Security

Certification

(ISC)2

CISSP

CISSP Concentration, ISSAP, ISSEP, ISSMP

CSSP

ISACA

CISA

CISM

SANS

GSEC

GCFW

GCIA

GCIH

GCWN

GCUX

GSE

ISECOM

OPST

OPSA

OPSE

AIPSI

LoCSI

LoCSI-PMI

CompTIA

CompTIA Security+

Cisco

CCSP

Principles

Confidentiality

Integrity

Availability

Accountability

Process

Assesment

Vulnerability assessment

Penetration test

Risk analisys

Policy

Policy and architecture definition

Management design

Implementation

System configuration

Hardening

Audit

Scheduled penetration test

Monitoring

Physical security

Environmental monitoring

Access control

Surveillance camera systems

Interconnectivity and processing systems

Standard

ISO27001

Product

Antivirus

Access controls

Firewall

Proxy

WAF

SIM/SIEM

Commercial, RSA enVision, ArcSight ESM, IBM SiteProtector, Cisco MARS, eIQnetworks SecureVue, Q1 Labs QRadar SIEM, NitroSecurity Content-Aware SIEM, TriGeo SIM, LogMatrix EventCenter, Intellitactics SIEM, Novell Security Management, SenSage SIEM, AlienVault Pro, Splunk Enterprise

OpenSource, AlienVault/OSSIM, Splunk Free, Prelude

IDS/IPS

Commercial, Tipping Point, IBM Proventia

OpenSource, Snort, Bro, OSSEC

VPN

Policy management

Scanner

Network scanning, Nmap, Ntop

Vulnerability scanning, Nessus

Network analysis Tools

Packet sniffer, Wireshark

Attacks

Type

Access

Modification

Denial of service

Repudiation

Detection

Anomaly based

Signature based

Honeypot

Sandbox