Chapter 1

Attackers from anywhere in the world can send
attacks

Attackers can launch attacks against millions
of computer within minutes

Attack tools vary their behavior so the same
attack appears differently each time

Attacks are no longer limited to highly skilled
attackers

Attackers can discover security holes in
hardware or software more quickly

Vendors are overwhelmed trying to keep pace
updating their products against the latest
attacks

Many software products lack a means to
distribute security updates in a timely fashion

Attackers use thousands of computers in an
attack against a single computer or network

Users are required to make difficult security
decisions with little or no instruction

Those who implement and properly use security
products to protect data.

Form the security around the data. May be as
basic as door locks or as complicated as
network security equipment.

Enterprises are having difficulty providing
security for a wide array of personal devices

Plans and policies established by an enterprise
to ensure that people correctly use the
products.

The tasks of securing information that is in a digital format?

Confidentiality, integrity, and availability.

Only approved individuals may access information

information is correct and unaltered.

information is accessible to authorized users

to ensure that protective measures are properly implemented to ward off attacks and prevent the total collapse of the system when a successful attack occurs.

item that has value

type of action that has the potential to cause harm

a person or element with power to carry out a threat.

flaw or weakness that allows a threat agent to bypass security.

the means by which an attack can occur.

A situation that involves exposure to some type of danger.

Accept, transfer, avoid and mitigate.

Risk is acknowledged but no steps are taken to address it.

transfer risk to a third party.

identifying risk but making the decision to not engage in the activity.

attemp to address risk by making the risk less serious.

stealing another persons personal information.

a term used to describe individuals who launch attacks against other uses and their computers.

individuals who want to attack computers yet they lack the knowledge of computers and network needed to do so.

an attacker commissioned by the governments to attack enemies' information systems

Advanced persistent threat: multiyear intrusion campaign that targets highly sensitive economic, proprietary or national security information.

competitors, organized crime, brokers and cyberterrorists.

Layers, Limiting, diversity, obscurity, and simplicity

layered security approach provides the most comprehensive protection and makes it unlikely that an attacker can break through all defense layers.

Limiting access to information reduces the threat against it.

technology based- Such as file permissions. Procedural- Such as prohibiting document removal from premises.

layers must be different (diverse)

because the same techniques used to break the previous layer will be unsuccessful.

using security products from different manufacturers.

obscuring inside details to outsiders?

a secure system should be simple from the inside but complex from the outside.

hacktivists.

Layered security

using technology that is carried out or managed by devices as a basis for controlling the access to and usage of sensitive data.

devices that are not formally identified or documented in an enterprise.

an attack in which there are no days of warning.

a software occurence when 2 concurrent threds of execution access a shared resource simultaneously, resulting in unintended consequences.

configurations options that provide limited security choices.

a situation in which a hardware device with limited resources (CPU,Memory, File system) is exploited by an attacker who intentionally tries to consume more resources than needed.

the widespread proliferation of devices across an enterprise.

the location within an enterprise in which some threat actors perform.

a response to risk that allows a third party to assume the responsibilty of the risk.