((Anatomy of a Security IncidentAttack)) will survey current threat

1. ((Anatomy of a Security Incident/Attack)) will survey current
threats postured to information security - either at individual or
enterprise level. As you recollect from the principal section,
"Information Security" is characterized as great feeling of
assurance that risks and controls are in balance. In this part we
will concentrate on the wellspring of the dangers, the distinctive
classifications of threats to data security. The textbook
summarizes them in 12 classes - table 2.2 on page 52 of the
reading material. You can likewise allude to the 2003 CACM
article of the writer (Whitman) "Foe at the Gates: Threats to
Information Security", or their changed paper "Threats to
Information Security Revisited" in Journal of Information
Systems Security (2012). To better comprehend the terms talked
about in this section, (((((I need all of you to concoct your own
case of security attacks (no less than one), and for every attack
please define what is the threat? the threat agent? vulnerability?
exploit? what resource is the victim/target of this attack? )))))
Trust the accompanying case helps: The principal attack I can
consider is loss of client information stored at your organization
database. For this situation the threat would be espionage or
trespass (or robbery, or specialized disappointment of
programming - please see the talk taking after table 2-2), the
threat operator could be a hacker, the vulnerability could be a
SQL injection not altered by your web/database administrator.
The endeavor would be then, the hacker injecting particular
SQL summons in the client/login pages on our web server. The
objective IT resource is then all your client information.
Another attack could be a surge because of a hurricane (for
example think about your office being in Manhattan amid
Hurricane Sandy). The threat would be then a strengths of
nature. On a side note, tropical storm Sandy was class 3 - on a
typhoon wind scale-yet one of most costliest after Katrina. The
danger specialist would be God or nature. The helplessness
would be the offices - windows, entryways or the rooftop - not
being sufficiently solid against a typhoon. The endeavor would

2. be the surge or tempest breaking the
windows/entryways/rooftop/and so forth. The objective resource
for this situation would be your whole business. (((((describe
your example security incident, and five segments of the -
attack: threat, threat agent, vulnerability, exploit, asset.)))))
Solution
Threats can originate from two primary sources: humans and
nature. Human threats subsequently can be broken into two
categories: malicious and non-malicious. The non-malicious
"attacks" usually come from users and employees who are not
trained on computers or are not aware of various computer
security threats. Malicious attacks usually come from non-
employees or disgruntled employees who have a specific goal or
objective to achieve.
Disgruntled employees can create both mischief and sabotage on
a computer system. Organizational downsizing in both public
and private sectors has created a group of individuals with
organizational knowledge who may retain potential system
access.
Threats
Motives/Goals
Methods

3. • Employees
• Malicious
• Ignorant
• Non-employees
• Outside attackers
Threat agent and impacts
Port Scanning Attacks (root threat) fascilitates break-in attacks
(secondary threat) Credit Card Numbers compromised
(confidentiality) root threat fascilitates Impersonation Attacks
(Integrity) secondary threat Virus (Integrity) root threat
fascilitiates other attacks (any type) secondary threa
• Deny services
• Steal information
• Alter information
• Damage information
• Delete information
• Social engineering
• Viruses, Trojan horses, worms
• Packet replay
• Packet modification
• IP spoofing
Asset

4. Confidential information former informants potential targets of
retribution future operations allowing counter-operations
previous operations leading to impact on goodwill and
reputation
vulnerability
Staff with an agenda Extensive records in compact format walk
out with an encyclopedia on a keyring
Threats
Motives/Goals
Methods
• Employees
• Malicious
• Ignorant
• Non-employees
• Outside attackers
Threat agent and impacts
Port Scanning Attacks (root threat) fascilitates break-in attacks
(secondary threat) Credit Card Numbers compromised
(confidentiality) root threat fascilitates Impersonation Attacks
(Integrity) secondary threat Virus (Integrity) root threat
fascilitiates other attacks (any type) secondary threa
• Deny services
• Steal information
• Alter information

5. • Damage information
• Delete information
• Social engineering
• Viruses, Trojan horses, worms
• Packet replay
• Packet modification
• IP spoofing