Please enable JavaScript.

Coggle requires JavaScript to display documents.

CHAPTER 8: CONTROLS FOR INFORMATION SECURITY - Coggle Diagram

- - - - Research -Once the attacker has identified specific targets and knows what versions of
        software are running on them, the next step is to conduct research to find known vulnerabilities for those programs and learn how to take advantage of those vulnerabilities
    - - Execute the attack - The criminal takes advantage of a vulnerability to obtain unauthorized access to the target’s information system.
    - - Cover tracks - After penetrating the victim’s information system, most attackers attempt to
        cover their tracks and create “back doors” that they can use to obtain access if their initial
        attack is discovered and controls are implemented to block that method of entry.
- - - - Something the person knows, such as passwords or personal identification numbers
        (PINs)
        
        . Something the person has, such as smart cards or ID badges
        
        Some physical or behavioral characteristic (referred to as a biometric identifier) of the
        person, such as fingerprints or typing patterns.
- - - - Regular review of new malware threats
    - - Filtering of incoming traffic to block potential sources of malware
    - - Training employees not to install shared or unapproved software