Flashcards
SCC 363- Threat Modelling
Cards in this deck (21)
- 1State the holistic perspective of security?Security is only as good as it's weakest link
- 2State the three different channel security concepts and describe them?Confidentiality - keeping data and resources hidden
Integrity - Data integrity
Availability - Efficient transfer of information in the communication channel - 3State the different two different network security concepts and describe them?Anonymity - Untraceability
- Unlinkability
-Unobservability
Availaiaiblity - 4What is authenticity?Property of being genuine. Can be verified and trusted
- 5What is accountability?Actions of an entity can be traced uniquely to that entity
- Nonrepudiation or "you can't escape your past" - 6What is a threat?Set of circumstances that has the potential to cause loss or harm. Or a potential violation of security.
- 7What is a vulnerability?Weakness in the system that could be exploited to cause loss or harm.
- 8What is an attack?When an entity exploits a vulnerability on system. Strategic noise; not random error
- 9What are control or counter measures?– A means to prevent a vulnerability from being exploited.
- 10State the factors that security entails?– Identifying assets
– Identifying threats
– Identifying vulnerabilities
– Designing countermeasures
– Assessing risk - 11State the four classes of threats and describe them?Disclosure - Snooping
Deception - Modification, spoofing, repudiation of origin, denial of receipt
Disruption - Modification
Usurpation - Modification, spoofing, delay, denial of service - 12Define the four common threats?Snooping or interceptions
Falsification
Masquerading or spoofing
Repudiation - 13What is snooping or interceptions?– Unauthorised interception of information on via a network
- 14What is falsification?Unauthorised change of information
- 15What is masquerading or spoofing?An impersonation of one entity by another
- 16What is repudiation?A false denial that an entity received some information
- 17What is a security policy?A statement of what is allowed in a networked system and what is not allowed
- 18What does security policy define the world into?– Divides the world into secure and non-secure states
– A secure system starts in a secure state. All transitions keep it in a
secure state - 19What is a security mechanism?– A method, tool, or policy for enforcing a security policy.
– Prevent, detect, respond, or recover - 20State the overall policy assumption?The security policy correctly divides the world into secure and
insecure states.
• Mechanisms prevent transition from secure to insecure states - 21Carry onnnnn?
Information
- Description
- Flashcards on SCC 363- Threat Modelling, created by Ayo Olutobi on 24/11/2017.
- Created by
- Ayo Olutobi
- Views
- 0
- Rating