In this section of the course,
we're going to discuss network attacks.
Now, security is a very important part
of running our networks
because if we don't secure our networks,
somebody is eventually going to find their way into them
and cause a data breach
or other malicious action against our organization.
Network security is critically important
in our modern networks,
especially since most of our networks are always on
and always connected
to the world's largest wide-area network, the Internet.
Now, as you're probably aware,
the Internet can be a scary place
with lots of bad people doing lots of bad things.
So in this section, we're going to focus on all the bad things
that can happen to your organization's network
when you don't secure it properly.
Now, we're going to focus solely on Domain 4 Network Security,
and we'll be covering the entirety of Objective 4.2.
Now, Objective 4.2 states that you must be able
to summarize various types of attacks
and their impact to the network.
Now, first, we're going to look at denial-of-service
and distributed denial-of-service attacks,
which attempt to overload or flood our networks
and their associated services.
Then we're going to discuss MAC flooding,
which attempts to overload our network switches
and to try to make them act like an insecure network device,
like a hub, so that way, our attacker can breach
our confidentiality of our data.
Next, we're going to learn about ARP,
or Address Resolution Protocol, attacks like ARP spoofing
and ARP cache poisoning.
After that, we're going to explore VLAN hopping
and how an attacker can try to move
from one secure subnet into another
to breach our confidentiality and integrity.
Then we're going to cover Domain Name System attacks,
like DNS spoofing, DNS poisoning, and DNS zone transfers.
Next, we'll take a look at on-path attacks
where an attacker tries to trick your network clients
into connecting to them first
and then proxying that data from the network client
to the network servers while remaining
in between the communication session the entire time.
After that, we're going to explore rogue devices
and attacks, including unauthorized devices
being connected to your network
and the use of evil twins next to your wireless networks
that will try to trick your users
into providing their data to an attacker.
Then we'll discuss social engineering attacks,
like phishing, spear-phishing, wailing,
and numerous others, as well as providing you
with a short demonstration to show you just how easy it is
to conduct a phishing attack these days.
Next, we'll explore malware attacks like viruses, worms,
and Trojans, and I'll also do a short demonstration
to show you how a virus and a Trojan can be used
by an attacker or a penetration tester during their attacks.
Finally, we'll take a short quiz to see what you learned
during this section of the course and review your answers
to ensure you know why the right answers were right
and the wrong answers were wrong.
So if you're ready, let's get started with our coverage
of network attacks in this section of the course.