It is the protection or safeguarding of information systems that use, store, and transmit information from unauthorized access, disclosure, alteration, and destruction.

It is a specification of how objects in a security domain are allowed to interact.

Which of the following is NOT under the Need for Security

Elements of Information Security

The assurance that the information is accessible only to authorized people. It occur due to improper data handling or a hacking attempt.

Elements of Information Security

The trustworthiness of data or resources in the prevention of improper and

unauthorized changes – the assurance that information is sufficiently accurate for its purpose.

Elements of Information Security

The assurance that the systems responsible for delivering, storing, and processing

information are accessible when required by authorized users.

Elements of Information Security

The characteristic of communication, documents, or any data that ensures the quality of being genuine or uncorrupted. Controls such as biometrics, smart cards, and digital certificates ensure the authenticity of data, transactions, communications, and documents.

Elements of Information Security

A guarantee that the sender of a message cannot later deny having sent the message and that the recipient cannot deny having received the message. Individuals and organizations use digital signatures to avoid this.

The restrictions imposed on accessing the components of the system.

The set of features provided by the system.

The GUI components were used to design the system for ease of use.

Security Challenges

Which is NOT a part of security challenges

Security Challenges

Which is NOT a part of security challenges

Security Challenges

Which of the following are a part of security challenges? (4)

It originates from the notion that a target system stores or processes something valuable, which leads to the threat of an attack on the system.

Motive (Goal) + Method + Vulnerability = ?

Classification of Attacks

The intercepting and monitoring of network traffic and data flow on the target network and not tampering with the data. Attackers perform reconnaissance, or the initial phase where attackers gather information about a target system, network, or organization, on network activities using sniffers.

Classification of Attacks

These attacks are difficult to detect as the attacker has no active interaction with the target system or network. It also capture the data or files being transmitted in the network without the consent of the user.

Classification of Attacks

The tampering of the data in transit or disrupting communication or services between the systems to bypass or break into secured systems.

Classification of Attacks

Attacks launch attacks on the target system or network by sending traffic actively that can be

detected.

Classification of Attacks

These are performed when the attacker is in close physical proximity to the target system or network. The main goal of performing this type of attack is to gather or modify information or disrupt its access.

Classification of Attacks

These are performed by trusted persons who have physical access to the critical assets of the target. They use privileged access to violate rules or intentionally causes a threat to the organization’s information or information systems.

Classification of Attacks

Occur when attackers tamper with hardware or software before installation. They tamper with the hardware or software at its source or when it is in transit.

Information Security Attack Vector

It refers to the on-demand delivery of IT capabilities in which IT infrastructure and applications are provided to subscribers as a metered service over a network. Clients can store sensitive information in the cloud.

Information Security Attack Vector

An attack that focuses on stealing information from the victim machine without its user being aware of it. These attacks are generally targeted at large companies and government networks.

Information Security Attack Vector

These are the most prevalent networking threats and are capable of infecting a network within seconds.

Information Security Attack Vector

A malware that restricts access to the computer system’s files and folders and demands an online ransom payment to the malware creator(s) in order to remove the restrictions.

Information Security Attack Vector

It is a self-replicating program that produces a copy of itself by attaching to another computer program, boot sector, or document.

Information Security Attack Vector

It is a malicious program that replicates, executes, and spreads across network connections.

Information Security Attack Vector

Users may download malware-infested applications (APKs) onto their smartphones, which can damage other applications and data or reveal sensitive information to attackers.

Information Security Attack Vector

A huge network of compromised systems used by attackers to perform Denial-of-Service attacks.

Information Security Attack Vector

The practice of sending an illegitimate email falsely claiming to be from a legitimate site in an attempt to acquire a user’s personal or account information.

Information Security Attack Vector

Attacks such as SQL injection and cross-site scripting have made web applications a favorable target for attackers to steal credentials, set up phishing sites, or acquire private information.

Information Security Attack Vector

These are devices connected to the Internet have little or no security, which makes them vulnerable to various types of attacks.

Information Security Laws and Regulations

This is a proprietary information security standard for organizations that handle cardholder information for the major debit, credit, prepaid, e-purse, ATM, and POS cards.

Information Security Laws and Regulations

This specifies the requirements for establishing, implementing, maintaining, and continually improving an information security management system within the context of an organization.

Information Security Laws and Regulations

It provides federal protections for the individually identifiable health information held by covered entities and their business associates and gives patients an array of rights to that information.

Information Security Laws and Regulations

It aims to protect the public and investors by increasing the accuracy and reliability of corporate disclosures.

Information Security Laws and Regulations

An American copyright law that implements two (2) 1996 treaties from the World Intellectual Property Organization (WIPO): the WIPO Copyright Treaty and the WIPO Performances and Phonograms Treaty.

Information Security Laws and Regulations

It provides a comprehensive framework for ensuring the effectiveness of information security controls over information resources that support federal operations and assets.

Information Security Laws and Regulations

It is one of the most stringent privacy and security laws globally.

Information Security Laws and Regulations

It sets out the framework for data protection law in the UK.

Information Security Laws and Regulations

Transactions are electronic exchanges involving the transfer of information between two parties for specific purposes.

Information Security Laws and Regulations

Establishes national standards to protect people’s medical records and other personal health information and applies to health plans, health care clearinghouses, and health care providers that conduct health care transactions electronically.

Information Security Laws and Regulations

Establishes national standards to protect individuals’ electronic personal health information that is created, received, used, or maintained by a covered entity.

Information Security Laws and Regulations

Requires that each employer have a standard national number that identifies them on standard transactions.

Information Security Laws and Regulations

It is a unique identification number assigned to covered health care providers.

Information Security Laws and Regulations

Contains provisions relating to compliance and investigation, as well as the imposition of civil monetary penalties for violations of the HIPAA Administrative Simplification Rules and procedures for hearings.

Information Security Laws and Regulations

Processing must be lawful, fair, and transparent to the data subject.

Information Security Laws and Regulations

You must process data for legitimate purposes specified explicitly to the data subject when you collect it.

Information Security Laws and Regulations

You should collect and process only as much data as necessary for the purposes specified.

Information Security Laws and Regulations

You must keep personal data accurate and up to date.

Information Security Laws and Regulations

You may only store personally identifying data for as long as necessary for the specified purpose.

Information Security Laws and Regulations

Processing must be done in such a way as to ensure appropriate security, integrity, and confidentiality (e.g., by using encryption).

Information Security Laws and Regulations

The data controller is responsible for demonstrating GDPR compliance with all of these principles.

It is an efficient and effective way of illustrating how an adversary can attack the target organization.

This model helps organizations understand the various possible threats at every stage of an attack and the necessary countermeasures to defend against such attacks.

It performed to collect as much information about the target as possible to probe for weak points before actually attacking.

They look for information such as publicly available information on the Internet, network information, system information, and organizational information of the target.

Analyzes the data collected in the previous stage to identify the vulnerabilities and techniques that can be exploited and gain unauthorized access to the target organization.

It is a key stage that measures the effectiveness of the defense strategies implemented by the target organization based on whether the intrusion attempt of the adversary is blocked or not.

After the weapon is transmitted to the intended victim, it triggers the adversary’s malicious code to exploit a vulnerability in the operating system, application, or server on a target system.

The adversary downloads and installs more malicious software on the target system to maintain access to the target network for an extended period.

The adversary creates a channel, which establishes two-way communication between the victim’s system and the adversary-controlled server to communicate and pass data back and forth.

The adversary controls the victim’s system from a remote location and finally accomplishes their intended goals.

It is defined as a guideline that describes the way an attacker performs their attack from beginning to end.

It is defined as the technical methods used by an attacker to achieve intermediate results during their attack.

It is defined as the organizational approach followed by the threat actors to launch their attack.

Describe the way the threat actor operates during different phases of an attack.

Used in the early stages of an attack must be analyzed properly.

To launch an attack successfully, threat actors use several techniques during their execution.

Involve a sequence of actions performed by the threat actors to execute different steps of an attack life cycle.

These are the clues, artifacts, and pieces of forensic data that are found on a network or operating system of an organization that indicate a potential intrusion or malicious activity in the organization’s infrastructure.

It act as a good source of information about threats that serve as data points in the intelligence process.

Attackers usually prefer e-mail services to send malicious data to the target organization or individual.

E-mail address, e-mail subject, and attachments or links.

Useful for command and control, malware delivery, and identifying details about the operating system, browser type, and other computer-specific information.

URLs, domain names, and IP addresses.

Found by performing an analysis of the infected system within the organizational network.

Filenames, file hashes, registry keys, DLLs, and mutex.

Used to identify specific behavior related to malicious activities, such as code injection into the memory or running the scripts of an application.

Executing a PowerShell script and remote command execution.

In the field of computer security, it refers to exploiting system vulnerabilities and compromising security controls to gain unauthorized or inappropriate access to system resources.

A person who breaks into a system or network without authorization to destroy, steal sensitive data, or perform malicious attacks.

Individuals who use their extraordinary computing skills for illegal or malicious purposes.

Also known are Crackers.

Are individuals who use their hacking skills for defensive purposes. They have permission from the system owner.

Individuals who work both offensively and defensively at various times.

Individuals who aim to bring down critical infrastructure for a ‘cause’ and are not worried about facing jail terms or any other kind of punishment.

Unskilled hackers who compromise systems by running scripts, tools, and software developed by real hackers.

Individuals with a wide range of skills who are motivated by religious or political beliefs to create the fear of large-scale disruption of computer networks.

Skilled individuals having expertise in hacking and are employed by the government to penetrate, gain top-secret information from, and damage the information systems of other government or military organizations.

It is a form of activism in which hackers break into government or corporate computer systems as an act of protest.

A consortium of skilled hackers having their own resources and funding.

Individuals who perform corporate espionage by illegally spying on competitor organizations.

Any employee (trusted person) who has access to critical assets of an organization.

Groups of individuals or communities that are involved in organized, planned, and prolonged criminal activities.

A group of hackers working together in criminal activities.

Hacking Cycle Phase 1

Hacking Cycle Phase 2

Hacking Cycle Phase 3

Hacking Cycle Phase 4

Hacking Cycle Phase 5

It is the preparatory phase in which an attacker gathers as much information as possible about the target prior to launching the attack.

A reconnaissance technique that looks through an organization’s trash for any discarded sensitive information.

Involve direct interactions with the target system by using tools to detect open ports, accessible hosts, router locations, network mapping, details of operating systems, and applications.

They do not interact with the target directly.

It is the phase immediately preceding the attack. Here, the attacker uses the details gathered during reconnaissance to scan the network for specific information.

Detect listening ports to find information about the nature of services running on the target machine.

The most commonly used tool, which can search for thousands of known vulnerabilities on a target network.

This is the phase in which real hacking occurs. Attackers use vulnerabilities identified during the

reconnaissance and scanning phases to gain access to the target system and network.

Refers to the point where the attacker obtains access to the operating system or applications on the computer or network.

Technique to exploit the system by pretending to be a legitimate user or a different system, attackers can send a data packet containing a bug to the target system to exploit a vulnerability.

Attempt to cause users on a network to flood each other with data, making it appear as if everyone is attacking each other, and leaving the hacker anonymous.

Breaks the availability of essential services. Sends an overwhelming volume of data packets are sent to a targeted server or network system

The phase when the attacker tries to retain their ownership of the system.

It refers to the activities carried out by an attacker to hide malicious acts.

It is the process of hiding data in other data, for instance, in image and sound files.

Takes advantage of the transmission protocol by carrying one protocol over another.

Refers to a person who enjoys learning the details of computer systems and stretching their capabilities.

Describes the rapid development of new programs or the reverse engineering of existing software to make it better or more efficient in new and innovative ways.

Refer to persons who employ their hacking skills for offensive purposes.

Refers to security professionals who employ their hacking skills for defensive purposes.

It is the use of advanced Google search operators for creating complex search queries to extract sensitive or hidden information.

It is the art of creating complex search engine queries. Queries can retrieve valuable data about a target company from Google search results.

This operator restricts search results to the specified site or domain.

This operator restricts results to only the pages containing all the query terms specified in the

URL.

This operator restricts the results to only the pages containing the specified word in the URL.

This operator restricts results to only the pages containing all the query terms specified in

the title.

This operator restricts results to only the pages containing the specified term in the title.

This operator restricts results to only the pages containing the query terms specified in the

anchor text on links to the page.

This operator restricts results to only the pages containing all query terms specified in the

anchor text on links to the pages.

This operator displays Google's cached version of a web page instead of the current version of

the web page.

This operator searches websites or pages that contain links to the specified website or page.

This operator displays websites that are similar or related to the URL specified.

This operator finds information for the specified web page.

This operator finds information for a specific location.

This operator allows you to search for results based on a file extension.

It automatically extracts specific information from web pages.

The services perform a lookup by entering the target's domain or IP address.