Building Blocks W1

Question 1

What is Cybersecurity?

Answer 1

technologies and processes and practices designed to prevent, detect, and recover networks, computers, programs and data from attack, damage or unauthorized access.

Question 2

What is the CIA Triad?

Answer 2

Confidentiality, Integrity, Availability.

Confidentiality – Concealment of information or resources
Integrity – Trustworthiness of data or resources
Availability – Ability to use information or resource by “authorized” parties

Question 3

Where do Security Policies come from?

Answer 3

– Security Engineering
– Business
– Risk Management
– Legal and Compliance

Question 4

The Adversary – Who are they?

Answer 4

1. Script kiddies
2. Brokers
3. Insiders
4. Cyber terrorists
5. Hacktivists
6. State-sponsored

Question 5

What is a Threat?

Answer 5

Threat: the adversary steals the password, the adversary steals some money, the adversary
disrupts a service

Question 6

What is a Threat model

Answer 6

“An adversary capability”

– E.g. The adversary can eavesdrop on traffic, the adversary controls a server and can make it act arbitrarily.