Information Security

Question 1

5 ways to Analyse/Define a Risk

Answer 1

• Assets (value of what we want to protect)
• Vulnerabilty (weaknesses that make an attack possible
• Threats (dangers to assets, they take advantage of vulnerabilities)
• Attack (violation of security)
• Countermeasures (how to prevent attacks)

Question 2

How do we quantify the risk of an asset?

Answer 2

• Look at likelihood of attack
• Probability of successful attack
• Impact of successful attack

Question 3

12 different types of Security Vulnerabilities

Answer 3

• Backdoors
• Direct access (unsecured networks, lost flashdrives)
• Spoofing (keyloggers)
• Trojans, viruses, worms
• Privilege escalation
• Denial of Service (overload bandwidth to trigger lockout)
• Clickjacking (redirecting to fake websites)
• Social Engineering (phising, baiting)
• Media Manipulation
• Troll armies
• Astroturfing (combo of above to create fake popular opinion)

Question 4

8 types of Security Countermeasures

Answer 4

• Authentication & Authorisation
• Multi-factor authentication
• Firewalls
• Secure networking (https)
• Physical separation
• Cryptography
• Intrusion detection
• Formal Verification