Quiz 1 Flashcards

Vocabulary flashcards covering threat modeling diagrams, MITRE lists, STRIDE threat categories, risk formulas, handling strategies, and risk analysis concepts from COMP 435 Lecture 3.

Trust Domain

A group of components that we assume can trust one another.

Dataflow Diagram

A diagram used for a particular task to reason about data sources, systems passed through, stored data, and how data can be accessed, read, and modified at each point.

User Workflow Diagram

A diagram that maps out user steps for a particular task to analyze potential bypasses in processes such as authentication.

Resource Lifecycle Diagram

A diagram used to model how a resource or account transitions from one stage to another throughout its existence (e.g., Setup, Active, Disabled, Dormant, Archived).

CWE (Common Weakness Enumeration)

A MITRE-maintained list and system of security focus representing classes of security weaknesses.

CVE (Common Vulnerabilities and Exposures)

A MITRE-maintained list tracking specific instances of publicly known cybersecurity vulnerabilities.

MITRE ATT&CK Matrix

A matrix created by MITRE detailing enterprise attacker tactics and techniques.

STRIDE

A threat modeling framework used for systematically identifying common types of security threats: Spoofing, Tampering, Repudiation, Information disclosure, Denial of service, and Escalation of privilege.

Spoofing

In the STRIDE framework, the threat category defined as impersonating an entity.

Tampering

In the STRIDE framework, the threat category defined as unauthorized alteration.

Repudiation

In the STRIDE framework, the threat category defined as denying responsibility for an action.

Information Disclosure

In the STRIDE framework, the threat category defined as the unauthorized release of data.

Denial of Service

In the STRIDE framework, the threat category defined as the loss of availability of a system or resource.

Escalation of Privilege

In the STRIDE framework, the threat category defined as gaining unwarranted privilege to resources.

Risk

A possible event with a negative outcome; a potential problem.

Risk Impact

A loss associated with a risk event, such as loss of life, lost time, lost money, or bad publicity.

Risk Probability

The likelihood that a risk event will occur within a given timeframe, bounded by $0 \le \text{Pr}[\text{Event}] \le 1$.

Risk Exposure

The overall calculated loss value for a risk, defined by the equation $\text{risk exposure} = \text{risk impact} \times \text{risk probability}$.

Risk Avoidance

A strategy for handling risk by changing something in order to completely avoid the risk.

Risk Transfer

A strategy for handling risk by reallocating the risk or purchasing insurance.

Risk Assumption

A strategy for handling risk that involves choosing to accept the risk.

Risk Analysis Process

A six-step methodology consisting of: 1. Identify assets, 2. Determine vulnerabilities, 3. Estimate likelihood of exploitation, 4. Compute expected annual loss, 5. Survey applicable controls and their costs, and 6. Project annual savings of control.

Probability Measures for Risk Exploitation

The three metrics used to estimate the likelihood of exploitation in risk analysis: Model-based, Frequency-based, and Expertise-based probability measures.

Authorization

Spoofing reflects which security policy?

Integrity

Tampering reflects which security policy?

Accountability

Repudiation reflects which security policy?

Confidentiality

Information Disclosure reflects which security policy

Availability?

Denial of Service reflects which security policy?

Authorization

Escalation of Privileges reflects which security policy?

Identify Assets

1st step of Risk Analysis. Ex: People, supplies, hardware, data, software, documentation, data, reputation

Determine Vulnerabilities

2nd step of Risk Analysis. Essentially threat modeling.

Estimate Liklelihood of exploitation

3rd step of Risk Analysis. Calculate Risk probability using

• Model-based probability

• Frequency-based probability

• Or Expertise-based probability

Compute Annual Expected Loss

4th step of Risk Analysis. Calculate Risk Exposure.

Survey and Select Controls

5th step of Risk Analysis. Decide methods and Evaluate.

Ex: Choose methods such as prevention/detection. Evaluate mitigated risks, one-time/ongoing costs, and ease of use.

Project Costs and Savings

6th Step of Risk Analysis. Put it altogether. After calculating risk exposure through threat modeling and identifying assets, find the overall costs and savings.

Policy Primitives

Confidentiality, Integrity, Accessibility (CIA)

Authorization

Accountability

Adversaries

Source of threat or attack

Attackers

Maliciously motivated threat

Resources

Assets we want to protect. i.e hardware, data, software

Impact

Loss. effects of exploited vulnerability

Harm

Effect of exploitation. violation of a security policy.

ex: Money stolen from bank account

Vulnerability

Weakness that could cause harm

ex: side channel where money transfer occurs has no authentication

Threat

Circumstances/source of harm

ex: curious or malicious person explores network transfers

Attack

• attack surface, vector, threat agent, adversary, attacker

Attack Surface

set of vulnerabilities

Attack Vector

Steps of attack

Threat Agent/Adversary

Source of attack

Attacker

Malicious threat