Cyber Security - Intro to Security

Question 1

Sophisticated Attacks

Answer 1

These attacks are complex and are difficult to detect and thwart. They use common internet tools and protocols which make it hard to tell if its an attack or traffic. Their behavior also varies.

Question 2

Proliferation of Attack Software

Answer 2

Wide variety of attack tools that are available on the internet that anyone can use if they have moderate technical knowledge.

Question 3

Attack Scale and Velocity

Answer 3

The scale and velocity of an attack could grow to millions of computers in minutes or days because of its ability to proliferate on the internet.

Question 4

Confidentiality

Answer 4

Ensures that data is not disclosed to unintended people. This can happen through encryption which converts the data to a form that is harder for a unintended person to use.

Question 5

Integrity

Answer 5

Ensures data isn’t modified or tampered with. Provided through hashing.

Question 6

Availability

Answer 6

Ensures uptime of the system so that data is available when needed.

Question 7

Non-repudiation

Answer 7

Provides validation of a messages origin.

Question 8

Physical Security

Answer 8

Includes all hardware and software necessary to secure data. Firewalls and antivirus softwares.

Question 9

Users and Administrators

Answer 9

The people who use the software and people who manage the software.

Question 10

Policies

Answer 10

Rules an organization implements to protect information.

Question 11

Asset

Answer 11

Something that has value to the person or the organization.

Question 12

Threat

Answer 12

Entity that can cause the loss of an asset or any potential danger to the confidentiality.

Question 13

Threat Agent

Answer 13

Entity that can carry out a threat. Example is when a disgruntled employee who copies a database to a thumb drive and sells it to a competitor.

Question 14

Vulnerability

Answer 14

Weakness that allows a threat to be carried out. Such as a USB port that is enabled on the server hosting the database or a server room door that is open.

Question 15

Exploit

Answer 15

Procedure or product that takes advantage of a vulnerability to carry out a threat.

Question 16

Employee Threat Agent

Answer 16

Employees can be overlooked and most dangerous threat because that have a greater access to the information assets than anyone else.

Question 17

Spy Threat Agent

Answer 17

Spies can be employed in a corporate to obtain information about competitors or for commercial purposes

Question 18

Hacker

Answer 18

A Hacker is any threat agent who uses their technical knowledge to bypass certain security mechanisms to exploit something in a system, usually a vulnerability