Revision for Chapter 2

The first dimension of the cybersecurity cube,

what is the three foundational principles of the cybersecurity world?

• Confidentiality, Integrity and availablity

• Confidentiality, Integrity and probability

• Confidentiality, publicity and availability

• Confidentiality, Integrity and availability

Answer explanation

Use the acronym CIA to remember these three principles.

The cyber world is a world of data; therefore, cybersecurity specialists focus on protecting data. The second dimension of the cybersecurity cube focuses on the problems of protecting all of the states of data in the cyber world. Data has three possible states

• Data at rest or in storage, Data in transit and Data in process

• Data at rest or in preservation, Data in transit and Data in process

• Data at rest or in storage, Data in motion and Data in process

• Data at rest or in storage, Data in transit and Data in proceed

The third dimension of the cybersecurity sorcery cube

defines the types of powers used to protect the cyber world.

The sorcery cube identifies the three types of powers:

• Electronic technologies, Policies & Practices and People

• Technologies, Policies & Best Practices and People

• Technologies, Policies & Practices and People

• Technologies, Policies & Practices and Specialists

Answer explanation

Technologies - devices, and products available to protect information systems and fend off cyber criminals.

Policies and Practices - procedures, and guidelines that enable the citizens of the cyber world to stay safe and follow good practices.

People - Aware and knowledgeable about their world and the dangers that threaten their world.

What are the 3 dimensions of Cybersecurity Cube (McCumber Cube)?

• Security Princiles, Information states and Counter measures

• Security Principles, Information states and Counter measures

• Security Priciples, Information states and Counter measures

• Securiy Principles, Information states and Counter measures

Answer explanation

Technologies - devices, and products available to protect information systems and fend off cyber criminals.

Policies and Practices - procedures, and guidelines that enable the citizens of the cyber world to stay safe and follow good practices.

People - Aware and knowledgeable about their world and the dangers that threaten their world.

Controlling Access

Access control defines a number of protection schemes that prevent unauthorized access to a computer, network, database, or other data resources. The concepts of AAA involve three security services:

• Authentication, Authorization and Accounting

• Authentcation, Authorization and Accounting

• Authentication, Authorizaton and Accounting

• Authentication, Authorization and Accountng

Answer explanation

Authentication verifies the identity of a user to prevent unauthorized access. Users prove their identity with a username or I.D.

Authorization services determine which resources users can access, along with the operations that users can perform. Authorization can also control when a user has access to a specific resource.

Accounting keeps track of what users do, including what they access, the amount of time they access resources, and any changes made.

What are some of the Cybersecurity Countermeasures
Technologies?

• Software-based Technology Safeguards,

  Connection-based Technology Safeguards,

  Network-based Technology Safeguards and

  Environmental-based Technology Safeguards

• Software-based Technology Safeguards,

  Hardware-based Technology Safeguards,

  Network-based Technology Safeguards and

  Cloud-based Technology Safeguards

• Software-based Technology Safeguards,

  Hardware-based Technology Safeguards,

  Network-based Topology Safeguards and

  Environmental-based Technology Safeguards

• Software-based Technology Safeguards,

  Hardware-based Technology Safeguards,

  Network-based Technology Safeguards and

  Environmental-based Technology Safeguards

Answer explanation

Network-based Technology Safeguards

Technological countermeasures can also include network-based technologies.

• - Virtual Private Network (VPN) is a secure virtual network that uses the public network (i.e., the Internet). The security of a VPN lies in the encryption of packet content between the endpoints that define the VPN.

• - Network access control (NAC) requires a set of checks before allowing a device to connect to a network. Some common checks include up-to-data antivirus software or operating system updates installed.

• - Wireless access point security includes the implementation of authentication and encryption.

The Cybersecurity Countermeasure Technologies include Cloud Based Technology. Name the 3 types of cloud based services which could be implemented for technological safeguards.
Technologies?

• Software as a Service (SaaS)

• Infrastructure as a Service (IaaS)

• Virtual Security Appliances

Answer explanation

Network-based Technology Safeguards

Technological countermeasures can also include network-based technologies.

• - Virtual Private Network (VPN) is a secure virtual network that uses the public network (i.e., the Internet). The security of a VPN lies in the encryption of packet content between the endpoints that define the VPN.

• - Network access control (NAC) requires a set of checks before allowing a device to connect to a network. Some common checks include up-to-data antivirus software or operating system updates installed.

• - Wireless access point security includes the implementation of authentication and encryption.

A security policy is a set of security objectives for a company that includes rules of behavior for users and administrators and specifies system requirements. These objectives, rules, and requirements collectively ensure the security of a network, the data, and the computer systems within an organization. Which of the following will help to formulate Cybersecurity Policies and Procedures?

• Standards, Guidelines and Procedure

• Standards, Guidelnes and Procedure

• Standards, Gudelines and Procedure

• Standads, Guidelines and Procedure

Answer explanation

Standards help an IT staff maintain consistency in operating the network. Standards provide the technologies that specific users or programs need in addition to any program requirements or criteria that an organization must follow.

Guidelines are a list of suggestions on how to do things more efficiently and securely. They are similar to standards, but are more flexible and are not usually mandatory. Guidelines define how standards are developed and guarantee adherence to general security policies.

Procedure documents are longer and more detailed than standards and guidelines. Procedure documents include implementation details that usually contain step-by-step instructions and graphics.

Attacks can originate from within an organization or from outside of the organization.

a. Describe how internal security threats may be violated within an organization.

Give an example of an internal user who may cause damage to an organization.

b. Describe how external security threats may be violated from outside of the organization.

Give an example of an external user who may cause damage to an organization.

Answer explanation

a. As internal users have direct access to the building and its infrastructure devices. Internal attackers typically have knowledge of the corporate network, its resources, and its confidential data. They may also have knowledge of security countermeasures, policies and higher levels of administrative privileges.

=> Employee/Ex-employee, Contract Partners or Trusted Partners.

b. External threats from amateurs or skilled attackers can exploit vulnerabilities in networked devices, or can use social engineering, such as trickery, to gain access. External attacks exploit weaknesses or vulnerabilities to gain access to internal resources.

=> Organised Attackers, Hackers and Amateurs

Attacks can originate from within an organization or from outside of the organization.

a) Explain what is the difference between a cyber threat and a cyber vulnerability.
b) State one network service and describe how it can be a prime target for cyber criminals.

Answer explanation

a) Cyber vulnerability is a weakness that makes a target susceptible to an attack. Cyber threats are particularly dangerous to certain industries and the type of information they collect and protect.

b) Network services like DNS, HTTP and Online Databases are prime targets for cyber criminals.

Criminals use packet-sniffing tools to capture data streams over network. Packet sniffers work by monitoring and recording all information coming across a network.

Criminals can also use rogue devices, such as unsecured Wi-Fi access points.

Packet forgery (or packet injection) interferes with an established network communication by constructing packets to appear as if they are part of a communication.