1.1 Understanding the CIA Triad Flashcards
What is the CIA Triad? Why is it important?
This the confidentiality, integrity, and availability triad. It is the fundamental security issue. All policy revolves around addressing the triad.
C - in the CIA Triad. What’s it do? What is it for? What is the biggest threat if C is comprimised?
Confidentiality, keeping resources and secrets safe. No one but the intended receiver should have access to the resources being sent.
Encryption is an example of something address confidentiality.
Unauthorized access to resources. Unintended disclosure. HIPPA is another good example.
What is the relationship between subjects and objects as it pertains to security? What is the relationship known as?
The relationship is access control. The object is the passive resource, a file for example. The subject is the person trying to interact with object, i.e. access the file.
Computers, programs, or people can be subjects.
Balancing this relationship is controlling access to objects through limiting the powers of a the subjects.
What type of attacks affect C?
The ones that focus on decrpyting data or obtaining credentials to access restricted content. Network sniffing, social engineering, port scanning, escalation of privileges.
What types of negligence affect C?
Leaving open security access points, giving passwords out to unauthorized personnel, failing to authenticate a system before transferring data
What is object I and how does it relate to C?
Object integrity is the inability of an object to be modified without permission. If you can edit anything, whether or not the information is confidential is irrelevant.
What is sensitivity as it relates to C?
It is the quality of the data. So social security numbers is far more sensitive data than publicly available info like an address.
What is discretion?
A chance for an operator to intervene in the disclosure of information. Giving permission might be an example.
Concealment
Security through obscurity. Maybe something like hiding in plain sight. Not particularly useful. A real example would be not publishing where your data center is anywhere, making it difficult to locate.
What is integrity? What does it prevent? Why is it important?
Limiting the ability to modify data to only authorized personnel. This prevents viruses and other malicious software from making changes to data. It also prevents mistakes from employees.
Maintaining consistency of data is everything. Data has to be accurate and verifiable. It has to be crosschecked with other data to ensure validity.
Parts of integrity - Accuracy
Being correct and precise
Truthfulness
Being accurate to the real world
Authenticity
Being authentic or genuine
Validity
Being factual or logically sound
Nonrepuditation
Being unable to deny a change was made. Important in tracking mistakes and abused vulnerabilities
