Introduction to Computer Security

<p>Implementing firewalls to prevent unauthorized access.</p> Signup and view all the answers

<p>That the authenticity of actions cannot be denied by parties involved.</p> Signup and view all the answers

<p>Authentication.</p> Signup and view all the answers

<p>To bypass security measures and violate policies.</p> Signup and view all the answers

<p>Encryption of sensitive data.</p> Signup and view all the answers

<p>Enhancing supply chain security measures</p> Signup and view all the answers

<p>Weak security measures on user data storage</p> Signup and view all the answers

<p>Potential for widespread exploitation due to its popularity</p> Signup and view all the answers

<p>Data encryption and two-factor authentication</p> Signup and view all the answers

<p>Use of outdated technology systems</p> Signup and view all the answers

<p>A weakness in a system that might be exploited.</p> Signup and view all the answers

<p>A potential danger that might exploit a vulnerability.</p> Signup and view all the answers

<p>Loss, unavailability, or unusability of an asset.</p> Signup and view all the answers

<p>Wiretapping to gain unauthorized access to information.</p> Signup and view all the answers

<p>Modification</p> Signup and view all the answers

<p>Changing values in a database.</p> Signup and view all the answers

<p>Unauthorized insertion of counterfeit objects into the system.</p> Signup and view all the answers

<p>Interception</p> Signup and view all the answers

<p>Passive attacks do not alter system resources, while active attacks do.</p> Signup and view all the answers

<p>Release of message contents</p> Signup and view all the answers

<p>An entity pretending to be a different entity.</p> Signup and view all the answers

<p>To detect attacks and recover from disruptions.</p> Signup and view all the answers

<p>Overloading a network to prevent legitimate access.</p> Signup and view all the answers

<p>Modification of messages</p> Signup and view all the answers

<p>To determine the pattern of communication without altering data.</p> Signup and view all the answers

<p>Compromising a software update to infiltrate systems.</p> Signup and view all the answers

<p>Attack</p> Signup and view all the answers

<p>A vulnerability is a weakness in a system that can be exploited to cause harm.</p> Signup and view all the answers

<p>Interception</p> Signup and view all the answers

<p>An asset becomes lost, unavailable, or unusable.</p> Signup and view all the answers

<p>Modification</p> Signup and view all the answers

<p>Fabrication</p> Signup and view all the answers

<p>A threat is a potential danger that might exploit a vulnerability.</p> Signup and view all the answers

<p>Wiretapping and unauthorized copying of files.</p> Signup and view all the answers

<p>The two primary types of passive attacks are the release of message contents and traffic analysis.</p> Signup and view all the answers

<p>The main goal of an active attack is to alter system resources or affect their operation.</p> Signup and view all the answers

<p>A masquerade attack involves one entity pretending to be another entity.</p> Signup and view all the answers

<p>A replay attack is characterized by the passive capture of a data unit followed by its unauthorized retransmission.</p> Signup and view all the answers

<p>A denial of service attack prevents or inhibits the normal use of communication facilities.</p> Signup and view all the answers

<p>Preventing active attacks is difficult due to the wide variety of potential vulnerabilities present in physical, software, and network systems.</p> Signup and view all the answers

<p>Traffic analysis involves monitoring and analyzing transmission patterns to infer information without accessing the actual data content.</p> Signup and view all the answers

<p>The SolarWinds hack incident highlighted the risks associated with third-party software vulnerabilities allowing attackers to infiltrate various systems.</p> Signup and view all the answers

<p>The CIA triad, consisting of Confidentiality, Integrity, and Availability, is significant as it provides a framework for protecting information security by ensuring that data is accessible only to authorized users, remains unaltered, and is available when needed.</p> Signup and view all the answers

<p>Encryption supports confidentiality by transforming readable data into an unreadable format, ensuring that only authorized users with the correct decryption key can access the original information.</p> Signup and view all the answers

<p>Security mechanisms are tools or protocols designed to prevent, detect, or recover from security attacks, and they are important as they help protect information systems from a variety of threats.</p> Signup and view all the answers

<p>Authentication verifies the identity of users and ensures that only authorized individuals can access specific system resources or sensitive information.</p> Signup and view all the answers

<p>Security services such as identification, authorization, and secrecy contribute to information assurance by establishing trust and ensuring that only legitimate users can interact with the data.</p> Signup and view all the answers

<p>Non-repudiation ensures that a party cannot deny the authenticity of their actions or communications, helping to maintain accountability in transactions and interactions.</p> Signup and view all the answers

<p>Security attacks are efforts to violate the security policies of a system, whereas security mechanisms are the tools and protocols designed to prevent or respond to such attacks.</p> Signup and view all the answers

<p>Availability ensures that authorized users have timely and reliable access to information, which is essential for the continuous operation of systems and services.</p> Signup and view all the answers

<p>Weak authentication processes and lack of monitoring allowed unauthorized access. Better access controls could have limited access to sensitive systems and improved monitoring could have detected anomalies.</p> Signup and view all the answers

<p>Attacks on critical infrastructure can lead to severe public safety risks and significant economic losses due to service disruptions. Such incidents can also erode trust in essential services.</p> Signup and view all the answers

<p>Inadequate security measures and weak data protection practices were primary flaws. Data encryption could have rendered stolen information unreadable, thus protecting customer data.</p> Signup and view all the answers

<p>The Log4j vulnerability highlighted that widely-used open-source software can contain critical flaws that are exploited by attackers. Organizations should implement regular updates and robust patch management to address such vulnerabilities swiftly.</p> Signup and view all the answers

<p>Implementing regular data backups, employee training, and robust security protocols can effectively reduce the risk of ransomware attacks. Additionally, maintaining updated security software helps in identifying and thwarting threats.</p> Signup and view all the answers

<p>Protecting confidentiality ensures that sensitive information is only accessible to authorized users, preventing unauthorized disclosures that could lead to identity theft or data breaches.</p> Signup and view all the answers

<p>Integrity refers to the accuracy and consistency of information, ensuring it has not been altered without authorization. It is crucial for maintaining trust in data and preventing unauthorized modifications.</p> Signup and view all the answers

<p>Availability ensures that information and resources are accessible when needed, which is vital for operational efficiency and business continuity.</p> Signup and view all the answers

<p>Authorization determines what an authenticated user can do within a system, defining access permissions to sensitive data and system functions.</p> Signup and view all the answers

<p>Non-repudiation ensures that a party cannot deny the authenticity of their actions or communications, thus providing accountability in transactions.</p> Signup and view all the answers

<p>A loss of availability can disrupt access to critical systems, leading to operational failures and potential financial losses for organizations.</p> Signup and view all the answers

<p>Security mechanisms prevent, detect, or recover from security attacks, thus maintaining system integrity and protecting sensitive data.</p> Signup and view all the answers

<p>Maintaining a balance among the three ensures comprehensive protection against threats, as neglecting any area could expose systems to vulnerabilities.</p> Signup and view all the answers

<p>Interception refers to an unauthorized party gaining access to information during transmission, which is an attack on confidentiality.</p> Signup and view all the answers

<p>Interruption occurs when an asset becomes lost, unavailable, or unusable, resulting in an attack on availability.</p> Signup and view all the answers

<p>Modification involves unauthorized tampering with existing data, while fabrication entails inserting counterfeit objects into the system.</p> Signup and view all the answers

<p>A threat is a potential danger that may exploit a vulnerability, which is a weakness in the system.</p> Signup and view all the answers

<p>Changing values in a database and altering the content of a message are both integrity-focused attacks.</p> Signup and view all the answers

<p>This type of threat is known as interception, which targets the confidentiality of information.</p> Signup and view all the answers

<p>An active attack involves a deliberate attempt to alter or disrupt the system, while a passive attack aims to secretly monitor or gather information without causing disruption.</p> Signup and view all the answers

<p>Fabrication poses a risk as it involves unauthorized parties inserting counterfeit data, which can lead to misinformation and loss of trust.</p> Signup and view all the answers

<p>The vulnerabilities included inadequate network segmentation and poor security hygiene. Implementing strict access controls and continuous system monitoring could have significantly reduced the impact of the attack.</p> Signup and view all the answers

<p>The key security flaws included lack of robust security protocols and outdated systems. Data encryption would have protected personal information even if unauthorized access occurred.</p> Signup and view all the answers

<p>The Log4j vulnerability showcased that commonly used software can have significant unpatched flaws that can be exploited. Organizations could implement a rapid patch management process and vulnerability assessments to mitigate these risks.</p> Signup and view all the answers

<p>Such attacks can lead to fuel shortages, disruptions in services, and heightened public panic. This can damage the economy by causing supply chain interruptions and increasing operational costs.</p> Signup and view all the answers

<p>Organizations should employ regular data backups, employee training on phishing attacks, and advanced threat detection systems. Additionally, implementing multi-factor authentication can further strengthen defenses.</p> Signup and view all the answers

<p>Passive attacks do not affect system resources, while active attacks involve modifications to data streams or system operations.</p> Signup and view all the answers

<p>Two examples are 'release of message contents,' which involves unauthorized access to the actual data in messages, and 'traffic analysis,' where an attacker monitors communication patterns to gain information.</p> Signup and view all the answers

<p>In a replay attack, a legitimate data unit is passively captured and then retransmitted to create an unauthorized effect.</p> Signup and view all the answers

<p>The intent is to prevent or inhibit normal use of communication facilities, rendering them unavailable to legitimate users.</p> Signup and view all the answers

<p>Masquerade attacks involve one entity pretending to be another, which can lead to unauthorized access or actions by abusing trust.</p> Signup and view all the answers

<p>Active attacks are more challenging to prevent due to a wider range of potential vulnerabilities that can be exploited.</p> Signup and view all the answers

<p>The overarching goal of active attacks is to detect the attack and recover from any disruptions or alterations caused.</p> Signup and view all the answers

<p>The primary tactic involved compromising a software update to gain unauthorized access to multiple government agencies and corporations.</p> Signup and view all the answers