ch1

Question 1

what’s cyber security

Answer 1

the protection of digital assets (data ,hardware ,software and network) by addressing possible threats that may result in unauthorized information disclosure, theft, or damage

Question 2

Computer Security

Answer 2

• Fous : Protection of computer
• Computer secure when the computer does what it is supposed to do and only what it is supposed to do

Question 3

Information Security

Answer 3

• Focus: Protection of information, regardless of format, including:
• Paper documents
• Digital and intellectual property
• Verbal or Visual communications

Question 4

Common Threats To Security

Answer 4

1. Viruses and worms
2. Intruders
3. Insiders
4. Criminal organizations
5. Terrorists and Information warfare

Question 5

Viruses vs worm

Answer 5

viruses: need human action
worm: duplicate itself

Question 6

Malware

Answer 6

is software that has a nefarious purpose, designed to cause
problems to you as an individual (for example, identity theft) or your
system.

Question 7

two types of threats that fall under the
general heading of malware

Answer 7

Viruses and Worms

Question 8

Intruders

Answer 8

• The act of deliberately accessing
  computer systems and networks without
  authorization is generally referred to as
  “hacking”.
• Individuals who conduct this activity
  being referred to as “hackers”.
  (hacker outside the organization)

Question 9

explain why insiders are more dangerous in many respects than outside intruders

Answer 9

insiders have access and knowledge
necessary to cause immediate damage to an organization.

Question 10

Attacks by criminal organizations usually fall into the structured threat category, which is characterized by:

Answer 10

• a greater amount of planning.
• a longer period of time to conduct the activity.
• more financial backing to accomplish it.
• possibly corruption of, or collusion with, insiders.

Question 11

Information warfare

Answer 11

is warfare conducted against the information
and information processing equipment used by an adversary.

Question 12

why Nation-States highly structured?

Answer 12

they have planning, resources and time

Question 13

Attributes of Actors/ Different ways to differentiate the threat actors:

Answer 13

• by location (internal or external)
• by level of sophistication
• by level of resources or funding
• by intent or motivation

Question 14

A particular computer system is generally attacked for one of two
reasons:

Answer 14

1. Specific Target: In this case, the attacker has chosen the target not
   because of the hardware or software the organization is running but for
   another reason—perhaps a political reason.
2. Opportunistic Target: The attackers, in this case, are not targeting
   the organization; instead, they have learned of a vulnerability and are
   simply looking for an organization with this vulnerability that they can
   exploit.

Question 15

Three major considerations when securing a system:

Answer 15

1. Correctness:
   - Ensuring that a system is fully up to date, with all patches installed and proper
   security controls in place.
2. Isolation:
   - Protecting a system from unauthorized use, by means of access control and
   physical security.
3. Obfuscation:
   - Making it difficult for an adversary to know when they have succeeded.
   Increasing the workload of an attacker makes it more difficult for them to
   succeed in their attack.

Question 16

steps of Cybersecurity Kill Chain to conduct attack

Answer 16

figure 1.2

Question 17

Threat intelligence is broken down into three types, with different audiences and objectives for each:

Answer 17

• Strategic
• Broader trends typically meant for a non-technical audience
• Tactical
• Outlines of the tactics, techniques, and procedures of threat actors
  for a more technical audience
• Operational
• Technical details about specific attacks and campaigns

Question 18

Open-Source Intelligence (OSINT)/ public source

Answer 18

is the term used to describe the processes used in the
collection of threat intelligence information from public sources.

Question 19

example of open-source Intelligence (OSINT)

Answer 19

news articles, to blogs, to government reports

Question 20

Ethics

Answer 20

set of moral principles that guides an
individual’s or group’s behaviour.

Question 21

Threat intelligence is the basis of understanding adversary

Answer 21

Tactics, Techniques, and Procedures (TTPs).

Question 22

Recent Trends in Cybersecurity

Answer 22

1- Increased Accessibility: Shifting from closed environments to global access complicates security.
2- Evolving Threats: Attackers prioritize financial gain over seeking notoriety.