CISSP CORE CONCEPTS -Domain-3 | The Ultimate CISSP Course

Explore threat modeling fundamentals, STRIDE concepts, risk assessment, and defenses like least privilege, defense in depth, encryption, secure defaults, and separation of duties.

Explore secure design principles, including role-based access control, separation of duties, fail secure versus fail open, trust but verify, zero trust, privacy by design, and SAS concepts.

Explore Bell-lapadula, a lattice-based confidentiality model with star and strong star rules, contrast with Biba integrity and its no read down and no write up; covert channels are not addressed.

Explore security models such as Biba and Bell-LaPadula, Clark-Wilson with integrity and separation of duties, and Beaver Nash with Chinese wall conflict of interest, plus Graham-Denning and Harrison-Ruzzo basics.

Explore the roles of certification and accreditation, third-party testing, and evaluation criteria like common criteria, Itsec, and protection profiles, detailing assurance levels E0–E6 and the target of evaluation.

Identify system security requirements through risk assessment and threat modeling. Scope and map controls to industry standards, and differentiate data masking from tokenization while acknowledging preventive, detective, and corrective controls.

Minimize the trusted computing base, including hardware, software, and firmware, to reduce the attack surface and strengthen security, while covering ASLR, secure boot, CPU modes, and ring architecture.

Explore abstraction in security architecture, assess virtual machine isolation, and compare TPM and HSM roles, including cloud HSM options and least-privilege practices for cryptographic keys.

Explains assessing security architecture vulnerabilities, emphasizing least privilege, separation of duties, defense in depth, data emanations, encryption and VPN, and preventing SQL injection with parameterized queries.

Explain data aggregation and data inference in databases and contrast encryption strategies: full database, column, and transparent data encryption. Discuss MDM concepts for bring your own device, including anonymization.

Identify common information system vulnerabilities and cloud risks, focusing on network segmentation and misconfigurations, plus service models from IaaS to SaaS. Explore serverless and container architectures and security best practices.

Delve into core cryptography concepts, including digital signatures and non-repudiation, symmetric vs asymmetric encryption, steganography and steganalysis, hash-based macs, and password salting techniques.

Explore password hashing with salting and key stretching to produce unique salted hashes. Compare symmetric encryption's confidentiality focus with PKI concepts like X.509 certificates.

Explore how asymmetric cryptography and PKI secure communications with public and private keys, digital certificates signed by the CA. Compare block and stream ciphers; examine hashing for integrity and authentication.

Explore core cryptography concepts, including Diffie-Hellman key establishment, confusion and diffusion, and elliptic curve cryptography, with attention to digital certificates, key management, split knowledge, and key escrow.

Explore cryptoanalysis methods and attacks, from ciphertext-only and known-plaintext to side-channel exploits. Learn about stream and block ciphers, rainbow tables, captcha, and Kerberos tickets.

Explore deluge, dry pipe, wet pipe, and pre-action fire suppression systems and their uses, while prioritizing human safety, containment, and extinguishment in server rooms.