Chapter 9 - Security

Question 1

3 main characteristics of security

Answer 1

confidentiality

integrity

availability

Question 2

what is confidentiality

Answer 2

the property that data or services are protected from unauthorized access

Question 3

what is integrity

Answer 3

the property that data or services are not subject to unauthorized manipulation

Question 4

3 other characteristics of security

Answer 4

authentication

non-repudiation

authorization

Question 5

what is authentication?

Answer 5

verifies the identities of the parties to a transaction and checks if they are who they claim to be

Question 6

what is non-repudiation

Answer 6

guarantees that the sender of message cannot deny having sent it and the recipient cannot deny having received it

Question 7

what is authorization

Answer 7

grants a user privileges to perform a task

Question 8

what is security

Answer 8

a measure of the system’s ability to protect data and information from unauthorized access while still providing access to people and systems that are authorized

Question 9

what is an attack

Answer 9

an action taken against a computer system with the intention of doing harm

Question 10

general scenario: 2 possible values for source

Answer 10

human

another system

(either inside or outside organization)

Question 11

general scenario: 5 possible values for stimulus

Answer 11

unauthorized attempt to:

• display data
• change or delete data
• access system services
• change the system behavior
• reduce availability

Question 12

general scenario: 3 possible values for artifact

Answer 12

• data within system
• component or resources of the system
• data produced or consumed by the system

Question 13

general scenario: 6 possible values for environment

Answer 13

• online or offline
• connected or disconnected from a network
• behind a firewall or open to a network
• fully operation
• partially operational
• not operational

Question 14

general scenario: the 2 categories of the response

Answer 14

transactions are carried out in a certain way

the system tracks activities in it

Question 15

general scenario: response: 5 ways the system carries out transactions

Draw a picture

Answer 15

• data or services are protected from unauthorized access
• data or services are not being manipulated without authorization
• parties to a transaction are identified with assurance
• parties to the transaction cannot repudiate their involvement
• the data resources and system services will be available for legitimate use

Question 16

3 ways the system tracks activities within

Answer 16

recording access/modification

recording attempts to access data, resources, or services

notifying appropriate entities when an apparent attack is occuring

Question 17

general scenario: 5 possible values for response measure

picture

Answer 17

how much of a system is compromised when a particular component or data value is compromised

how much time passes before the attack was detected

how many attacks were resisted

how long does it take to recover from a successful attack

how much data is vulnerable to a particular attack

Question 18

4 categories of security tactics

Answer 18

detect

resist

react

recover

Question 19

4 ways to detect attacks

Answer 19

detect intrusion

detect service denial

verify message integrity

detect message delay

Question 20

what is detecting intrusion

Answer 20

compare network traffic or service request patterns within a system to a set of signatures or known patterns of malicious behaviors stored in a DB

Question 21

what is detecting service denial

Answer 21

comparison of the pattern or signature of network traffic coming into a system to historic profiles of known DoS attacks

Question 22

what is verifying message integrity

Answer 22

use techniques such as checksums or has values to verify the integrity of messages

Question 23

what is detecting message delay

Answer 23

checking the time that it takes to deliver a message, in attempt to detect suspicious timing behavior

Question 24

4 ways to resist attacks

Answer 24

identify actors

authenticate actors

authorize actors

limit access

Question 25

4 more ways to resist attacks

Answer 25

limit exposure

encrypt data

separate entities

change default settings

Question 26

what does it mean to identify actors

Answer 26

identify the source of any external input to the system

Question 27

what does it mean to authenticate actors

Answer 27

ensure that an actor is actually who they claim to be

Question 28

what does it mean to authorize actors

Answer 28

ensuring that an authenticated actor has the rights to access and modify either data or services

Question 29

what does it mean to limit access

Answer 29

limiting access to resources such as memory, network connections, or access points

Question 30

what does it mean to limit exposure

Answer 30

minimize the attack surface of a system by having the fewest possible number of access points

Question 31

what does it mean to separate entities

Answer 31

have physical separation of different servers attached to networks, the use of VMs, or air gap

Question 32

what does it mean to change default settings

Answer 32

force the user to change the settings assigned by default

Question 33

3 ways to react to attacks

Answer 33

revoke access

lock computer

inform actors

Question 34

what does it mean to revoke access

Answer 34

limit access to sensitive resources, even for normally legitimate users and uses, if an attack is suspected

Question 35

what does it mean to inform actors

Answer 35

notify operators, other personnel or cooperating systems when an attack is suspected or detected

Question 36

1 way to recover from attacks

Answer 36

audit

Question 37

what does it mean to audit

Answer 37

keep a record of user and system actions and their effects, to help trace, the actions of , and to identify, an attacker

Question 38

Goal of Binding time

Answer 38

determine where an instance of a late bound component may be untrusted

Question 39

5 factors for choice of technology

Answer 39

• what technologies help user authentication
• help data access rights
• resource protection
• data encryption
• does chosen technology support the chosen tactics