1. CS/IS 196 Final Exam Review Final Exam: Wednesday, December 16

2. Final Exam Overview Chapters 13 through 25 Multiple Choice Similar to questions at the end of each chapter and in the homework assignments. 50 questions You will have the full class time to complete

3. Chapter 13 Intrusion Detection Systems and Network Security Honeypots IDS – Host Based – Network Based Antivirus Anti-spam

4. Chapter 14 Baselines Baselining Good password selection Operating System Hardening Updates: – Hotfix – Patch – Service pack

5. Chapter 15 Types of Attacks and Malicious Software Spoofing War dialing War driving Trojan Logic Bomb Worm Buffer overflow

6. Chapter 16 E-mail and Instant Messaging Spam Email encryption – PGP – SMIME

7. Chapter 17 Web Components http and https Encryption algorithms Ftp and Sftp SSL/TLS Cookies

8. Chapter 18 Secure Software Development Secure Development Lifecycle – Phases – Minimizing the attack surface Database attacks – SQL injection Spiral method

9. Chapter 19 Disaster Recovery, Business Continuity, and Organizational Policies Alternate sites – Hot – Warm – Cold RAID – 0 – 1 (disk mirroring) – 5 ( data spreading with parity ) Backups – Full – Differential – Incremental – Delta

10. Chapter 20 Risk Management Risk Threat Assesment Purpose of risk management SLE, ARO, ALE – Compute ALE given SLE and ARO – ALE = SLE * ARO

11. Chapter 21 Change Management Least privilege Separation of duties Change management application to software development

12. Chapter 22 Privilege Management Groups MAC DAC RBAC – Role Based – Rule Based Time of day restrictions Password policies – Enforce History – Maximum Age – Minimum Length

13. Chapter 23 Computer Forensics Message Digests Free space Slack space Volatility of data – CPU – RAM – Hard drive – Kernel tables

14. Chapter 24 Legal Issues and Ethics Law – Statutory – Common – Administrative Computer trespass Computer Fraud and Abuse Act CAN-SPAM Act Sarbanes-Oxley Act

15. Chapter 25 Privacy Freedom of Information Act (FOIA) Cookie cutter Country with poor privacy practices Family Education Records and Privacy Act of 1974

16. The Final Exam Bring a #2 pencil and an eraser. Mr. Hodges will supply the scantron forms. Closed book, closed note, closed computer.

17. Questions Any Questions?