Materials and extra resources
Introduction
Domain1: Security Fundamentals
-
1.1 Access Control Introduction (6:45)
-
1.2 Authorization (19:19)
-
1.3 Authentication (18:45)
-
1.4 Access Control Attacks (17:11)
-
1.5 Cryptography Fundamentals (1:37)
-
1.6 Steganography (7:51)
-
1.7 Symetrics Encryption (12:38)
-
1.8 Asymetrix Encryption (13:47)
-
1.9 Hashing (6:05)
-
1.10 Information Security Control (5:00)
-
1.11 Information Security Life Cycle 1 (14:09)
-
1.12 Information Security Life Cycle 2 (6:49)
-
1.13 Policy (2:38)
-
1.14 Steganography (7:51)
-
1.15 Asymmetric Encryptian (13:47)
-
1.16 Policy (2:38)
-
1.17 Threat Modeling (5:16)
-
1.18 Threat Modeling
-
1.19 Vulnerability Mitigation in Embedded, Mobile, and Web-Based Systems (6:52)
-
1.20 Vulnerability Mitigation in Embedded, Mobile, and Web-Based Systems
-
1.21 Network Attack Mitigation-Part 1 (3:52)
-
1.22 Network Attack Mitigation-Part 1
-
1.23 Network Attack Mitigation-Part 2 (5:38)
-
1.24 Network Attack Mitigation-Part 2
-
1.25 Risk Appetite and Tolerance (5:41)
-
1.26 Risk Appetite and Tolerance
-
1.27 Patch and Vulnerability Management (8:04)
-
1.28 Patch and Vulnerability Management
Domain 2: Identifying Security Threats and Vulnerabilities
-
2.1 Social Engineering (12:19)
-
2.2 Email Spoofing (6:13)
-
2.3 Phising (13:11)
-
2.4 Information Security Awarness (6:37)
-
2.5 Maleware (12:30)
-
2.6 Types of Malicious Code with a proof of concept (14:51)
-
2.7 Software-Based Threats (4:24)
-
2.8 Password guessing and cracking (15:09)
-
2.9 Rambow table technique (19:20)
-
2.10 Application Attack (4:42)
-
2.11 What is SQL Injection Attack ? (14:05)
-
2.12 XSS Introduction (2:58)
-
2.13 Network-Based Threats (3:34)
-
2.14 Network Basic (12:02)
-
2.15 IP (16:07)
-
2.16 OSI Model Part 1 (14:39)
-
2.17 OSI Model Part 2 (14:10)
-
2.18What is Scanning (2:17)
-
2.19 Sniffiring 1 (15:19)
-
2.20 Sniffiring 2 (14:53)
-
2.21 Man in the Middle attack (11:59)
-
2.22 Wireless attack (2:41)
-
2.23 Wireless (7:15)
-
2.24 Warlessattacks (2:34)
-
2.25 WEP cracking (20:48)
-
2.26 Physical and Logical Access Control (5:07)
-
2.27 Physical and Logical Access Control
-
2.28 Identification, Authentication, and Authorization (4:49)
-
2.29 Identification, Authentication, and Authorization
-
2.30 Identity as a Service (4:59)
-
2.31 Identity as a Service
-
2.32 Authorization Mechanisms (4:36)
-
2.33 Authorization Mechanisms
-
2.34 Access Control Attack Mitigation (5:21)
-
2.35 Access Control Attack Mitigation
Domain3: Managing Data, Application, and Host Security
-
3.1 Managing Data Security (12:32)
-
3.2 Permissions (4:28)
-
3.3 Data Policies (6:23)
-
3.4 Manage Application security (8:53)
-
3.5 Validate application input (4:26)
-
3.6 Manage Device and Host Security (4:36)
-
3.7 Operating System Security (10:34)
-
3.8 TCB (9:17)
-
3.9 Logging (3:12)
-
3.10 Security Baseline (4:44)
-
3.11 Manage Mobile Security (4:33)
-
3.12 Fundamentals of Network- Part 1 (5:16)
-
3.13 Fundamentals of Network- Part 1
-
3.14 Fundamentals of Network- Part 2 (3:33)
-
3.15 Fundamentals of Network- Part 2
-
3.17 Fundamentals of Network-Part 3 (4:04)
-
3.18 Fundamentals of Network-Part 3
-
3.19 Communication Channel Security (5:38)
-
3.20 OSI Model (5:07)
-
3.21 OSI Model
-
3.22 Communication Channel Security
-
3.23 Logging and Monitoring (4:18)
-
3.24 Logging and Monitoring
-
3.25 Control Monitoring (3:18)
-
3.26 Control Monitoring
Domain4: Implementing Network Security
-
4.1 Implementing Network Security (4:04)
-
4.2 IDS / IPS (6:53)
-
4.3 Types of Firewall (10:38)
-
4.4 Risk Management (4:32)
-
4.5 Risk management
-
4.5 Threat and Vulnerability Identification (5:02)
-
4.6 Threat and Vulnerability Identification
-
4.7 Risk Scenario (7:49)
-
4.8 Risk Scenario
-
4.9 Metrics and Reporting (3:24)
-
4.10 Metrics and Reporting
-
4.11 BCP (5:48)
-
4.12 BCP
-
4.13 Risk Assessment and Identification (5:43)
-
4.14 Risk Assessment and Identification
-
4.15 Post-Incident Reviews and Lessons Learned (3:53)
-
4.16 Post-Incident Reviews and Lessons Learned
-
4.17 Incident Classification and Prioritization (5:52)
-
4.18 Incident Classification and Prioritization
-
4.19 Key Performance Indicators (KPIs) (5:16)
-
4.20 Key Performance Indicators (KPIs)
Domain5: Implementing Compliance and Operational Security
-
5.1 Physical Security (5:31)
-
5.2 Legal Compliance (3:52)
-
5.3 Security Awareness and Training (6:31)
-
5.4 Security in the Engineering Lifecycle (5:49)
-
5.5 Security in the Engineering Lifecycle
-
5.6 System Component Security- Part 1 (5:15)
-
5.7 System Component Security- Part 1
-
5.8 System Component Security - Part 2 (3:44)
-
5.9 System Component Security - Part 2
-
5.10 System Component security - part 3 (4:18)
-
5.11 System Component Security - Part 3
-
5.12 Controls and Countermeasures in Enterprise Security (8:59)
-
5.13 Controls and Countermeasures in Enterprise Security
-
5.14 Secure Software Development Lifecycle (SDLC) - Part 1 (4:28)
-
5.15 Secure Software Development Lifecycle (SDLC) - Part 1
-
5.16 Secure Software Development Lifecycle (SDLC)- Part 2 (5:28)
-
5.17 Secure Software Development Lifecycle (SDLC)- Part 2
-
5.18 Secure Software Development Lifecycle (SDLC)- Part 3 (5:16)
-
5.19 Secure Software Development Lifecycle (SDLC)- Part 3
-
5.20 Secure coding practices-Part 1
-
5.21 Secure coding practices-Part 1 (4:56)
-
5.22 Secure coding practices- Part 2 (3:43)
-
5.23 Secure coding practices- Part 2
Domain6: Risk Management
-
6.1 Introduction to Risk (6:17)
-
6.2 What is a Risk ? (11:59)
-
6.3 Asset Evaluation (18:28)
-
6.4 Vulnerability Assessment Tools (Nessus) (13:45)
-
6.5 Cryptography Basics - Part 1 (3:05)
-
6.6 Cryptography Basics - Part 1
-
6.7 Cryptography Basics - Part 2 (0:53)
-
6.8 Cryptography Basics - Part 2
-
6.9 Cryptography Basics - Part 3
-
6.10 Cryptography Basics - Part 3 (1:55)
-
6.11 Symmetric vs. Asymmetric Cryptography (2:34)
-
6.12 Symmetric vs. Asymmetric Cryptography
-
6.13 Cryptography Applications (PKI,Digital Certificates and Signature)
-
6.14 Cryptography Applications (PKI,Digital Certificates and Signature)
-
6.15 Cryptography Applications (Digital Rights Management, Hishing) (6:55)
-
6.16 Cryptography Applications (Digital Rights Management, Hishing)
Domain7: Troubleshooting and Managing Security Incidents
Domain8: Business Continuity and Disaster Recovery Planning
