Please enable JavaScript.

Coggle requires JavaScript to display documents.

Chapter 8: Identifying and Analyzing Threats, Vulnerabilities, and…

- - - - Is the system susceptible to attacks?
      - Who are the potential adversaries?
      - What system needs to be protected?
      - Is the system susceptible to hardware or software failure
      - How might a potential adversary attack?
      - How might an internal user misuse the system?
      - Who are the users
    - - Similar Organizations Historical Data
      - Local Historical Data
      - Organization Historical Data
- - - - Audit Trails - A series of events recorded in one or more logs, which are referred to as audit logs, but an audit trail can be recorded in many types of logs.
      - Intrusion Detection and Prevention System Outputs' - Able to monitor a network or system, capture network traffic, and send an monitor a network or system, capture network traffic, and send an alert when an intrusion is detected.
      - System Logs - Los have different names for different operating systems but overall have the same purpose. They log data based on what the system is doing
    - - Nmap
      - Nessus
      - SATAN
      - SAINT
    - - Output Analysis, on the other hand, is performed by examining the output to determine whether a vulnerability exists.
      - Process analysis is performed in some systems to determine whether vulnerabilities exist in their processes.
- - - - System/Application Domain
      - Remote Access Domain
      - WAN Domain
      - LAN-to-WAN Domain
      - LAN Domain
      - Workstation Domain
      - User Domain