LECTURE NOTE 1

Question 1

the immunity from any risk or danger that may have undesired outcome

Answer 1

security

Question 2

put in place to safeguard what is valuable from potential harm

Answer 2

security measures

Question 3

the ability to be able to look for and identify potential or actual compromise

Answer 3

security mindset

Question 4

refers to specifically the protection from computer systems and devices from threats such as unauthorized access, use, modification, or destruction; involves protecting the hardware, software, and data that make up a
computer system

Answer 4

computer security

Question 5

A term covering the protection of information and systems from threats like hacking, malware, theft, or hardware damage, ensuring the confidentiality, integrity, and availability of information throughout its lifecycle. includes the protection of all types of information
and information systems, not just computers

Answer 5

information security

Question 6

CIA Triad

Answer 6

fundamental concept/security model in information
security and stands for three core principles: confidentiality, integrity,
and availability

Question 7

Restricting access to systems and data to only authorized parties, protecting
sensitive information from unauthorized disclosure

Answer 7

confidentiality

Question 8

protecting data from unauthorized or improper modification, maintaining
the trustworthiness and accuracy of the information.

Answer 8

integrity

Question 9

Ensuring that systems and resources are accessible to authorized users when
needed, and that services are not denied to them, particularly during
emergencies or disasters.

Answer 9

availability

Question 10

What additional characteristics are important in modern information security?

Answer 10

Authenticity, Accountability, Non-repudiation, Reliability

Question 11

loss of confidentiality

Answer 11

the unauthorized disclosure of information.

Question 12

loss of integrity

Answer 12

the unauthorized modification or destruction of information

Question 13

loss of availability

Answer 13

the disruption of access to or use of information or
an information system

Question 14

informational self-determination

Answer 14

you get to control information about you

Question 15

the entire set of hardware, software data,
people, procedures, and networks that enable a business to use
information.

Answer 15

information system (IS)

Question 16

is the practice of
protecting information by mitigating information risks

Answer 16

information security

Question 17

things we might want to protect (anything of value)

Answer 17

asset

Question 18

the assets of a computer system

Answer 18

hardware, software, data, communcation facilities and networks

Question 19

weaknesses or gaps in the security system that could be
exploited to cause loss or harm

Answer 19

vulnerabilites

Question 20

example of loss of integrity

Answer 20

system can be corrupted, does the wrong thing or gives wrong answers

Question 21

example of loss of confidentiality

Answer 21

system can become leaky

Question 22

example of loss of availability

Answer 22

system can become unavailable or very slow

Question 23

potentials for vulnerabilities to turn into attacks on systems

Answer 23

threats

Question 24

an actions which exploits a vulnerability to execute a threat ( threats carried out ); lead to compromises ot security breaches

Answer 24

attacks

Question 25

Who is the entity that attacks or threatens a system?

Answer 25

Adversary, attacker, or malicious user—anyone who carries out an attack or poses a threat to a system

Question 26

What is a hacktivist and what is their motivation?

Answer 26

Hacktivists are activists who attack systems to draw attention to a cause, inspire action, or drive social or political change

Question 27

what type of attack is one that attempt to learn or make use of information from the system that does not affect system resources

Answer 27

passive attack

Question 28

active attack

Answer 28

attempt to alter system resources or affect their operation

Question 29

inside attack

Answer 29

initiated by entity with authorized access to system

Question 30

outside attack

Answer 30

initiated by unauthorized user of system

Question 31

risk

Answer 31

the likelihood that a threat will exploit a vulnerability to cause damage to an asset; example of a risk: - Financial losses - Loss of privacy - Damage to your reputation - Legal implications - Even loss of life

Question 32

principle of easiest penetration

Answer 32

A security principle that states: - a system is only as secure as its weakest link, and - an attacker will often target the easiest point of entry in a system rather than the most obvious one.

Question 33

principle of adequate protection

Answer 33

Using security measures that match the risk and value of the information or system. if something is worth spending money on

Question 34

security vs. accessibility trade-off.

Answer 34

Balancing information security and access requires a balance between protection and availability.

Question 35

name the five ways to defense of computer systems

Answer 35

cryptography, software controls, hardware controls, physical controls, policies and procedures

Question 36

the practice of protecting data by converting it into an unreadable format (encryption) that can only be accessed by someone who has the proper decryption key

Answer 36

cryptography

Question 37

common uses of cryptography

Answer 37

- Encryption: Protects data by making it unreadable to attackers. - Authentication: Uses digital signatures and SSL/TLS to verify identities and secure transactions. - Integrity: Uses MACs to detect unauthorized changes to data. - Privacy: Makes personal information unreadable after a set time.

Question 38

Security measure that are used to protect computer systems and networks from unauthorized access and other types of threats

Answer 38

software controls

Question 39

What are some common examples of software controls?

Answer 39

- Access control: Passwords, biometrics, user accounts, and permissions - Malware protection: Virus scanners - Development controls: Quality measures on source code - Network security: Personal firewalls monitoring traffic

Question 40

security measure that use separate hardware devices to protect computer systems and networks

Answer 40

hardware controls

Question 41

What are some common examples of hardware controls?

Answer 41

Biometric readers, smart tokens for one-time codes, hardware firewalls, and intrusion detection systems.

Question 42

security measure that are designed to protect the hardware itself and prevent physical access to the console, storage media, and other critical components of a computer system or network

Answer 42

physical controls

Question 43

What are some common examples of physical controls?

Answer 43

Locks, security guards, off-site backups, and location-based controls (e.g., avoiding disaster-prone areas).

Question 44

a set of instructions that everyone in the organization follows to make sure everything stays secure.

Answer 44

security policy

Question 45

it provides a systematic and comprehensive framework for organizations to address evolving security challenges by focusing on attacks, mechanisms, and services to protect data, systems, and networks

Answer 45

The (open systems interconnection -- osi) security architecture

Question 46

Any action that aims to compromise the security of information owned by an organization

Answer 46

security attack

Question 47

Methods designed to detect, prevent, or recover from security attacks.

Answer 47

Security Mechanism

Question 48

common security mechanisms are as follows

Answer 48

- Cryptography - Message digests and digital signatures - Digital certificates - Public Key Infrastructure (PKI): A framework that manages digital keys and certificates, facilitating secure communication

Question 49

security service

Answer 49

functionalities offered by security mechanisms to enhance the security of a system. can include authentication, access control, data confidentiality, data integrity, and non-repudiation

Question 50

security services that organizations often utilize

Answer 50

- Authentication - Access Control - Data Confidentiality - Data Integrity - Non-repudiation - Availability

Question 51

Used to assure the identity of the sender or creator of the data.

Answer 51

authentication

Question 52

this service is used to authenticate the identity of other entities with which the system is communicating

Answer 52

peer entity authentication

Question 53

this service is used to authenticate the origin of a message or data, to ensure that it was sent by the entity that it claims to be from.

Answer 53

data origin authentication

Question 54

Used to prevent misuse of resources and ensure that only authorized users have access to the available resources.

Answer 54

.access control

Question 55

allows the owner or administrator of a resource to decide who is allowed to access it.

Answer 55

Discretionary Access Control (DAC)

Question 56

allows access based on the role of the user within the organization.

Answer 56

Role-based Access Control (RBAC)

Question 57

the access is granted based on a set of predefined rules.

Answer 57

Mandatory Access Control (MAC)

Question 58

the access is granted based on the attributes of the requestor, the resource, and the context in which the access request is made.

Answer 58

Attribute-based access control (ABAC)

Question 59

Responsible for ensuring that the data is kept extremely safe from third-party intruders. important for maintaining the privacy and security of sensitive information,

Answer 59

data confidentiality

Question 60

confidentiality services: used to protect data that is being transmitted between two parties, such as over a network or through the internet. This can include both passive and active protection measures, such as encryption, to prevent unauthorized access or eavesdropping.

Answer 60

protecting data in transit

Question 61

confidentiality services: used to protect data that is stored on a device or system, such as on a HD or in a DB. This can include access controls, encryption, and backups to prevent unauthorized access or data loss

Answer 61

protecting data at rest

Question 62

confidentiality services: used to protect the characteristics of the traffic flow, such as the source and destination, frequency, length and other characteristics of the traffic on a communication facility. This can include measures such as traffic padding and traffic encryption, to prevent an attacker from observing the traffic flow.

Answer 62

Protecting traffic flow from analysis

Question 63

Ensure that the transmitted information received by the receiver is well- authenticated and there is no tampering with the information received

Answer 63

data integrity

Question 64

used to ensure that the data integrity of a specific message, it uses a digital signature, or message authentication code (MAC) which provides a hash of the data and a secret key, and appending that to the message

Answer 64

Message integrity

Question 65

Used to Prevent either sender or receiver of a transmitted message from denying that the message was sent or received

Answer 65

non-repudiation

Question 66

System is accessible and usable on demand by authorized users according to intended goal

Answer 66

availability

Question 67

Assure data received are exactly as sent by authorized entity (has not been altered)

Answer 67

data integrity

Question 68

Protect data from unauthorized disclosure

Answer 68

data confidentiality

Question 69

examples of passive attack

Answer 69

1. release message contents 2. traffic analysis (hard to detect, but easier to prevent ( usaully by encryption)

Question 70

four categories fo active attack

Answer 70

1. Masquerade 2. Replay 3. Modification of messages 4. Denial of service Relatively hard to prevent (because it would require physical protection of all communications facilities and paths at all times), but easier to detect

Question 71

the type of passive Attack that involves the intruder stealing all the message/data transmitted. Here, the information gathered by the intruder is stolen unethically.

Answer 71

message content

Question 72

this type of passive Attack involves messages/data being encrypted before transmission. Here, the message being masked/encrypted the intruder can’t read the message but only understand the pattern and length of encryption.

Answer 72

masked traffic analysis

Question 73

a type of active attack, the attacker tampers the information received by the receiver by claiming itself as the sender. Takes place when one entity pretends to be a different entity Usually includes one of the other forms of active attack. For example, authentication sequences can be captured and replayed after a valid authentication sequence has taken place

Answer 73

masquerade

Question 74

a type of active attack, the attacker attacks the transmitted message through a passive channel and make the final message received by the receiver may appear to be authorized and safe Involves the passive capture of a previously transmitted message and replaying it to produce an unauthorized effect

Answer 74

replay

Question 75

Some portion of a legitimate message is altered, or messages are delayed or reordered to produce an unauthorized effect

Answer 75

modification attack

Question 76

is a type of active attack, the receiver is prevented from receiving the transmitted message as there is an overflow of requests to the receiver, which makes the services hampered from their usual behavior. Prevents/inhibits the normal use or management of communications facilities

Answer 76

denial of service (DOS)

Question 77

This organization is focused on the development of security professionals and the certification of IT security professionals worldwide

Answer 77

The International Association of IT Security Professionals (ISC)

Question 78

This organization is focused on the development of best practice guidelines and standards for IT security

Answer 78

The Center for Internet Security (CIS):

Question 79

This organization is focused on the development of standards for protecting cardholder data for the payment card industry.

Answer 79

The Payment Card Industry Security Standards Council (PCI SSC):

Question 80

This organization is focused on the development of best practice guidelines and standards for web application security.

Answer 80

The Open Web Application Security Project (OWASP)

Question 81

This organization is focused on the development of standards for the Internet’s infrastructure and protocols.

Answer 81

The Internet Engineering Task Force (IETF)