Untitled

Cyber Security Introduction

• Cyber security involves the protection of internet-connected systems, including hardware, software, and data, from cyberattacks.

5 Components of an Information System (IS)

• Hardware: Physical components like computers and servers.
• Software: Applications, operating systems, and utilities.
• Data: The information stored and processed by the system.
• People: Users who interact with the system.
• Procedures: Instructions for accomplishing specific tasks.

Introduction to Cyber Security

• Cyber security aims to build a defense-in-depth approach
• A successful organization should have a multi-layer of security in place.
• Physical security secures physical items and objects from unauthorized access and misuse.
• Personnel security protects the individuals authorized to access the organization and its operations.
• Operations security protects the details of particular operations and activities.
• Communications security protects communications media and technology.
• Network security protects network components and connections.
• Data security protects the confidentiality, integrity, and availability of information assets during storage, processing, and transmission.
• The elements of cyber security are People, Policy, and Technology

Critical Characteristics of Information

• The goal of Cyber Security is to maintain the C.I.A triad: Confidentiality, Integrity, and Availability.
• Other characteristics to consider are Accuracy, Authenticity, Utility, and Possession.
• Confidentiality prevents the disclosure or exposure of information to unauthorized individuals or systems; examples include credit cards, PII, and health records.
• Integrity ensures that information is accurate, complete, and authorized; the integrity of information is threatened when the information is exposed to corruption, damage, destruction, or disruption of its authentic state.
• Availability enables authorized users to access information when and where needed, without interference or obstruction.
• Accuracy means information is free from mistakes or errors and has the value that the end-user expects; if information contains a value different from the user's expectations due to intentional or unintentional modification of the content, it is no longer accurate.
• Authenticity means that the information is genuine or original rather than a reproduction or fabrication; information is authentic when it is the same as it was originally created, placed, stored, or transferred.
• Utility means the information has value for some purpose or end; information has value when it serves a particular purpose.
• Possession means having ownership or control of some object or item; information is said to be in possession if one obtains it, independent of format or other characteristic.
• Breaching confidentiality always results in a breach of ownership but breaching ownership does not always result in a breach of confidentiality.
• There are three dimensions in cybersecurity: security goals (C.I.A.), security measures/controls (policy, education/training, technology), and information states (storage, transmission, processing).
• McCumber Cube: This is a graphical representation of the interconnections among the different information security factors. The dimensions and attributes of the McCumber Cube include desired goals (C.I.A), information states, and security controls.
  • Data at rest (DAR) means data in an information system in storage, such as in memory, on a magnetic tape, or a disk.
  • Data in transit (DIT) means data being transferred between information systems.
  • Policy and practices are administrative controls, including plans and guidance.
  • Education ensures that the users of information systems are aware of their roles and responsibilities -Technology, consisting of software and hardware-based solutions, is designed to protect information systems.

Components of an Information System

• An information system consists of software, hardware, data, people, and procedures that work together to achieve a common goal.
• Software includes applications, operating systems, and other utilities and is the most difficult component to secure because bugs and errors can lead to insecure information.
• Software is the most important component in the IS. Information security is not often considered at the first round of implementation, leading to versions after versions of application
• Hardware is physical technology that houses and executes the software, stores and transmits data, and provides interfaces to run the software.
• Data is the most valuable asset possessed by an organization and often the target of intentional attacks.
• People are often the weakest component in an IS environment; policy, agreement, education, and training play important roles in mitigating this risk.
• Procedures consist of written instructions for accomplishing a specific task; unauthorized access to these procedures can threaten the integrity of the information.

System Development Life Cycle (SDLC)

• SDLC is a methodology or approach for designing and implementing an information system.
• It is a sequence of procedures to solve a problem, the most common approach being the waterfall model.
• The steps of the SDLC are:
  • Planning involves reviewing and prioritizing project requests, allocating resources, and identifying the project development team.
  • Analysis involves performing detailed analysis activities, studying the current system, determining user requirements, and recommending a solution.
  • Design involves acquiring hardware and software and developing system details.
  • Implementation involves developing the program, installing and testing the new system, and training users
  • Support involves identifying errors and enhancements, monitoring system performance, and updating the system

Security System Development Life Cycle (SecSDLC)

• SecSDLC requires cybersecurity to be managed similarly to any other system implementation.
• This approach involved adapting the SDLC phases to integrate security measures.
• Each phase of the SecSDLC considers the security of the system and the information it uses.
• Each implementation is done securely and protects the confidentiality, integrity, and availability (C.I.A.) of the organization's information assets.
• The steps of the SecSDLC are:
  • Planning and Analysis define the potential impact on organizations or individuals if security is breached and conducts a preliminary risk assessment.
  • Design involves risk assessments, security functional and assurance requirement analysis, and security planning – a complete characteristic of the IS and the security it needs in security.
  • Implementation involves inspection and acceptance and system integration with robust security controls.
  • Support Ensures the level of security if any changes happen to the environment, which requires updates as needed and continuous monitoring.

SDLC vs. SecSDLC

• SecSDLC follows the exact phases as the formal SDLC.
• SecSDLC identifies specific threats that could happen to the IS and creates specific controls to counter those threats.
• A well-observed and planned IS can be demonstrated if all possible current and possible future threats have been taken care of.