Cryptanalyic Attacks & Secure Facilities
Ready to ace the CISSP exam? Join our study group and get the ultimate guide to the Certified Information Systems Security Professional (CISSP) certification!
Session 12 continues Domain 3: Security Architecture and Engineering. We will cover the following exam objectives:
3.7 Understand methods of cryptanalytic attacks
3.8 Apply security principles to site and facility design
3.9 Design site and facility security controls
Access slides, practice questions, and more: https://cissp.brittwhite.io
A huge thank you to Rotas Security for supporting this study group. Check them out at https://rotassecurity.com/ for your offensive security needs.
CISSP Resource Links:
Exam Outline: https://www.isc2.org/certifications/c...
Chapters:
00:00 CISSP Study Group Intro
00:41 Today's Outline
01:17 Objective 3.7: What is Cryptanalysis?
02:48 Types of Cryptanalytic Attacks
05:16 Other Cryptographic Attack Exploits
07:20 Kerberos Attacks
09:37 Fault Injection Attacks
11:06 Temporary Files Attacks
12:13 Implementation Attacks
13:08 Birthday Attacks
14:09 Cryptanalysis Key Takeaways
14:52 Objective 3.8: Physical Security
15:30 Physical Security Threats
16:11 Security Surveys
17:49 Security Survey Key Terms
19:28 Layered Defense Model
21:00 Secure Facility Site Selection
21:54 Crime Prevention Through Environmental Design (CPTED)
22:54 Secure Facility Design Examples
24:31 Physical Security Design Takeaways
25:37 Objective: 3.9: Physical Security Controls
27:22 Perimeter Security Elements
28:42 Physical Access Control Methods
30:39 ATM Skimming Threat
31:44 Surveillance & Detection
33:09 Environmental Control Systems
35:36 Infrastructure Support Systems
39:26 Securing Critical Areas
40:37 Physical Security Control Takeaways
42:09 Session Recap
43:53 Conclusion & Next Steps