1. Identify key terms associated with security.
2. Discuss threats to information.
3. Explain the importance of confidentiality, integrity, and availability in terms of cybersecurity.
4. Discuss the principle of least privilege and defense in depth.
5. Recall the basic risk management process.
6. Identify ethical issues in cybersecurity.
Please respond to ALL 3 peer posts below
PEER 1: Threats to Security
In the modern age there are many threats to our assets, especially in the online world. I am going to be writing about threats to security in this discussion post. There are three main types of threats that can comprimise security, that being: threat agents, attacks, and risks. Threat agents can be many different things, but we can define them broadly as a potential party that wants to steal and/or compromise our personal detail or property. For example, this could be the threat of hackers online banking companies face, or a potential home invader. Threat agents could even be something natural, like the threat of a hurricane a beachfront house faces during a stormy season.
Attacks are the second type of threat, and can be cateogorized further into sub-categories: Physical, DOS, subversion, masquerade, disclosure, and forgery. There are important differences to all of them. Physical attacks are the attacks most people try to prepare for; think jewelery store robbery or other attacks that is physical and to the point. DOS stands for denial of service, and occurs when an attacker overwhelms or otherwise compromises the host computer, rendering it unusable for a time. This type of attack can commonly occur on webpages, and make them unresponsive. Subversion is when the system is modified and/or damaged, sometimes for the benefit of the attacker. A masquerade can occur when a user of a system pretends to be someone they are not, and is closesly related to a forgery. Forgery attacks are a type of masquerade where they are pretending to be someone they are not by sending unauthorized messages. Finally, a disclosure occurs when private or revealing information is disclosed to public, often times to harm public image.
A risk is when there is a potential of an attack to a system or assets. The PRMF (proprietors risk management framework) is a version of the NIST’s RMF designed for more detailed and personalized analyses of risks. There are three steps: identify the risks, prioritize the risks, and establish the requirements. This can seem quite obvious at first, but it is very helpful to have a step-by-step process written out. In identifying our risks, we need to go over what we previously discussed and think about what type of threat agents and attacks our systems could be vulnerable to. Then, we prioritize these risk by estimating impacts and how likely each risk is to occur. Finally, we establish and implement rules and requirements to follow, to mitigate.
PEER 2 : Least Privilege and Defense In Depth
I chose to discuss the principle of least privilege and defense in depth.
The principle of least privilege is one of the basic things a company can do to implement boundary security. It is the idea that an users should only have access to the resources that is needed so they can perform the duties that they are required to do. For instance, an Cashier should not have access to financial records. The Principle of least privilege reduces the risk of attackers gaining access to critical systems or sensitive data by compromising a low level user account.
On the other hand, Defense in Depth is about preventing access to the system. It is a series of layered defensive mechanisms to protect an organization’s assets. It the idea that if one line of defense is compromised, an additional layer exist as a backup. for example, if a hacker successfully in penetrates a network, defense in depth gives administrators time to launch countermeasures. To Protect the date from being compromised an antivirus software and firewall should be in place to block further entry.
I have identified some key terms that are associated with security from our textbook. Specifically focusing on chapter 2 section 6 (2.6), which explains how security controls are implemented in a system according to certain requirements. Security controls fall into three different categories:
Â· Preventative: These are controls that block actions that violate security requirements. Most prefer to use these controls because they directly implement requirements.
Â· Detective: These are controls that can detect violations of requirements so that admins, security officers, auditors, or investigators can see them. Some of these controls can only detect problems but canâ€™t prevent them.
Â· Corrective: These are controls that take measures to help restore the system. These types of controls are rarely used in information security.
These controls are further broken down into six categories to simplify the job of analyzing security threats. The categories are physical, mechanical, logical, functional, procedural, cryptographic. If you havenâ€™t already, I would highly encourage all of you to read pages 82, 83, and 84 so that you can review the security controls in more depth! Also, please let me know if yâ€™all have any tips to remember the security control categories!
Are you busy and do not have time to handle your assignment? Are you scared that your paper will not make the grade? Do you have responsibilities that may hinder you from turning in your assignment on time? Are you tired and can barely handle your assignment? Are your grades inconsistent?
Whichever your reason is, it is valid! You can get professional academic help from our service at affordable rates. We have a team of professional academic writers who can handle all your assignments.
Students barely have time to read. We got you! Have your literature essay or book review written without having the hassle of reading the book. You can get your literature paper custom-written for you by our literature specialists.
Do you struggle with finance? No need to torture yourself if finance is not your cup of tea. You can order your finance paper from our academic writing service and get 100% original work from competent finance experts.
While psychology may be an interesting subject, you may lack sufficient time to handle your assignments. Don’t despair; by using our academic writing service, you can be assured of perfect grades. Moreover, your grades will be consistent.
Engineering is quite a demanding subject. Students face a lot of pressure and barely have enough time to do what they love to do. Our academic writing service got you covered! Our engineering specialists follow the paper instructions and ensure timely delivery of the paper.
In the nursing course, you may have difficulties with literature reviews, annotated bibliographies, critical essays, and other assignments. Our nursing assignment writers will offer you professional nursing paper help at low prices.
Truth be told, sociology papers can be quite exhausting. Our academic writing service relieves you of fatigue, pressure, and stress. You can relax and have peace of mind as our academic writers handle your sociology assignment.
We take pride in having some of the best business writers in the industry. Our business writers have a lot of experience in the field. They are reliable, and you can be assured of a high-grade paper. They are able to handle business papers of any subject, length, deadline, and difficulty!
We boast of having some of the most experienced statistics experts in the industry. Our statistics experts have diverse skills, expertise, and knowledge to handle any kind of assignment. They have access to all kinds of software to get your assignment done.
Writing a law essay may prove to be an insurmountable obstacle, especially when you need to know the peculiarities of the legislative framework. Take advantage of our top-notch law specialists and get superb grades and 100% satisfaction.
We have highlighted some of the most popular subjects we handle above. Those are just a tip of the iceberg. We deal in all academic disciplines since our writers are as diverse. They have been drawn from across all disciplines, and orders are assigned to those writers believed to be the best in the field. In a nutshell, there is no task we cannot handle; all you need to do is place your order with us. As long as your instructions are clear, just trust we shall deliver irrespective of the discipline.
Our essay writers are graduates with bachelor's, masters, Ph.D., and doctorate degrees in various subjects. The minimum requirement to be an essay writer with our essay writing service is to have a college degree. All our academic writers have a minimum of two years of academic writing. We have a stringent recruitment process to ensure that we get only the most competent essay writers in the industry. We also ensure that the writers are handsomely compensated for their value. The majority of our writers are native English speakers. As such, the fluency of language and grammar is impeccable.
There is a very low likelihood that you won’t like the paper.
Not at all. All papers are written from scratch. There is no way your tutor or instructor will realize that you did not write the paper yourself. In fact, we recommend using our assignment help services for consistent results.
We check all papers for plagiarism before we submit them. We use powerful plagiarism checking software such as SafeAssign, LopesWrite, and Turnitin. We also upload the plagiarism report so that you can review it. We understand that plagiarism is academic suicide. We would not take the risk of submitting plagiarized work and jeopardize your academic journey. Furthermore, we do not sell or use prewritten papers, and each paper is written from scratch.
You determine when you get the paper by setting the deadline when placing the order. All papers are delivered within the deadline. We are well aware that we operate in a time-sensitive industry. As such, we have laid out strategies to ensure that the client receives the paper on time and they never miss the deadline. We understand that papers that are submitted late have some points deducted. We do not want you to miss any points due to late submission. We work on beating deadlines by huge margins in order to ensure that you have ample time to review the paper before you submit it.
We have a privacy and confidentiality policy that guides our work. We NEVER share any customer information with third parties. Noone will ever know that you used our assignment help services. It’s only between you and us. We are bound by our policies to protect the customer’s identity and information. All your information, such as your names, phone number, email, order information, and so on, are protected. We have robust security systems that ensure that your data is protected. Hacking our systems is close to impossible, and it has never happened.
You fill all the paper instructions in the order form. Make sure you include all the helpful materials so that our academic writers can deliver the perfect paper. It will also help to eliminate unnecessary revisions.
Proceed to pay for the paper so that it can be assigned to one of our expert academic writers. The paper subject is matched with the writer’s area of specialization.
You communicate with the writer and know about the progress of the paper. The client can ask the writer for drafts of the paper. The client can upload extra material and include additional instructions from the lecturer. Receive a paper.
The paper is sent to your email and uploaded to your personal account. You also get a plagiarism report attached to your paper.
Delivering a high-quality product at a reasonable price is not enough anymore.
That’s why we have developed 5 beneficial guarantees that will make your experience with our service enjoyable, easy, and safe.
You have to be 100% sure of the quality of your product to give a money-back guarantee. This describes us perfectly. Make sure that this guarantee is totally transparent.Read more
Each paper is composed from scratch, according to your instructions. It is then checked by our plagiarism-detection software. There is no gap where plagiarism could squeeze in.Read more
Thanks to our free revisions, there is no way for you to be unsatisfied. We will work on your paper until you are completely happy with the result.Read more
Your email is safe, as we store it according to international data protection rules. Your bank details are secure, as we use only reliable payment systems.Read more
By sending us your money, you buy the service we provide. Check out our terms and conditions if you prefer business talks to be laid out in official language.Read more