CySA+
  • CySA+ CS0-002 Exam Objectives
  • Threat Intelligence Cycle
  • Intelligence Sources
  • Security Intelligence Sharing
  • Threat Classification and Threat Actors
  • Threat Research and Indicators of Compromise
  • Attack Frameworks and The Cyber Kill Chain
  • Defining Threat Modeling and Threat Hunting
  • Vulnerability Identification and Validation
  • Vulnerability Scan Results and CVSS Scores
  • Nmap and Enumeration
  • Security Controls
  • Defense in Depth Security Baselines
  • Security Trend Analysis
  • Remediation Issues
  • Asset, Change, and Configuration Management
  • Software Development Lifecycle & Development Models
  • Software Assessment and Code Review
  • Mitigating Attack Types Part 1
  • Mitigating Attack Types Part 2
  • Mitigating Attack Types Part 3
  • Password Cracking and Hashing
  • Privilege Escalation & Man-in-the-Middle
  • Network Based IoCs
  • Host Based IoCs
  • Network Architecture and Segmentation
  • Network Traffic, Packet, and Protocol Analysis
  • Pentesting and Active Defense
  • Firewalls
  • URL Analysis & DNS in Malware
  • Network Access Control and Port Security
  • Identity and Access Management (IAM)
  • Web Application Scanners
  • SSL/TLS Digital Certificate Management
  • Mobile Threats
  • Email Threats and Mitigation
  • Data Loss Prevention (DLP)
  • Endpoint Security and Behavior Analysis
  • Hardware Assurance
  • Blackholes and Sinkholes
  • IoT, Embedded Systems & ICS/SCADA Threats
  • Log Analysis & Continuous Security Monitoring
  • SIEM and Event Correlation
  • Malware Analysis
  • Cloud Models and Service Threats
  • Cloud Automation and Other Cloud Threats
  • VDI, Containers, and Microservices
  • CI/CD, IaC, DevOps
  • AI and Machine Learning
  • Digital Forensics
  • Technical Controls for Securing Data
  • Non-Technical Controls for Securing Data
  • Security Policies and Procedures
  • Continuity Planning and Risk Assessment
  • Incident Response Phases and Communication
Powered by GitBook
On this page

Hardware Assurance

  • Malware for hardware? Of course!

  • Supply chain assessments

    • Trust off the shelf products?

    • Vendor Assessment

      • Risk management

      • Support

      • Forensic assistance

      • Historical reliability

    • Second-hand / grey market

    • Trusted Foundry

  • Hardware Root of Trust (RoT) or Trust Anchor

    • Secure subsystem providing attestation

    • RoT implemented as a Trusted Platform Module (TPM) chip

      • Crytpographic processor and storage

      • Endorsement key

      • Tamper proof. Crypto shredding

      • PUF – Physical Unclonable Function

      • Tpm.msc

    • Hardware Security Modules (HSM)

      • Alternative to TPM

      • Removable, appliance or PCI card

      • Entrust

      • Thales

      • Enabled for cloud services as well

      • Cryptographic storage in the cloud is called a vault

    • Trusted firmware

      • Firmware runs with highest privileges

      • BIOS

      • UEFI

        • Secure boot (digital certs)

        • Measured boot and attestation (for NAC systems)

      • Trusted Frimware updates

        • Whose digital signatures do you trust?

        • Intel Boot Guard

      • eFuse

        • Each firmware update blows one fuse

        • Number of blown fuses => number of updates/tampering

      • Self encrypting Drives (SEDs)

        • Offload crypto operations to the drive itself

        • Media Encryption Key (MEK)

        • Key Encryption Key (KEK)

        • TPM vs password

      • Secure Processing

        • Trusted execution – TPM validates OS kernel

        • Secure enclave – Secure area by a process for crytopgraphic keys

        • Processor Security Extension – Low level instructions

          • SME (AMD)

          • TXT (Intel)

          • SGE (Intel)

        • Atomic execution – Protects against race conditions and buffer overflows

          • TOC/TOU

        • Bus encryption – Secure data in transit in the hardware.

PreviousEndpoint Security and Behavior AnalysisNextBlackholes and Sinkholes

Last updated 2 years ago