IS Security - Jason Andreas 2024

Information security is defined as

“protecting information and information systems from ....

• disruption

• disclosure

• authentication

• authorization

Part of Parkerian Hexad

• Authenticity

• Possession of Control

• Utility

• Alteration

Type of Attack of Confidentiality on CIA Triad

• Interruption

• Modification

• Interception

• Fabrication

Potential activities cause harms

• Risk

• Threat

• Vulnerability

• All

Incident Response Standard

• ISO 31000

• ISO 27002

• ISO 27001

• ISO 27035

Defensive Measure in Application Layer

• Encryption

• Content Filtering

• SSO

• Backup

In Authentication, Token or ATM called as

• Something You Are

• Something You Have

• Something You Know

• Something You Do

Part of Biometrics requirements

• Universality

• Clearly

• Permanence

• All Wrong

In Access Control, the owner of the resource determines who gets access to it and exactly what level of access they can have

• RBAC

• DAC

• MAC

• RuBAC

A Model of Multilevel Access Control which combine of DAC and MAC

• Brewer and Nash Model

• Biba Model

• Bell-LaPadula Model

• No Option