Nature Affecting Information Security?
Forces of nature, force majeure, or acts of God are dangerous because they are unexpected and can occur with very little warning
Can disrupt not only the lives of individuals, but also the storage, transmission, and use of information
Include fire, flood, earthquake, and lightning as well as volcanic eruption and insect infestation
Since it is not possible to avoid many of these threats, management must implement controls to limit damage and also prepare contingency plans for continued operations.
Question 44. What Are Technical Hardware Failures Or Errors?
Technical hardware failures or errors occur when a manufacturer distributes to users equipment containing flaws
These defects can cause the system to perform outside of expected parameters, resulting in unreliable service or lack of availability
Some errors are terminal, in that they result in the unrecoverable loss of the equipment
Some errors are intermittent, in that they only periodically manifest themselves, resulting in faults that are not easily repeated.
Question 45. What Are Technical Software Failures Or Errors?
- This category of threats comes from purchasing software with unrevealed faults
- Large quantities of computer code are written, debugged, published, and sold only to determine that not all bugs were resolved
- Sometimes, unique combinations of certain software and hardware reveal new bugs
- Sometimes, these items aren’t errors, but are purposeful shortcuts left by programmers for honest or dishonest reasons.
Question 46. What Is Technological Obsolescence?
When the infrastructure becomes antiquated or outdated, it leads to unreliable and untrustworthy systems
Management must recognize that when technology becomes outdated, there is a risk of loss of data integrity to threats and attacks
Ideally, proper planning by management should prevent the risks from technology obsolesce, but when obsolescence is identified, management must take action.
Question 47. What Is An Attack?
An attack is the deliberate act that exploits vulnerability
It is accomplished by a threat-agent to damage or steal an organization’s information or physical asset
An exploit is a technique to compromise a system
A vulnerability is an identified weakness of a controlled system whose controls are not present or are no longer effective
An attack is then the use of an exploit to achieve the compromise of a controlled system.
Question 48. What Is A Malicious Code?
This kind of attack includes the execution of viruses, worms, Trojan horses, and active web scripts with the intent to destroy or steal information. The state of the art in attacking systems in 2002 is the multi-vector worm using up to six attack vectors to exploit a variety of vulnerabilities in commonly found information system devices.
Question 49. Define Virus ?
Virus – Each infected machine infects certain common executable or script files on all computers to which it can write with virus code that can cause infection.
Question 50. Define Hoaxes ?
Hoaxes – A more devious approach to attacking computer systems is the transmission of a virus hoax, with a real virus attached.
Question 51. What Is Distributed Denial-of-service (ddos)?
DDoS is an attack in which a coordinated stream of requests is launched against a target from many locations at the same time.
Question 52. What Is Back Door?
Back Doors – Using a known or previously unknown and newly discovered access mechanism, an attacker can gain access to a system or network resource.
Question 53. Define Dictionary Attack ?
The dictionary password attack narrows the field by selecting specific accounts to attack and uses a list of commonly used passwords (the dictionary) to guide guesses.
Question 54. What Are The Various Forms Of Attacks ?
- IP Scan and Atack
- Web Browsing
- Unprotected Shares
- Mass Mail
- Back Doors
- Password Crack
- Brute Force
- Denial of Service
- Distributed DoS.
Question 55. What Is Denial-of-service (dos) ?
attacker sends a large number of connection or information requests to a target
so many requests are