Please enable JavaScript.

Coggle requires JavaScript to display documents.

Vulnerabilities, OSINT - Coggle Diagram

- - - - Part OSINT includes,
        knowing the vulnerabilities in vectors,
        and how actors use them
- - - - Known Vulnerabilities
        
        Both types of vulnerabilities
        affect various IT models
        or infrastructures
        
        the vulnerabilities
        can be found in
        different parts of the models/infrastructures
        and affects them in different ways
        
        vulnerabilities can
        affect both types of IT models/infrastructure.
        on-premises and off premises
        
        Off-Premises
        aka Cloud Platforms,
        (uses virtualization)
        
        Cloud uses Hypervisor
        to handle
        physical and system interactions
        (remember visor to see all Systems/virtual machines)
        
        2 more items...
        
        On-Premises Model
        Organization handles
        its own IT
        
        Organisation deploys
        hardware (firmware)
        and software
    - - Unknown Vulnerabilities
        aka Zero day Vulnerability
        
        unknown vulnerability
        leads to zero day attacks/threats
        
        attack exploits,
        zero-day vulnerability
        
        Since not patch exists
        (because its new)
        makes very affective and
        dangerous
- - - - Impact aka
        what can happen if
        organisation is attacked
        
        Hence importance of
        CIA (confidentiality, Integrity
        Availability)
        
        if CIA is not applied,
        then a big risk and
        impact
        
        Consequence of attack
        can lead to
        
        Impact on
        Service
        
        loss service,
        meaning service is
        no longer available
        
        1 more item...
        
        Data Loss/breach
        
        1 more item...
- - - - Secure design,
        architecture principles
        and frameworks
    - - Asset Management
        and Configurations
        
        Automated system asset
        identification monitoring tools
    - - Proper patch
        management
        
        evaluating, testing and
        deploying latest patches/updates
    - - Good Training