Week 4: Security Flashcards
What do we want to sercure?
Assets
Give me examples of assets?
- webpage
- database
- company reputation
What elements does security rely on?
- Authentication
- Authorizaiton
- Auditing
- Confidentiality
- Integrity
- Availability
What is a threat?
Any POTENTIAL OCCURRENCE, malicious or otherwise, that could HARM an ASSET
What is a vulnerability?
A weakness that makes a THREAT POSSIBle
What is an attack?
An action that EXPLOITS a VULNERABILITY or ENACTS a THREAT
Gimme examples of security vulnerabilities bitch
- Code injection
- Broken authentication and session management
- Cross site scripting
- Poor programming
What is a code injection?
The insertion of MALICIOUS CODE into legitimate traffic sent to an ENDPOINT
What are the two very simple goals that security hinges upon?
- Keep UNAUTHORIZED persons from gaining access to RESOURCES
- Ensure AUTHORIZED persons can access resources they need
What is Authentication?
the process of confirming a user’s Identity
More technical definition of authentication?
Mechanism of associating an incoming request with a set of identifying credentials
What does authentication determine?
Access levels or privileges:
- System resources
- data
- application features
