Cyber Security Chapter 1-3

Prevention

Take measures that prevent your assets from being damaged

Detection

Take measures so that you can detect when, how, and by whom an asset has been damaged

Reaction

Take measures so that you can recover your assets or to recover from a damage to your assets.

Confidentiality

Prevent unauthorised disclosure of information

Integrity

Prevent unauthorised modification of information

Accountability

Prove that an entity was involved in some event

Availability

Prevent unauthorised withholding of information or resources

Secrecy

Protection of data belonging to an organisation

Clark & Wilson

No user of the system, even if authorized, may be permitted to modify data items in such a way that assets or accounting records of the company are lost or corrupted.

Denial of Service (DoS)

Prevention of unauthorised access to resources or the delaying of time-critical operations

Non-repudiation of delivery:

Protects against a receiver of data denying that the data was received.

Non-repudiation of origin

Protects against a sender of data denying that data was sent.

Reliability

Addresses the consequences of accidental errors.

Safety

Measure of the absence of catastrophic influences on the environment, in particular on human life.

What is the onion model of protections (in to out)

Hardware, OS Kernel, operating system, services, and application

Data

Physical phenomena chosen by convention

to represent certain aspects of our conceptual and

real world.

Covert channels

Response time or memory usage may signal information

Inference in statistical databases

Combine statistical queries to get information on individual entries

Recovery tools

Restore data by reading memory directly and then restoring the file structure. Such a tool can be used to circumvent logical access control as it does not care for the logical memory structure

Buffer overruns

value assigned to a variable is too large for the memory buffer allocated to that variable; memory allocated to other variables is overwritten

Object reuse

In single-processor systems, when a new process is activated, it gets access to memory positions used by the previous process

Backup

Whoever has access to a backup tape has access to all the data on it. Logical access control is of no help and backup tapes have to be locked away safely to protect the data.

Core dumps

Same story again

Side channel analysis

Smart cards implement cryptographic algorithms so that keys never leave the card; keys may still be obtained by observing side channels (power consumption, timing behaviour).

SSL

Error messages are encrypted to defend against certain guessing attacks; attacks are still possible if the timing of the reply depends on the nature of the error message

Still learning (13)

You've started learning these terms. Keep it up!