Week 8 - Security 1

Update software to close vulnerabilities and shut down bugs. = Install Patches Leverage Traditional and New Antivirus Software = Keep Cyber Security Resources at Hand Train employees to be vigilant. = Educate the Team Cultivate an environment that encourages honesty with regards to cyber security problems. = Promote a Culture of Forgiveness Schedule deep scans and when in doubt, use quick scans. = Install Patches Have resources available for responding to breaches. = Keep Cyber Security Resources at Hand

Malware = A type of application that can gain unauthorized access or cause damage to a computer or computer system. Eavesdropping = Conversation monitoring, whether by listening in on a room, tapping into a landline or cell phone, or intercepting an email. Hacking = Exploiting vulnerabilities in a computer system, sometimes for information gathering, protest or theft. Man in the Middle Attack = Intercepting the communication between two parties in an attempt to spy on the victims, steal credentials or personal information. Phishing = The act of pretending to be something or someone you are not in order to gain access to sensitive information. Password Attack = A cyber-attack where an attacker tries to guess, or crack a user’s password. Tampering = The act of modifying devices. Virus = Maliciously written codes that alter how a computer operates and can damage the computer and data stored on it. Ransomware = A method that locks data systems or individual devices. Distributed Denial-of-Service Attack = An attacker essentially floods a target server with traffic in an attempt to disrupt, and perhaps even bring down the target. Spoofing = An attempt to acquire sensitive or valuable information by pretending to represent a legitimate organization or person, often someone of authority. Spear Phishing = A more sophisticated form of a phishing attack in which cybercriminals target only privileged users such as system administrators and C-suite executives.

<p>Two-Factor Authentication</p> Signup and view all the answers

<p>Encryption</p> Signup and view all the answers

<p>One-Time Password</p> Signup and view all the answers

<p>Verifying and updating the plan's components</p> Signup and view all the answers

<p>Stage 1 = Reconnaissance &amp; Probing Stage 2 = Delivery &amp; Attack Stage 3 = Exploitation &amp; Installation Stage 4 = System Compromise</p> Signup and view all the answers

<p>Any incident resulting from violation of an organization’s acceptable usage policies by an authorized user.</p> Signup and view all the answers

<p>Malware Infection = Remediate any infections as quickly as possible before they progress. Unauthorised Privilege Escalation = Configure your critical systems to record all privileged escalation events and set alarms for unauthorized privilege escalation attempts. Insider Breach = Identify the privileged user accounts for all domains, servers, apps, and critical devices and ensure that monitoring is enabled for all systems. Unauthorised Access = Detect, monitor and investigate unauthorized access attempts – with priority on those that are mission-critical and/or contain sensitive data.</p> Signup and view all the answers

<p>Unauthorized Access</p> Signup and view all the answers

<p>Criminal Groups = Groups that use phishing, spam, spyware, and malware to conduct identity theft, online fraud, and system extortion to infiltrate systems or networks for financial gain. Terrorist Groups = Groups that conduct cyber attacks to destroy, infiltrate, or exploit critical infrastructure to threaten national security, compromise military equipment, disrupt the economy, and cause mass casualties. Hacktivists = Groups or individuals that carry out cyberattacks in support of political causes rather than financial gain. Malicious Insiders = Employees, third-party vendors, contractors, or other business associates who have legitimate access to enterprise assets but misuse that access to steal or destroy information for financial or personal gain. Corporate Spies = Individuals who conduct industrial or business espionage to either make a profit or disrupt a competitor’s business by attacking critical infrastructure, stealing trade secrets, and gaining access.</p> Signup and view all the answers

<p>Create an insider program</p> Signup and view all the answers

<p>Phishing = Quarantine the malicious email from all accounts on the system. Be sure no one can access the email from anywhere on your network until it is reviewed by an administrator. Business Email Account Takeover = Change passwords of all accounts and block email access from countries where employees won’t be logging in. Malware = Contain and eradicate. Disconnect the computer from the network, but don’t power the device off. Work through the system and eradicate any malicious files or applications.</p> Signup and view all the answers