Resilience

Question 1

what is software resilience

Answer 1

the ability to bounce back or recover from an attack, security event, or reliability failure

Question 2

Why don’t all services within a system need equal levels of resilience

Answer 2

because not all services in the system are critical (we can afford to have them fail and be reinstated eventually)

Question 3

2 important activities that a resilient system does

Answer 3

• immediate recovery from failure to maintain critical services
• longer term reinstatement of non-critical services

Question 4

4 sources of cybersecurity failures

Answer 4

1) organizational ignorance of problem seriousness
2) poor or lax application design of security procedures
3) human operator carelessness
4) poor trade-off between usability and security (i.e. the security procedures are annoying or hard to follow)

Question 5

3 protection types against threats

Answer 5

authorization

encryption

firewalls

Question 6

what is over-provisioning?

Answer 6

provide for resources far beyond peak load to account for bad things that may happen

Question 7

6 steps to avoid cybersecurity failures

Answer 7

1) classify assets
2) ID threats
3) ID threat recognition signs
4) threat resistance
5) asset recovery
6) asset reinstatement