IP Address – Identifies a device on a network. IPv4 and IPv6 are commonly used.
MAC Address – A unique hardware address assigned to a network interface.
Ports – Logical communication endpoints. Common ports: 80 HTTP, 443 HTTPS, 22 SSH, 53 DNS, 3389 RDP.
Protocols – Rules for communication, such as TCP, UDP, HTTP, HTTPS, DNS, DHCP, FTP, SSH.
TCP vs UDP – TCP is connection-oriented and reliable; UDP is faster but does not guarantee delivery.
DNS – Converts domain names like example.com into IP addresses.
DHCP – Automatically assigns IP addresses and network configuration to devices.
Firewall – Controls network traffic based on rules and helps block unauthorized connections.
VPN – Creates an encrypted connection between a device and a remote network.
NAT – Translates private IP addresses to public IP addresses, commonly used in routers.
Subnetting – Divides a network into smaller networks for better organization, security, and traffic management.
OSI Model – 7 layers: Physical, Data Link, Network, Transport, Session, Presentation, Application.
HTTP vs HTTPS – HTTPS uses encryption (TLS), making web communication more secure.
Common Cybersecurity Attacks – Port scanning, DDoS, MITM, DNS attacks, ARP spoofing, brute force, and packet sniffing.
Why SOC Analysts Need Networking – To understand source/destination IPs, ports, protocols, network connections, suspicious traffic, and attack patterns in security logs.
Top comments (0)