Certified Penetration Testing Engineer - Mile2

20.1 Overview
20.2 Introduction
20.3 Encryption
20.4 Cryptographic Definitions
20.5 The Science of Secret Communications
20.6 Encryption Algorithm
20.7 Implementation
20.8 Symmetric Encryption
20.9 Symmetric Downfalls
20.10 Symmetric Algorithms
20.11 Crack Times
20.12 Asymmetric Encryption
20.13 Asymmetric Advantages
20.14 Asymmetric Disadvantages
20.15 Asymmetric Algorithms
20.16 Key Exchange
20.17 Symmetric vs Asymmetric
20.18 Hybrid Encryption
20.19 Hashing
20.20 Common Hash Algorithms
20.21 Birthday Attack
20.22 Hash Demo
20.23 Security Issues in Hashing
20.24 Hash Collisions
20.25 MD5 Collision Creates Rogue Certificate
Authority
20.26 More Hybrid Encryption
20.27 Digital Signatures
20.28 SSL/TLS
20.29 SSL Connection Setup
20.30 SSL Hybrid Encryption
20.31 SSH
20.32 IPSec
20.33 PKI
20.34 Quantum Cryptography
20.35 Attack Vectors
20.36 Network Attacks
20.37 More Attacks
20.38 Review
20.39 A5 Lab – Cryptography
20.39.1 Exercise 1 – Caesar Encryption
20.39.2 Exercise 2 – RC4 Encryption
20.39.3 Exercise 3 – IPSec Deployment
Appendix 6 – Economics and Law
21.1 Overview
21.2 Security Incentives and Motives
21.3 What is Your Weakest Link?
21.4 What is the Value of an Asset?
21.5 Non-Obvious Vulnerabilities
21.6 Categorizing Risks
21.7 Types of Losses
21.8 Approaches to Analyzing Risk
21.9 Who Uses What Analysis Type?
21.10 Qualitative Analysis Method
21.11 Quantitative Analysis
21.12 Can a Purely Quantitative Method be
accomplished?
21.13 Comparing Cost and Benefit
21.14 Cost of a Countermeasure
21.15 CyberCrime
21.16 Not Just Fun and Games
21.17 Example of Computer Crimes
21.18 Perpetrators
21.19 Attack Types
21.20 Telephone Fraud
21.21 Identification Protection and Prosecution
21.22 Privacy of Sensitive Data
21.23 Privacy Issues – US Laws and Examples
21.24 EU Principles on Privacy
21.25 Transborder Information Flow
21.26 Employee Privacy Issues
21.27 U.S. Law
21.28 Common Laws – Civil
21.29 Common Laws – Criminal
21.30 Common Laws – Administrative
21.31 U.S. Federal Laws
21.32 Intellectual Property Laws
21.33 Trademark and Patent
21.34 Software Licensing
21.35 Digital Millennium Copyright Act
21.36 Investigating
21.37 Computer Crime and its Barriers
21.38 Countries Working Together
21.39 Security Principles for International Use
21.40 Has a Crime Been Committed?
21.41 Bringing in Law Enforcement
21.42 Citizen vs Law Enforcement Investigation
21.43 Investigation of Any Crime
21.44 Role of Evidence in a Trial
21.45 Evidence Requirements
21.46 Chain of Custody
21.47 How Evidence is Processed
21.48 Evidence Types
21.49 Hearsay Rule Exception
21.50 Responding to an Incident
21.51 Preparing for a Crime before it happens!
21.52 Incident Handling
21.53 Evidence Collection Topics
21.54 Specialized Skill
21.55 Trying to Trap the Bad Guy
21.56 Companies Can be Found Liable!
21.57 Review
10