1.1 Cybersecurity Landscape

Question 1

Web 3.0 main features

Answer 1

1. Semantic Web
2. Artificial Intelligence
3. 3D Graphics
4. Connectivity
5. Ubiquity

Question 2

Enterprise 2.0

Answer 2

The use of emergent social software platforms within companies, or between companies and their partners or customers.

Question 3

Unintended consequences of Mobile computing (unsure benefits and the inherent risks).

Answer 3

• Implicitly allow personal technology and apps

- Explicitly prohibit their use, but unable to effectively enforce such policies.

Question 4

Adverse results of ineffective mobile computing policies

Answer 4

• Lost productivity
• Potential disruption of critical business operations
• Exposure to additional risks
• Penalties for regulatory non-compliance

Question 5

Techniques used to circumvent port-based firewall

Answer 5

• Port hopping
• Use of non-standard ports
• Tunneling within commonly used services
• Hiding within SSL encryption

Question 6

Attack vector

Answer 6

A path or tool that an attacker uses to target a network

Question 7

Cloud security trade-offs

Answer 7

Simplicity or Function
Efficiency or Visibility
Agility or Security

Question 8

Cloud computing contrary to network security

Answer 8

• Cloud computing doesn’t mitigage existing network security risks.
• Separation and segmentation are fundamental to security; the cloud relies on shared resources.
• Security deployments are process-oriented; cloud computing environments are dynamic.

Question 9

SaaS Aplication Risks

Answer 9

• Malicious outsiders
• Malicious insiders
• Accidental data exposure
• Accidental share
• Promiscuous share
• Ghost (or stale) share

Question 10

Security Compliance

Answer 10

• Canada Personal Infromation Protection and Electronic Documents Act (PIPEDA)
• Eurpoean Union General Data Protection Regulation (GDPR)
• EU Netwrok and Information Security (NIS) Directive
• North American Electric Reliability Corporation (NERC) Critical Infrastructure Protection (CIP)
• Payment Card Industry Data Security Standards (PCI DSS)
• US Cybersecurity Enhancement Act of 2014
• US Cybersecurity Information sharing Act (CISA)
• US Federal Exhancge Data Breach Notification Act of 2015
• US Federal Information Security Modernization Act (FISMA)
• US Gramm-Leach-Bliley Act (GLBA)
• US Health Insurcance Portability and Accountability Act (HIPPA)
• US National Cybesecurity Protecion Advancement Act of 2015.
• US Sarbanes-Oxley (SOX) Act

Question 11

Lessons from recent cyberattack

Answer 11

• A “low and slow” cyberattack can go undetected for weeks, month, or even years.
• An attacker will target an auxiliary system or other vulnerable endpoint, then pivot the attack toward the primary target.
• Unpatched vulnerabilities are a commonly exploited attack vector.
• The direct and indirect financial cost of a breach can be devastating.