Cyber Security

Question 1

What are the three types of security threats? Briefly explain them

CIA triad

Answer 1

1. Confidentiality Threat - Attacks data: Gain unauthorized access to private information
2. Availablility Threat - Attacks program: Deny access to the system
3. Integrity Threat - Attacks data and/or program: Intends to the damage/modify the program and/or data

Question 2

What are the eight core cyber security knowledge areas?

Answer 2

1. Data security
2. Software security
3. Component security
4. Connection security
5. System security
6. Organisational security
7. Human security
8. Societal security

Question 3

Security management and operational security… What are they and their significance?

Answer 3

Security management is the underlying framework, principles and policies put in place to protect assets. Where operational security are best-practices put in place to help users protect themselves and/or an organisation from security threats. These compliement each other.

E.g. rules/policies about authentication put in place. Best-practice is multi-factor authentication

Security Management: Authorisation, authenitcation, system infrastructure management, attack monitoring and backups
Operational Security: Auto-logout, user command logging, multi-factor authentication

Question 4

What are the three authenitcation approaches?

Answer 4

1. Knowledge based
2. Possesion based
3. Attribute based

Question 5

What are the attacks taught for cybersecurity and breifly explain them and link to the three types of threats

There are more than these but these are just the ones taught

Answer 5

1. SQL Poisoning - Injection attack: Input malicious SQL responses into input fields (integrity)
2. Cross-site scripting - Injection attack: Malicious javascript in the ebpage executes and damages/steals information (integrity/Confidentiality)
3. Session-hijacking attack - MinM attack: Steal session cookie to impersonate an authorised user (confidentiality)
4. DDoS - Denial of Service attack: Distributed DoS affects many stations. Floods server with requests to deny access (availbality)
5. Brute force - Brute force attack: Repeatedly try to gain access via, for example, password generation (confidentiality)