Attack Surfaces and Attack Trees

Question 1

What is an attack surface analysis?

Answer 1

An attack surface analysis is a useful technique for assessing the
scale and severity of threats to a system.

Question 2

What is the defense-in-depth strategy

Answer 2

a cybersecurity approach that uses multiple layers of security for holistic protection.

Question 3

What is an attack tree?

Answer 3

An attack tree is a branching, hierarchical data
structure that represents a set of potential
techniques for exploiting security vulnerabilities

Question 4

What do the following abbreviations stand for?

UT/U

CC

IBS

Answer 4

User terminal and user (UT/U): These attacks target the
user equipment, including the tokens that may be
involved, such as smart cards or other password
generators, as well as the actions of the user.
Communications channel (CC): This type of attack
focuses on communication links.
Internet banking server (IBS): These types of attacks
are offline attack against the servers that host the
Internet banking application.