Cyber Security Flashcards
How a system is not just one thing
Operating system (environment of application, performs actions on hardware on behalf of application)
Network - many devices connected, layers communicate horizontally
The application
Enterprise - software for organisational use
Zawinksis law , second system effect and tony hoare
Program attempts to expand until it can read mail, if it can’t it’s replaced by one that can
When designing a successor to a small system people get carried away and create a huge complex one
There’s two ways to construct a software design
1) so simple there’s obviously no Defects
2) so complex there’s no obvious defects
Security misconfiguration
Most common gaps hackers look to exploit
Why does it happen
Bad default settings
Awareness / knowledge gap
Hard to Audi secure misconfigurations
Changing environment
Incentives classic approach
Most businesses want to optimise time to market
Startups want to test ideas
Existing companies want to remain competitive
Software developers are rewarded for new features, change and as fast as possible
System admin are rewarded for stale system,being conservative and maintaining availabilityo
System setup
User
Applications
Operating system
Hardware
(Each stage interacts with the stage before and after it)
Cyber security
People process technology
Availability -( info/resource available for use )
Integrity - ( complete and in correct state)
Confidentiality (only authorised party can access)
