Ch. 9 Cybersecurity Review

To determine which assets to ______

To determine credible threats to those ______

To determine vulnerabilities that currently ______

To identify the risks posed with regard to the ______

To recommend changes to current practice that mitigate risks to an acceptable ______

To determine implementation ______

A SYSTEM’S MAIN PROTECTION FROM BOTH EXTERNAL AND INTERNAL ATTACKS IS THE ______

Password ______ THE PROBLEM, SIMPLY STATED, IS THIS: PEOPLE ARE HUMAN AND ATTEMPTING TO HAVE A PERSON REMEMBER A STRONG PASSWORD IS A DIFFICULT TASK

QUITE OFTEN PASSWORDS AND USER IDS ARE: ______, USUALLY THE USER’S FIRST OR LAST NAME OR THE WORD “PASSWORD”

EASY TO GUESS, SUCH AS A COMPANY NAME, VARIATIONS OF USER NAMES, OR TV CHARACTERS GUEST ACCOUNTS OR ACTIVE TERMINATED ACCOUNTS FOUND ON STICKY NOTES ATTACHED TO ______

AUTOMATED HACKER TOOLS, SUCH AS CRACK, L0PHTCRACK, AND JOHN THE RIPPER, TEND TO BRUTE-FORCE PASSWORD ______ BUT CAN QUICKLY DETERMINE SHORT AND COMMON PASSWORDS

ANOTHER WAY TO CRACK PASSWORDS IS VIA ______ TABLES, WHICH ARE HUGE LISTS OF PRE-ENCRYPTED PASSWORDS THAT ALLOW ALMOST INSTANTANEOUS CRACKING OF EVEN LONG, COMPLEX PASSWORDS

In all Microsoft Windows systems, up to and including XP, the user passwords were stored in a legacy LM format for backwards compatibility with old systems/workgroups, which turned out to be incredibly easy to ______

KEY MANAGEMENT, WHICH IS ESSENTIAL TO THE ENCRYPTION PROCESS, IS A WELL-THOUGHT-OUT SET OF ______ THAT HAS JUST NOW BECOME ADEQUATELY COST EFFECTIVE AND NON-LIMITING TO SYSTEM PERFORMANCE TO BE ACCEPTABLE TO USE IN INDUSTRIAL FACILITIES