Network security

General concepts

• Internet design goals and priorities
• Protocol layers
• Protocol encapsulation
• Data link, network, transport takers
• Broadcast

Link layer

• CAM overflow

• Switch table

• Forwarding & filtering

• Port security

• 802.1x

• Managed switch

• LAN vs. VLAN

• VLAN trunking

• 802.1Q, Extended Ethernet frame

• VLAN hopping attack

• Auto-trunking

Link layer - Network layer interaction

• ARP cache poisoning

• MAC address vs. IP address

• ARP table (cache)

• Gratuitious ARP

• Dynamic ARP inspection

• DHCP spoofing

Transport layer

• TCP sequence numbers
• TCP sequence number prediction attack
• TCP SYN flooding attack
• SYN cookies

Routing

• Purpose of BGP
• BGP advertisements
• BGP hijacking
• Longer route prefixes
• RPKI framework
• Longer route prefixes/More specific routes

DNS

• Domain Name System (DNS), DNS Resolver
• Pharming attack
• DNS spoofing attack, cache poisoning
• Query ID
• DNSSEC
• DNS TTL (time to live)
• DNS Rebinding attack
• DNS pinning