Threats, Vulnerabilities, Mitigation 1

Question 1

How can you attribute threath actors?

Answer 1

• Internal/external
• Recources/funding
• Level of sophistication/capability

Question 2

What are Message Based vectors?

Answer 2

• Message systems are one of the biggest threat vectors
• Email, SMS
• Often Phishing and Social Engineering attacks used

Question 3

What are Image based vectors?

Answer 3

• Easier to disguise then text based
• Image formats: SVG, XML
• HTML Injection, Javascript attack code

Question 4

What are File-based vectors?

Answer 4

For Example:

Adobe PDF
* File format can contain many other objects

ZIP/RAW Files
* Contains many different files

Microsoft Office
* Documents with macros
* Add-in files

Question 5

What are Voice-Call vectors?

Answer 5

• Vishing
• Spam over IP (Large scale phone calls)
• Call tampering (Disrupting voice calls)

Question 6

What are Removable device vectors?

Answer 6

• Get around firewall via USB interface
• Malicious software on USB flashdrive
• USB device acting as keyboard
• Data exfiltration

Question 7

What are Vulnerable Software vectors?

Answer 7

Client Based
* Infected executables
* Known (or unknown) vulverabilities

Agentless
* No installed executables
* Compromised software on server could affect others
* Client runs new instance each time

Question 8

What are Unsupported System vectors?

Answer 8

• Patching crucial since they are not patched
• Outdated operating systems
• Single systems could be entry

Question 9

What are Unsecure network Vectors?

Answer 9

• Outdated security protocols (WEP, WPA, WPA2)
• Better uses 802.1.x protocol
• Via Bluetooth

Question 10

What are Open service port vectors?

Answer 10

Most network-based services connects over TCP or UDP ports
* “Open” port

Every open port is opportunity for attacker
* Application vulnerability or misconfiguration

Every service needs port
* More services, more attack surface

Firewall Rules
* Must allow traffic to an open port

Question 11

What are default credential vectors?

Answer 11

• Many devices have default usernames and passwords
• Right credentials provide full control
• Administrator access

Question 12

What are Supply chain vectors?

Answer 12

• Tamper with underlying infrastructure or manufacturing process
• Suppliers, third parties

Question 13

What are Human/social Engineering?

Answer 13

• Phishing
• Impersonating
• Watering Hole
• Misinformation
• Brand Impersonation