Security + Chapter 1 Flashcards

Information Security

• Protects information and information resources to ensure confidentiality and minimize risks.
• Essential for individuals and organizations to safeguard crucial data against loss.

What to Protect

• Data: Refers to the information assets of individuals or organizations.
• Resources: Include both virtual (files, memory locations, network connections) and physical components (devices) of a system.

Goals of Security: Prevention

• Protect personal, company, and intellectual property information.
• Breaches in any sector can lead to significant recovery efforts and losses.

Goals of Security: Detection

• Involves identifying unauthorized access attempts or data losses.

Goals of Security: Recovery

• Implements processes to recover crucial data from system crashes or storage device failures.
• Recovery can also apply to physical resources.

Vulnerabilities

• Situations that expose systems to attacks; can stem from various sources, including:
  • Misconfigurations in hardware or software.
  • Software bugs and design flaws.
  • Poor physical security measures.
  • Weak passwords and unchecked user inputs.

What is a Threat

• Defined as any potential event or action that could breach security protocols.
• Threats include unauthorized access, service interruptions, damage to hardware, and facility breaches.

What is an Attack

• Techniques used to exploit vulnerabilities in applications without authorization.
• Types of attacks consist of physical security breaches, network-based (including wireless), software exploitation, social engineering, and web application attacks.

What are Intrusions

• Occur when unauthorized access to computer systems takes place.
• Types of intrusions encompass physical intrusions, host-based, and network-based intrusions.

What are Risks

• Involves exposure to potential damage or loss, notably in IT systems.
• Ignoring risks can lead to catastrophic operational outages.

What are Controls

• Countermeasures to mitigate security risks from threats or attacks.
• Controls are solutions that support information security strategies, classified as prevention, detection, and correction.

Prevention Controls

• Aim to prevent threats from exploiting vulnerabilities in systems.

Detection Controls

• Help identify if threats or vulnerabilities have entered a computer system.

Correction Controls

• Mitigate the impact of threats or attacks on computer systems.

Security Management Process: Identification

• Involves detecting issues and determining protective measures.
• Log security breach details and select identification techniques like Network Intrusion Detection Systems (NIDS).

Security Management Process: Implementation

• Entails installing controls to protect systems.
• Involves authenticating users and implementing security measures like intrusion detection (IDS) and prevention systems (IPS).

Security Management Process: Monitoring

• Detects and resolves issues post-implementation of security controls.
• Involves testing the effectiveness of controls against further attacks.