Please enable JavaScript.

Coggle requires JavaScript to display documents.

What is cybersecurity?, application example of CIA Triad: a bank ATM…

- - - - Keeping levels of access and setting permissions
        
        Encrypting data and files
        
        Requiring multi-factor authentication
  - - - Keeping backups of the data in its correct state, and logging versions
        
        Using cryptography to securely check for changes
        
        Keeping track of digital signatures to prove integrity of data
  - - - Always monitoring servers and networks
        
        Maintaining hardware and software
        
        Having a plan for disaster recovery
- - - - DAC, MAC, RBAC, RUBAC
  - - - Prove what someone did, and when they did it (non-repudiation)
- - - - Risk
        
        probability of exposure or loss resulting from a cyber attack or data breach on your organisation
      - a piece of software, data or sequence of commands that takes advantage of a vulnerability to cause unintended behaviour or to gain unauthorised access to sensitive data
    - - computer as a target
        
        Ransomware
        
        malware that employs encryption to hold a victim's information at ransom
        
        Malware
        
        short for malicious software, software intentionally designed to cause damage to a computer, server, client, or computer network
        
        Trojan horse
        
        malware designed to break into electronic and digital devices by disguising the program as a necessary software
        
        SQL injection
        
        incorporating malicious data into the user's digital device to enable the hacker to give unauthorised access to user information
        
        DDOS
        
        big network of devices (botnets) create a large number of fake requests together request the server at the same time
        
        Spyware
        
        unwanted software to infiltrate into a victim's computer in order to have access to their sensitive information and internet usage data without the user's knowledge
        
        Phishing
        
        attackers try to gain access personal information by pretending themselves as concerned competent authorities
        
        Worms
        
        standalone malware computer program that replicates itself in order to spread to other computers
      - computer as a tool
        
        Man-in-the-Middle
        
        when an attacker intercepts communications between two parties either to secretly eavesdrop or modify traffic traveling between the two
        
        Social Engineering
        
        uses psychological manipulation to trick users into making security mistakes or giving away sensitive information
        
        Identity Theft
        
        the crime of obtaining the personal or financial information of another person to use their identity to commit fraud
        
        Fraud
        
        use of Internet services or software with Internet access to defraud victims or to otherwise take advantage of them
        
        Spoofing
        
        the act of disguising a communication from an unknown source as being from a known, trusted source
    - - Defense
      - Mitigate
        
        involves actions on reducing the risk of threats instead of eradicating and remediating the threat altogether
      - Accept
      - Terminate
      - Transfer
- - - - 5 Elements
        
        Identify - Identify and understand the threats and risks the organisation is likely to face
        
        Protect - Protect the organisation’s assets from those threats and risks
        
        Detect - Detect incidents, such as cyberattacks or other events
        
        Respond - Respond to incidents, preventing further damage
        
        Recover - Recover from incidents, evaluating how to prevent reoccurrence cleaning up any damage that occurred
  - - - Initiation - early integration of security considerations is key to the success of the implementing a secured system
        
        Acquisition - primarily with the identification of security requirements, evaluation of proposed security controls, and reviewing and finalising security design prior to acquiring or developing the system
        
        Design / Development - critical security design review to be conducted to check that the system architecture is secured and appropriate security controls are put in place in the design of the system
        
        Implementation / Assessment - security source code reviews and application testing should be conducted to ensure that security has been properly built from a bottom-up
        
        Ops / Maintenance - Develop and test enhancements and/or modifications to the system, from a software and hardware perspective
        
        Disposal - Explicitly address information and system disposal
- - - - encryption
      - decryption
  - - - Appliance Firewalls
        
        examples
        
        ManageEngine
        
        Solarwind
      - Client-based Firewalls
  - - - McAfee
      - Norton
  - - - Interlogix
      - Texecom