CS1STF: Security Fundamentals

What does the Vulnerability-Threat-Control framework primarily address?

A threat is solely defined as a malicious act by an attacker.

Name the three main components of the Vulnerability-Threat-Control framework.

A threat can cause loss or harm by exploiting a __________.

Match the following components with their descriptions:

During the warm-up activity, what is the main focus?

It is mandatory to share your answers on the discussion board after completing the worksheet.

What should students do if they need help during the worksheet activity?

The exercise involving classifying the threat helps students think about __________.

CS1STF: Security Thinking & Fundamentals - Tutorial 1/10

Activities Outline:
- Warm-up activity (15 minutes)
- Individual worksheet (1 hour), including exam-style practice exercises
- Review (20 minutes), model solutions available on Blackboard

Warm-up Activity

Focus: Revisiting threats

Vulnerability-Threat-Control Framework

A framework to understand protection methods
Describes how assets are harmed and how to mitigate harm
Shows the relationship between threats, vulnerabilities, the system, and controls

Threats in More Depth

Threat: A set of circumstances with the potential to cause harm, often by exploiting vulnerabilities
- Causes:
  - Natural (e.g., fire, power failure)
  - Human (e.g., malicious intent, human error, benign intent)
- Types:
  - Benign intent
  - Malicious intent
  - Random
  - Directed (e.g., impersonation)
  - Examples: 'malicious code on a general web site', 'human error'

Tutorial Worksheet

Step 1: Download worksheet from Blackboard
Step 2: Complete exercises individually or in groups; ask for tutor assistance if needed
Step 3 (optional): Post answers to discussion board on Blackboard (anonymously possible)
Step 4: Review and rate classmate's answers, provide feedback

Optional: Input to Discussions

Week 1/Exercise 2: Distinguish between threat, control, and vulnerability
Week 1/Exercise 4: Provide an example where a confidentiality breach leads to a compromise in integrity
Week 1/Exercise 6: Identify relevant assets, and associated threats.

This quiz covers the foundational concepts of security thinking and vulnerability management. Participants will engage in warm-up activities, individual worksheets, and review sessions to better understand the frameworks for identifying and mitigating threats. Prepare to deepen your knowledge of threats, vulnerabilities, and protective controls.