Aula 02 - Aplicação de contramedidas de segurança para mitigar ataques maliciosos

© 2012 Jones and Bartlett Learning, LLC www.jblearning.com
Fundamentals of Information
Systems Security
Unit 2
Aplicação de contramedidas de
segurança para mitigar ataques
maliciosos

Fundamentals of Information Systems Security © 2012 Jones and Bartlett Learning, LLC www.jblearning.com© 2012 Jones and Bartlett Learning, LLC www.jblearning.com
Learning Objective
Describe how malicious attacks, threats, and
vulnerabilities impact an IT infrastructure.

Key Concepts
§Attacks, threats, and vulnerabilities in a
typical IT infrastructure
§Common security countermeasures
typically found in an IT infrastructure
§Risk assessment approach to securing an
IT infrastructure
§Risk mitigation strategies to shrink the
information security gap

Fundamentals of Information Systems Security © 2012 Jones and Bartlett Learning, LLC www.jblearning.com
DISCOVER: CONCEPTS

Definitions
§Risk: Probability that an intentional or
unintentional act will harm resources
§Threat: Any accidental or intentional event
that negatively impacts company resources
§Vulnerability: Inherent weakness that may
enable threats to harm system or networks
Risks, threats, and vulnerabilities affect
confidentiality, integrity, and availability (CIA).

Atividade Maliciosa por País

Types of Threats
§Malicious software
§Device failure
§Application failure
§Natural disaster
§Intrusive cracker

Types of Vulnerabilities
§Insecure servers or services
§Exploitable applications and protocols
§Unprotected system or network resources
§Traffic interception and eavesdropping
§Lack of preventive and protective measures
against malware or automated attacks

Vulnerabilidades comuns nos 7 domínios

Alvos de ameça nos 7 domínios

Quem sou eu?

Identify the Criminal
Criminal Profile #1
§Victimizes people through unsolicited
e-mail messages to get victim’s money
§Does not rely on intrusive methods to
commit crimes
§Is motivated by financial gain

Golpista da Internet

Identify the Criminal (Continued)
Criminal Profile #2
§Enters systems without permission to raise
awareness of security issues
§Does not work for the company or its
clients
§Does not intend harm, just tries to be
“helpful”
§Is motivated by impulse

Gray-hat hacker

Criminal Profile #3
§Engages in illegal black market
transactions on the Internet
§Traffics drugs, weapons, or banned
materials
§Is motivated by financial gain

Terrorists or traffickers

Criminal Profile #4
§Enters systems without permission to take
advantage of security issues
§Does not work for the company or its
clients
§Does not intend to help, only wants to
cause harm
§Is motivated by peer acceptance

Black-hat hacker or cracker

Criminal Profile #5
§Intrudes upon systems to verify and
validate security issues
§Works for the company or one of its clients
§Does not intend harm, just tries to be
“helpful”

White-hat hacker

Summary
§Threats are controllable.
§Risks are manageable.
§Vulnerabilities are unavoidable.
§All of these negatively affect the CIA
triad.
§Not all threats are intentional.

Aula 02 - Aplicação de contramedidas de segurança para mitigar ataques maliciosos

Recomendados

Recomendados

Mais conteúdo relacionado

Mais procurados

Mais procurados (20)

Semelhante a Aula 02 - Aplicação de contramedidas de segurança para mitigar ataques maliciosos

Semelhante a Aula 02 - Aplicação de contramedidas de segurança para mitigar ataques maliciosos (20)

Mais de Leinylson Fontinele

Mais de Leinylson Fontinele (20)

Último

Último (20)

Aula 02 - Aplicação de contramedidas de segurança para mitigar ataques maliciosos