Information Security and the CIA Triad

What is the CIA Triad ?

• A branch of the Central Intelligence Agency

• Cryptography, Information, Analysis

• Confidentiality, Information, Availability

• Confidentiality, Integrity, Availability

An autonomous program on a network(especially the internet) that can interact with computer systems or users, especially one designed to respond or behave like a player in an adventure game.

• Bot

• SSL

• Beaconing

• Ransomware

The practice of sending short and regular communications from an infected hot spot to an attacker-controlled host to communicate that the infected host malware is alive, functioning and ready for instructions.

• Bot

• SSL

• Beaconing

• Ransomware

A typical malicious software designed to block access to a computer system until a sum of money is paid.

• Bot

• SSL

• Beaconing

• Ransomware

A small data file installed on a Web server that allows for a secure connection between the server and a Web browser.

• Bot

• SSL

• Beaconing

• Ransomware

The CEO of a UK-based energy firm thought he was on the phone with his boss when he followed the orders to immediately transfer €220,000 (approx. $243,000) to the bank account of a Hungarian supplier. This is an example of :

• Deepfake

• Man in the middle attack

• DDos attack

• Phishing

What kind of attack does the above image depict?

• Ransomware

• DDos

• Phishing

• Man in the middle

A link that redirects to a website asking for username or password, or starts downloading a file, or perhaps deploys ransomware on a computer system is an example of

• Ransomware

• A phishing attack

• A Bot

• A Man in the middle attack

From the article "TOP-SECRET NSA REPORT DETAILS RUSSIAN HACKING EFFORT DAYS BEFORE 2016 ELECTION". On October 27, 2016, Russian hackers apparently set up an “operational” Gmail account designed to appear as if it belonged to an employee at VR Systems, and used documents obtained from a previous operation to launch a second _____________________ operation “targeting U.S. local government organizations.” These emails contained a Microsoft Word document that had been “trojanized” so that when it was opened it would send out a beacon to the “malicious infrastructure” set up by the hackers. What word(s) go on the blank line?

• AI

• DDos

• phishing

• sphear-phishing

Does abstraction impact security? How?

• It impacts security because artificial intelligence allows your machine to learn for itself.

• It impacts it by hiding all the software used by hackers

• It impacts it because abstraction reduces complexity. The internet being an example, allows many users to navigate it without much understanding of it.

• abstraction does not impact security