protects intellectual property.
+
+115
+00:07:06,000 --> 00:07:12,000
+The good thing with trademarks is that they're valid, unlike a copyright, which generally, when I
+
+116
+00:07:12,000 --> 00:07:16,000
+die, it's 70 years technically trademarks, you can keep renewing it over and over.
+
+117
+00:07:16,000 --> 00:07:18,000
+They're valid for ten years with unlimited renewal.
+
+118
+00:07:19,000 --> 00:07:19,000
+Um.
+
+119
+00:07:20,000 --> 00:07:22,000
+On unlimited.
+
+120
+00:07:22,000 --> 00:07:27,000
+You can renew an unlimited number of times, so you can keep renewing that over and over and over.
+
+121
+00:07:27,000 --> 00:07:29,000
+Now, what are things that are going to be trademarked?
+
+122
+00:07:29,000 --> 00:07:32,000
+Lots of things that are trademark are generally things like symbols.
+
+123
+00:07:32,000 --> 00:07:37,000
+The Technical Institute of America, if you look at our name and symbols, those are all trademarks.
+
+124
+00:07:37,000 --> 00:07:41,000
+We own the trademark to the Technical Institute of America.
+
+125
+00:07:41,000 --> 00:07:44,000
+The the the actual company's name.
+
+126
+00:07:44,000 --> 00:07:48,000
+The Technical Institute of America is a trademark name.
+
+127
+00:07:48,000 --> 00:07:52,000
+The symbol of itself, the shield that we use is also trademarked.
+
+128
+00:07:52,000 --> 00:07:56,000
+This helps to ensure that we protect our brand.
+
+129
+00:07:56,000 --> 00:08:01,000
+Many, many companies are trademarking their content, their brands, their logo.
+
+130
+00:08:01,000 --> 00:08:04,000
+How do you know when you see a particular logo?
+
+131
+00:08:04,000 --> 00:08:07,000
+You might see a little circle that says TM on it.
+
+132
+00:08:07,000 --> 00:08:10,000
+If you see a little circle with a C with a circle, that's a copyright.
+
+133
+00:08:11,000 --> 00:08:13,000
+Now the other one here you have is patents.
+
+134
+00:08:13,000 --> 00:08:15,000
+If you have an invention.
+
+135
+00:08:16,000 --> 00:08:21,000
+Unique invention that you have invented to help the world progress.
+
+136
+00:08:21,000 --> 00:08:25,000
+You're going to get exclusive use of your invention if you patent your invention.
+
+137
+00:08:25,000 --> 00:08:31,000
+So patent protects the right of inventors and their inventions, protection of those who have legal
+
+138
+00:08:31,000 --> 00:08:32,000
+ownership of the patent.
+
+139
+00:08:33,000 --> 00:08:37,000
+The invention, must be new, must be useful, and must not be obvious.
+
+140
+00:08:37,000 --> 00:08:42,000
+The owner has exclusive control of the invention for 20 years.
+
+141
+00:08:42,000 --> 00:08:47,000
+After that it goes to the public domain and anyone can produce your work.
+
+142
+00:08:47,000 --> 00:08:52,000
+This is why when organizations like drug companies first make a drug that they've spent billions of
+
+143
+00:08:52,000 --> 00:08:58,000
+dollars producing, they have about 20 years because they have patent that formula for that drug to
+
+144
+00:08:58,000 --> 00:09:02,000
+sell it as much as they want so they can recuperate their costs.
+
+145
+00:09:02,000 --> 00:09:06,000
+And after that it becomes a generic medication, and then anyone can take the formula.
+
+146
+00:09:08,000 --> 00:09:16,000
+Another thing that you want to protect is the secret recipe to the McDonald's Big Mac sauce, or the
+
+147
+00:09:16,000 --> 00:09:20,000
+secret recipe to KFC's fried chicken.
+
+148
+00:09:21,000 --> 00:09:22,000
+It's coming up to lunch time.
+
+149
+00:09:22,000 --> 00:09:26,000
+It's actually around 11:00 in the morning, so I'm thinking about I could use a Big Mac right now.
+
+150
+00:09:27,000 --> 00:09:36,000
+Organizations have top secret information that they use in order for the survivability of that company.
+
+151
+00:09:36,000 --> 00:09:38,000
+These are called trade secrets.
+
+152
+00:09:38,000 --> 00:09:45,000
+It's any form of information, device, method, process, or formula such as that Big Mac sauce that,
+
+153
+00:09:45,000 --> 00:09:49,000
+if disclosed, will cause significant damage to the organization.
+
+154
+00:09:50,000 --> 00:09:53,000
+Now resources generally is going to provide.
+
+155
+00:09:53,000 --> 00:09:59,000
+Must be of competitive value, must be protected from unauthorized use, is proprietary to the company
+
+156
+00:09:59,000 --> 00:10:01,000
+essential for them to survive.
+
+157
+00:10:01,000 --> 00:10:11,000
+Now there is really nothing to register like we do with copyrights or patents or, uh, or trademarks.
+
+158
+00:10:11,000 --> 00:10:13,000
+Trade secrets just has to be protected.
+
+159
+00:10:14,000 --> 00:10:18,000
+There is a law in the United States you don't need to know this one for your exam.
+
+160
+00:10:18,000 --> 00:10:19,000
+I just put it there.
+
+161
+00:10:19,000 --> 00:10:25,000
+For your knowledge, the Espionage Act of 1996 is a law that specifies that if anyone ever steals a
+
+162
+00:10:25,000 --> 00:10:31,000
+trade secrets and discloses that they can be fined, as you can see here, potential jail time.
+
+163
+00:10:32,000 --> 00:10:38,000
+So the way to protect trade secrets as a security professional is just do your normal security things,
+
+164
+00:10:38,000 --> 00:10:45,000
+encrypt it, put good windows permission or file permission like access control firewalls, IDs systems
+
+165
+00:10:45,000 --> 00:10:49,000
+may be used potential air gapped systems to store this kind of information.
+
+166
+00:10:49,000 --> 00:10:53,000
+Whoever gets the information should be signing a non-disclosure agreement.
+
+167
+00:10:53,000 --> 00:10:56,000
+This prohibits them from sharing this information.
+
+168
+00:10:56,000 --> 00:11:04,000
+And if they do share it, they could, uh, be subject to potential fines or the company can sue them
+
+169
+00:11:04,000 --> 00:11:05,000
+for the loss of income and so on.
+
+170
+00:11:07,000 --> 00:11:07,000
+Okay.
+
+171
+00:11:07,000 --> 00:11:11,000
+These are some ways that we're going to protect our intellectual property.
+
+172
+00:11:11,000 --> 00:11:16,000
+Keep in mind, intellectual property is how lots of organizations survives in today's day and time.
+
+173
+00:11:16,000 --> 00:11:21,000
+And a lot of these IPS is essential for the survival of the business.
+
+174
+00:11:21,000 --> 00:11:25,000
+So as an IT professional, make sure you protect them.
+

12 - Data Protection/003 Legal and Financial Data OB 3.3_en.srt

@@ -0,0 +1,276 @@
+1
+00:00:00,000 --> 00:00:05,000
+As you collect information, you're going to be collecting different kinds of information in particularly,
+
+2
+00:00:05,000 --> 00:00:11,000
+some of the data that we collect on a network may be considered, uh, legal information.
+
+3
+00:00:11,000 --> 00:00:14,000
+While some of the information we collect may be financial information.
+
+4
+00:00:14,000 --> 00:00:20,000
+And then some of this information we collect is easily readable by us.
+
+5
+00:00:20,000 --> 00:00:24,000
+And versus some of it is not and can only be read by a computer.
+
+6
+00:00:24,000 --> 00:00:26,000
+So let's talk about the first one I have here.
+
+7
+00:00:26,000 --> 00:00:28,000
+Legal information.
+
+8
+00:00:28,000 --> 00:00:35,000
+A lot of times some of the data that we collect on clients, or that we create ourselves internally
+
+9
+00:00:35,000 --> 00:00:39,000
+could fall into the to to the realm of legal information.
+
+10
+00:00:39,000 --> 00:00:44,000
+Legal information are things that deals with legal matters, including case files, legal advice and
+
+11
+00:00:44,000 --> 00:00:46,000
+other sensitive legal documents.
+
+12
+00:00:47,000 --> 00:00:52,000
+A breach of these type, a breach of this kind of information, or the release of this kind of information,
+
+13
+00:00:52,000 --> 00:00:57,000
+especially if the company is in some kind of a lawsuit, could result in attorney client privileges
+
+14
+00:00:57,000 --> 00:00:59,000
+being compromised.
+
+15
+00:00:59,000 --> 00:01:00,000
+Uh, case integrity.
+
+16
+00:01:00,000 --> 00:01:04,000
+So ensuring the confidentiality encryption of this kind of information is critical.
+
+17
+00:01:04,000 --> 00:01:05,000
+Let me give you an example.
+
+18
+00:01:06,000 --> 00:01:13,000
+Let's say the organization, uh, has gotten sued by another company because that company is claiming
+
+19
+00:01:13,000 --> 00:01:16,000
+that it stole its IP topic.
+
+20
+00:01:16,000 --> 00:01:19,000
+We just covered it, stole its design.
+
+21
+00:01:19,000 --> 00:01:26,000
+But your organization has proof that it didn't stole the design, and it actually created the actual
+
+22
+00:01:26,000 --> 00:01:28,000
+product itself from scratch.
+
+23
+00:01:28,000 --> 00:01:36,000
+The documents that proves that we created the design ourselves now falls into a legal into a legal case,
+
+24
+00:01:36,000 --> 00:01:39,000
+or now it becomes legal information.
+
+25
+00:01:39,000 --> 00:01:42,000
+This means that it's going to have to be presented in a court of law.
+
+26
+00:01:42,000 --> 00:01:47,000
+As an IT professional, you're going to have to make sure that you protect the integrity, make sure
+
+27
+00:01:47,000 --> 00:01:52,000
+that it never gets modified, because you're going to use this as proof in the case you have to encrypt
+
+28
+00:01:52,000 --> 00:01:57,000
+it so it doesn't get leaked out, or the other sides don't get to see it because they have an assumption
+
+29
+00:01:57,000 --> 00:01:58,000
+that may not be true.
+
+30
+00:01:58,000 --> 00:02:01,000
+Another thing is financial information.
+
+31
+00:02:01,000 --> 00:02:07,000
+It is super easy to get in trouble with the law nowadays, because you're collecting financial information
+
+32
+00:02:07,000 --> 00:02:09,000
+and may not even be realized in it.
+
+33
+00:02:09,000 --> 00:02:11,000
+How important it is.
+
+34
+00:02:12,000 --> 00:02:17,000
+This is going to be things, transactions, financial records, credit card information, and other
+
+35
+00:02:17,000 --> 00:02:19,000
+monetary data that you're collecting from your customers.
+
+36
+00:02:19,000 --> 00:02:25,000
+Right now, most organizations that sells products online will collect some kind of payment information.
+
+37
+00:02:26,000 --> 00:02:30,000
+Now, financial data is always going to be the target for these.
+
+38
+00:02:30,000 --> 00:02:35,000
+I don't want to say always, 90% of the time is going to be the target for these hackers that comes
+
+39
+00:02:35,000 --> 00:02:37,000
+in, breaks into your company.
+
+40
+00:02:37,000 --> 00:02:40,000
+What they're looking for are those credit card information.
+
+41
+00:02:40,000 --> 00:02:45,000
+We're going to have to do things like encrypted, encrypt the processing and make sure that if there
+
+42
+00:02:45,000 --> 00:02:50,000
+is standards like PCI compliance, PCI means payment card industry.
+
+43
+00:02:52,000 --> 00:02:54,000
+DSS data security standard.
+
+44
+00:02:54,000 --> 00:03:01,000
+It's basically a standard that organizations have to follow to secure credit card information or financial
+
+45
+00:03:01,000 --> 00:03:02,000
+information.
+
+46
+00:03:02,000 --> 00:03:06,000
+Now, the other thing here that we're going to be talking about is what's called readable data.
+
+47
+00:03:06,000 --> 00:03:08,000
+Readable data falls into two kinds.
+
+48
+00:03:08,000 --> 00:03:14,000
+Human readable, US readable and non-human readable things that we can interpret and see on a network,
+
+49
+00:03:14,000 --> 00:03:18,000
+such as text, documents, images, printable information.
+
+50
+00:03:18,000 --> 00:03:24,000
+And then non readable is going to be non human readable things that only the computer can read.
+
+51
+00:03:24,000 --> 00:03:27,000
+Think of things like machine code.
+
+52
+00:03:27,000 --> 00:03:30,000
+No one can read machine code ones and zeros.
+
+53
+00:03:30,000 --> 00:03:34,000
+Certain kind of log files, encrypted data that only computers can decrypt.
+
+54
+00:03:35,000 --> 00:03:38,000
+Both of these will require protection.
+
+55
+00:03:38,000 --> 00:03:39,000
+Okay.
+
+56
+00:03:39,000 --> 00:03:41,000
+Both of these will require protection.
+
+57
+00:03:41,000 --> 00:03:45,000
+That only that only that organization or whoever needs to see it.
+
+58
+00:03:45,000 --> 00:03:53,000
+This is going to be things such as encryption, firewalls, intrusion detection systems, access controls
+
+59
+00:03:53,000 --> 00:03:54,000
+and so on.
+
+60
+00:03:54,000 --> 00:03:57,000
+All the protection mechanisms that we have spoken about.
+
+61
+00:03:57,000 --> 00:04:02,000
+So human readable is, is very likely to get stolen.
+
+62
+00:04:02,000 --> 00:04:06,000
+Because that's what if they break into the company, that's what they're going to be coming after.
+
+63
+00:04:06,000 --> 00:04:13,000
+Cybercriminals could be attacking non human readable for decryption or misuse of that data.
+
+64
+00:04:14,000 --> 00:04:16,000
+Data protection is super important.
+
+65
+00:04:16,000 --> 00:04:18,000
+If the company is in some kind of a lawsuit.
+
+66
+00:04:18,000 --> 00:04:23,000
+You've got to remember as a security person to protect that data, because that data could be the one
+
+67
+00:04:23,000 --> 00:04:26,000
+that proves that the company did nothing wrong.
+
+68
+00:04:26,000 --> 00:04:29,000
+And you will be collecting tons of financial information.
+
+69
+00:04:29,000 --> 00:04:34,000
+So you want to make sure you protect both of them to keep your company secure.
+

12 - Data Protection/004 Data Classification OB 3.3_en.srt

@@ -0,0 +1,644 @@
+1
+00:00:00,000 --> 00:00:05,000
+Organizations today store a lot of information or particularly a lot of data.
+
+2
+00:00:05,000 --> 00:00:10,000
+We have tons and tons of data, and the longer that company stays in business, the more data you're
+
+3
+00:00:10,000 --> 00:00:11,000
+going to get.
+
+4
+00:00:11,000 --> 00:00:18,000
+Now the question comes down to does all of that data have the same value?
+
+5
+00:00:18,000 --> 00:00:24,000
+Do we apply the same set of controls to all of all the data?
+
+6
+00:00:24,000 --> 00:00:25,000
+The answer is no.
+
+7
+00:00:25,000 --> 00:00:27,000
+Different data sets have different value.
+
+8
+00:00:27,000 --> 00:00:31,000
+For example, what's on a company's website is public information.
+
+9
+00:00:31,000 --> 00:00:35,000
+That particular data, if it's lost, doesn't cost much harm to the business.
+
+10
+00:00:35,000 --> 00:00:40,000
+But if the company uses a very particular manufacturing method or formula to produce a product, if
+
+11
+00:00:40,000 --> 00:00:45,000
+that's lost, that's going to cause the company significant financial harm.
+
+12
+00:00:45,000 --> 00:00:49,000
+We don't protect data, all the data with the same set of controls.
+
+13
+00:00:49,000 --> 00:00:58,000
+We don't have unlimited resources to buy things like IDs systems, IPS, endpoint protection, firewall
+
+14
+00:00:58,000 --> 00:01:01,000
+encryption, redundant systems, cloud storages, and so on and so on.
+
+15
+00:01:01,000 --> 00:01:04,000
+All the different security controls you can think about.
+
+16
+00:01:04,000 --> 00:01:10,000
+We don't have unlimited amount of money and people to buy, configure, setup and maintain all those
+
+17
+00:01:10,000 --> 00:01:11,000
+controls.
+
+18
+00:01:11,000 --> 00:01:14,000
+So what we have is we have a limited set of controls.
+
+19
+00:01:14,000 --> 00:01:15,000
+We have a ton of data.
+
+20
+00:01:15,000 --> 00:01:22,000
+So we have to take the limited resources and allocate it to ensure the right data gets the right protection.
+
+21
+00:01:22,000 --> 00:01:25,000
+Or in other words, the right data gets the right control.
+
+22
+00:01:25,000 --> 00:01:27,000
+The question is how do we determine that?
+
+23
+00:01:27,000 --> 00:01:29,000
+How do we determine.
+
+24
+00:01:29,000 --> 00:01:32,000
+Well, you're going to get those controls and you're going to get those controls.
+
+25
+00:01:32,000 --> 00:01:36,000
+You're going to have a ton of controls and you're not going to have any control.
+
+26
+00:01:36,000 --> 00:01:39,000
+The answer is data classification.
+
+27
+00:01:39,000 --> 00:01:42,000
+And this starts this discussion on this topic.
+
+28
+00:01:43,000 --> 00:01:44,000
+Now.
+
+29
+00:01:44,000 --> 00:01:48,000
+Data classification affects all aspects of A of the data.
+
+30
+00:01:48,000 --> 00:01:50,000
+When should a data.
+
+31
+00:01:50,000 --> 00:01:52,000
+When should the data be backed up?
+
+32
+00:01:52,000 --> 00:01:53,000
+Depends on a classification.
+
+33
+00:01:53,000 --> 00:01:54,000
+Where should it be stored?
+
+34
+00:01:54,000 --> 00:01:56,000
+Depends on this classification.
+
+35
+00:01:56,000 --> 00:02:00,000
+Who should have access to it depends on its classification.
+
+36
+00:02:00,000 --> 00:02:02,000
+How should it be processed?
+
+37
+00:02:02,000 --> 00:02:03,000
+Depends on its classification.
+
+38
+00:02:03,000 --> 00:02:05,000
+What type of machine should it be stored on?
+
+39
+00:02:05,000 --> 00:02:07,000
+Depends on its classification.
+
+40
+00:02:07,000 --> 00:02:08,000
+You get the point.
+
+41
+00:02:08,000 --> 00:02:12,000
+Every single aspect of the data.
+
+42
+00:02:13,000 --> 00:02:18,000
+Is going to be, or what happens to it is going to be dependent on that classification.
+
+43
+00:02:18,000 --> 00:02:24,000
+So data classification helps in determining the level of security controls and handling protocols that
+
+44
+00:02:24,000 --> 00:02:26,000
+should be applied to various kinds of data.
+
+45
+00:02:27,000 --> 00:02:34,000
+Data classification helps with the creation, usage and determination and destruction of the data.
+
+46
+00:02:34,000 --> 00:02:39,000
+For example public information information that's on your public website.
+
+47
+00:02:39,000 --> 00:02:44,000
+When the when that server that was just storing public data, whenever you're ready to throw that server
+
+48
+00:02:44,000 --> 00:02:48,000
+out or destroy the server, just put it in a garbage.
+
+49
+00:02:48,000 --> 00:02:49,000
+Nothing else to do.
+
+50
+00:02:49,000 --> 00:02:53,000
+Take out the hard drive and dump it in the bin because everything on the drive is public.
+
+51
+00:02:53,000 --> 00:02:59,000
+But if that if that server was storing top secret data, you would want to degauss and shred the hard
+
+52
+00:02:59,000 --> 00:03:00,000
+drive.
+
+53
+00:03:00,000 --> 00:03:06,000
+So it has a different procedure to destroy the data depending on its classification.
+
+54
+00:03:07,000 --> 00:03:12,000
+Now for your exam, the data owner determines the classification.
+
+55
+00:03:12,000 --> 00:03:15,000
+You have to remember that who determines classification?
+
+56
+00:03:15,000 --> 00:03:17,000
+The data owner does that.
+
+57
+00:03:17,000 --> 00:03:21,000
+They will determine how critical it is, how sensitive it is.
+
+58
+00:03:21,000 --> 00:03:23,000
+They're going to determine its value.
+
+59
+00:03:23,000 --> 00:03:24,000
+They need to know.
+
+60
+00:03:24,000 --> 00:03:26,000
+Don't forget the data owner determines Bob has access.
+
+61
+00:03:26,000 --> 00:03:28,000
+Mary doesn't, or vice versa.
+
+62
+00:03:28,000 --> 00:03:32,000
+They determine how to declassify it if it needs to be or destroy it.
+
+63
+00:03:32,000 --> 00:03:38,000
+The whole objective of data classification, like I mentioned earlier, is to get the right controls
+
+64
+00:03:38,000 --> 00:03:43,000
+to the right data owner will define the retention requirements.
+
+65
+00:03:43,000 --> 00:03:46,000
+Data classifications will also define how long you keep it.
+
+66
+00:03:47,000 --> 00:03:54,000
+Basically, the whole point of this entire topic is to the optimization of resources and keeping our
+
+67
+00:03:54,000 --> 00:03:55,000
+data secure.
+
+68
+00:03:55,000 --> 00:03:56,000
+Now.
+
+69
+00:03:57,000 --> 00:03:59,000
+There's a couple of things here I want to mention.
+
+70
+00:04:00,000 --> 00:04:05,000
+When it comes to classification, you have to think of the entire CIA.
+
+71
+00:04:05,000 --> 00:04:10,000
+How sensitive it is, how critical it is sensitivity and critical, and how critical it is generally
+
+72
+00:04:10,000 --> 00:04:12,000
+relate back to confidentiality.
+
+73
+00:04:12,000 --> 00:04:19,000
+So you want to keep in mind these particular things when you're thinking about, for example, top secret
+
+74
+00:04:19,000 --> 00:04:26,000
+data, secret data, public data, unclassified data, you have to think about these particular things.
+
+75
+00:04:26,000 --> 00:04:34,000
+For example, in the military, they they prioritize our emphasized confidentiality.
+
+76
+00:04:34,000 --> 00:04:39,000
+Fully emphasizing confidentiality may give up, for example, availability.
+
+77
+00:04:41,000 --> 00:04:47,000
+A machine that is super secure, that no one can go in and just tamper with the machine and steal its
+
+78
+00:04:47,000 --> 00:04:47,000
+data.
+
+79
+00:04:47,000 --> 00:04:52,000
+A machine that's turned off and unplugged airgap the machine.
+
+80
+00:04:52,000 --> 00:04:56,000
+Well, if it's air gapped, then only two people can get access to it and they have to put the machine
+
+81
+00:04:56,000 --> 00:04:57,000
+on because it's not turned on.
+
+82
+00:04:58,000 --> 00:05:02,000
+The problem with this is that, yes, good confidentiality, but it's not available to anyone except
+
+83
+00:05:02,000 --> 00:05:03,000
+a few people.
+
+84
+00:05:03,000 --> 00:05:10,000
+Low availability in private industries, though, we're going to emphasize the full CIA.
+
+85
+00:05:10,000 --> 00:05:12,000
+We're going to want to push the full thing.
+
+86
+00:05:12,000 --> 00:05:16,000
+We're going to try to get CIA for most of our data, not all of it.
+
+87
+00:05:16,000 --> 00:05:19,000
+Keep your classification scheme simple.
+
+88
+00:05:19,000 --> 00:05:24,000
+I'm going to talk about a different classification scheme that we can use, the different terms you
+
+89
+00:05:24,000 --> 00:05:25,000
+can use in a minute.
+
+90
+00:05:25,000 --> 00:05:28,000
+Here's an example though of a classification scheme.
+
+91
+00:05:28,000 --> 00:05:31,000
+So for example this is just an example.
+
+92
+00:05:31,000 --> 00:05:34,000
+Like in the military when we're talking protection of data.
+
+93
+00:05:34,000 --> 00:05:39,000
+Look at how the different classification will determine what type of controls.
+
+94
+00:05:40,000 --> 00:05:41,000
+If you have data.
+
+95
+00:05:42,000 --> 00:05:46,000
+Particularly something like on paper, if it's top secret, put it in a vault.
+
+96
+00:05:46,000 --> 00:05:49,000
+If it's secret, a safe would be okay.
+
+97
+00:05:49,000 --> 00:05:53,000
+Confidential, maybe a filing cabinet with a metal bar and a lock.
+
+98
+00:05:53,000 --> 00:05:54,000
+And on classified.
+
+99
+00:05:54,000 --> 00:05:54,000
+No protection.
+
+100
+00:05:54,000 --> 00:05:55,000
+Leave it on the desk.
+
+101
+00:05:55,000 --> 00:06:00,000
+Notice the different classification results in different controls.
+
+102
+00:06:01,000 --> 00:06:08,000
+Now, the question that a lot of people ask me is, Andrew, what are the different classification schemes
+
+103
+00:06:08,000 --> 00:06:09,000
+that we can use?
+
+104
+00:06:09,000 --> 00:06:18,000
+There is no official definition of any potential or any classification scheme that is out there.
+
+105
+00:06:18,000 --> 00:06:25,000
+Many books that we read, CISSP books, Security+ books, even the books on Ec-council.
+
+106
+00:06:25,000 --> 00:06:31,000
+They're going to vary in the definitions because there's no definition and the exam will never ask you,
+
+107
+00:06:31,000 --> 00:06:34,000
+is this secret, top secret or confidential?
+
+108
+00:06:34,000 --> 00:06:35,000
+They'll never do that.
+
+109
+00:06:35,000 --> 00:06:38,000
+Just understand what data classification is.
+
+110
+00:06:38,000 --> 00:06:42,000
+I want to show you an example of what you could use though.
+
+111
+00:06:43,000 --> 00:06:46,000
+Uh, this is a classification scheme that you could use.
+
+112
+00:06:46,000 --> 00:06:50,000
+And I want to show you how different schemes mean different things.
+
+113
+00:06:50,000 --> 00:06:52,000
+So let's take a look here.
+
+114
+00:06:52,000 --> 00:06:54,000
+So here's a data classification scheme.
+
+115
+00:06:54,000 --> 00:06:57,000
+So on this one we have four classes 0 to 3.
+
+116
+00:06:58,000 --> 00:07:01,000
+And on the bottom of the triangle let's go with non-government.
+
+117
+00:07:01,000 --> 00:07:03,000
+First let's see a private organization.
+
+118
+00:07:03,000 --> 00:07:05,000
+Class zero is no damage.
+
+119
+00:07:05,000 --> 00:07:09,000
+Any data that's classified as public has no damage.
+
+120
+00:07:09,000 --> 00:07:11,000
+If it's released to the public no damage.
+
+121
+00:07:11,000 --> 00:07:12,000
+All right.
+
+122
+00:07:12,000 --> 00:07:19,000
+Maybe like upcoming projects, the company is doing class one sensitive does cause damage to the business.
+
+123
+00:07:19,000 --> 00:07:23,000
+Things like the company's financial, like its profit and loss statement.
+
+124
+00:07:23,000 --> 00:07:25,000
+Serious damage like a class two.
+
+125
+00:07:25,000 --> 00:07:27,000
+This one is private.
+
+126
+00:07:27,000 --> 00:07:30,000
+This would be like releasing air information about the company's employees.
+
+127
+00:07:30,000 --> 00:07:33,000
+And then of course, grave damage to that business.
+
+128
+00:07:33,000 --> 00:07:36,000
+Confidential or proprietary data like trade secrets.
+
+129
+00:07:36,000 --> 00:07:41,000
+If you are the federal government, here's a classification that you can use.
+
+130
+00:07:41,000 --> 00:07:43,000
+Top secret wartime information.
+
+131
+00:07:43,000 --> 00:07:44,000
+This is released.
+
+132
+00:07:44,000 --> 00:07:48,000
+Grave damage to national security troop deployment information.
+
+133
+00:07:48,000 --> 00:07:51,000
+This would be serious damage to national security.
+
+134
+00:07:51,000 --> 00:07:56,000
+Confidential is like trade secrets or health care information of government workers that are non classified
+
+135
+00:07:56,000 --> 00:07:58,000
+is going to be their version of public.
+
+136
+00:07:58,000 --> 00:08:01,000
+Now this is just an example.
+
+137
+00:08:01,000 --> 00:08:02,000
+Okay.
+
+138
+00:08:02,000 --> 00:08:04,000
+This is just an example.
+
+139
+00:08:04,000 --> 00:08:05,000
+All right.
+
+140
+00:08:05,000 --> 00:08:10,000
+Here at TI we only use three levels of data classification I know companies that only use two.
+
+141
+00:08:10,000 --> 00:08:12,000
+You don't have to use them all.
+
+142
+00:08:12,000 --> 00:08:18,000
+But when it comes to data classification, here are some different, uh, terms that you can use.
+
+143
+00:08:18,000 --> 00:08:20,000
+Sensitive confidential.
+
+144
+00:08:20,000 --> 00:08:21,000
+Public I think has a universal meaning.
+
+145
+00:08:21,000 --> 00:08:23,000
+Anyone can access it.
+
+146
+00:08:23,000 --> 00:08:25,000
+But for example, what are some companies may call it private.
+
+147
+00:08:25,000 --> 00:08:32,000
+Some may call it confidential, what some call sensitive, some may call restricted, what some call
+
+148
+00:08:32,000 --> 00:08:34,000
+confidential, some may call it critical.
+
+149
+00:08:34,000 --> 00:08:39,000
+And then of course, the military will add things like secret and top secret on top of this.
+
+150
+00:08:39,000 --> 00:08:41,000
+Or maybe a line in here with these.
+
+151
+00:08:41,000 --> 00:08:45,000
+There really isn't a full definition.
+
+152
+00:08:46,000 --> 00:08:50,000
+Now when it comes to your exam and data classification, remember something.
+
+153
+00:08:50,000 --> 00:08:52,000
+Data classification is a big terme.
+
+154
+00:08:52,000 --> 00:09:00,000
+Data classification is the umbrella terms that affects all controls of the data.
+
+155
+00:09:01,000 --> 00:09:04,000
+Like I mentioned earlier in the beginning, let's do a quick recap.
+
+156
+00:09:04,000 --> 00:09:11,000
+Data classification affects everything about the data, determines what controls is applied to what
+
+157
+00:09:11,000 --> 00:09:15,000
+data, determines who should have access to it, or you can't access this because you're not in the
+
+158
+00:09:15,000 --> 00:09:18,000
+top secret clearance, or you can't access this because you don't.
+
+159
+00:09:18,000 --> 00:09:20,000
+You can't access confidential data.
+
+160
+00:09:20,000 --> 00:09:23,000
+You can access public data, things like that.
+
+161
+00:09:23,000 --> 00:09:26,000
+Keep this in mind when answering your exam questions.
+