Flashcards
Sem título
Flashcards do conjunto (15)
- 1AttackAn attack is an intentinal activity conducted or initiated by human in order to breach or compromise a system
- 2BreachA breach is resulting violation of security policy of a system
- 3IntrutionIt denotes an attack and its corresponding breach
- 4VulnerabilityIt denotes any place in system where it is open for attack(to some extent)
- 5ThreatThat which gives undesired negative consequence for the system
- 6CountermeasureIs a technique to protect the system againstattack
- 7ConfidentialityPreserving authorized restriction on Information access and disclosure which includes means to protect personal privacy and proprietary information
- 8IntegrityGuarding against unauthorized information modification and destruction including ensuring information non-repudiation and authenticity. Loss of Integrity means unauthorized modification and destruction of information.
- 9AvailiabilityEnsuring Timely and Reliable access to and use of information system. Loss of availability means disruption of access t and use of information or information system.
- 10AuthenticityThe property of being genuine , being able to be verified or trusted; confidence in the validity of transmission, message , message source. In order words verifying that a user are he who say they are and be able to verify the input coming to the system from a trusted source
- 11AccountabilityThe security goal that generates the requirement of action of an entity to be traced back uniquely to that entity. This supports intrution detection and prevention, non-repudiation, deterrence, fault isolation
- 12Examples of security Problems1.Intrusions, Attacks
2. Hardware, Hardware errors
3.eavesdropping ()
4.Software errors (Bugs), software design methods
5. failure propagation( consequence of security problem in other system)
6. inadequate management, deficient configurations
7.ignorant users, mistakes - 13IntrudersIntruders can be of two type 1 . Outsider : For eg : Thieves, hackers, terrorist,other states, spy organization almost anybody
Insider : who has access to the system to some extent 1. a former employee 2. an ordinary user 3. maintenance personnel( system administrator) 4. designer ( back doors, Trojan horse) - 14Network Security attack 1. Passive attackIt is attempt to learn and make use of information from system without affecting system resource.
release of message content
traffic analysis
hard to detect so aim to prevent - 15Active attackAttempts to alter system resource and affect system operation. An attacker tries to modify and fake data streams.
1. replay : involves passive capture of data unit and subsequently resending it this resulting in unauthorized effect
2. Masquerade : when an entity tries to be another entity
3. Modification of message : this involves modifying message or messages are delayed and reordered to produce an unauthorized effect
4. Denial of service: prevents the normal use or management of communication facility.
hard to prevent so aim to detect
Informações
- Descrição
- Written Exam Computer Security FlashCards sobre Sem título, criado por amrimukh1 em 05-03-2016.
- Criado por
- amrimukh1
- Visualizações
- 0
- Avaliação