Security and Information Assurance

Risk assessment

• Risk identification
• Risk analysis
• Cost/benefit analysis

Incident Response

• Legal requirements
• Incident response team
• Incident response policies
• incident response procedures

Security Models

• The McCumber/Maconachy, et.al. Information Assurance Model
• Confidentiality models
  • Bell LaPadula (BLP) Model
• Integrity models
  • Transaction-based integrity
    • Biba Model
• Other models
  • The Clark-Wilson Model

Security Policies

• Creation of Policies
• Maintenance of Policies
• Prevention
• Avoidance
• Recovery
• Defense in depth

Security Technologies

• Cryptosystems
  • Unkeyed cryptosystems
  • Secret key cryptosystems
  • Public key cryptosystems
    • Key infrastructure
    • Digital Signatures
  • Performance (software/hardware, operational approaches)
• Authenticaiton protocols and mechanisms
  • Identity keys
    • Biometrics
    • Passwords
    • Hardware key
  • Timestamps
  • Kerberos
• Physically secure hardware
• Violation detection
  • intrusion detection
  • liveness & availability checking
  • protection tools
• Penetration testing
• Integrity checking
  • Error-correcting codes
  • cryptographic hashing
  • checksums
• Countermeasures
  • Redundancy
  • Fault Tolerance

Threats and Attacks

• Social Engineering
• Passive Attacks
  • Sniffing
  • Man-in-the middle
• Active attacks
  • Forced entry
    • Password guessing
    • Dictionary attacks
  • Protocol attacks
  • Malware
    • Viruses
    • Trojans
    • Worms
    • Spyware
  • Buffer Overflow Attacks
  • Denial of Service

Network Security

• Network nodes
  • Routers
  • Switches
  • Access Points
• Perimeter defenses
  • Firewalls
    • Packet filter
    • Proxy
    • Personal
• Virtual Private Networks (VAN)
  • Protocol tunneling
  • Bearer services
• Secure design
  • Secure topology
  • intranet
• Pointer to attacks/threats (for DOS)

Operational Issues

• Auditing
• Cost / benefit analysis
• Asset Management
• Standards
• Enforcement
• Legal issues
• Physical plant security
• Disaster recovery (natural and man-made)

Forensics

• Digital Forensics and its relationship to other Forensic disciplines
  • Incident response responsibilities
  • Forensic procedures
  • Standards
  • Documentation
    • Audit logs
    • Investigators report
• Digital Evidence
  • Preservation of evidence
    • Imaging
• Rules/Standards of Evidence
• Evidence Analysis
• Forensic mechanisims
  • Acquisition mechanisms
  • Authentication mechanisms
  • Analysis mechanisms
  • Auditing mechanisims
• Profiling
  • Motivation analysis
  • Victimology

Human Considerations

• Applied Psychology and security policies
• Usability design and security
• Security mindset
• Identity theaft

Security Standards

• Risks and liabilities of computer-based systems (THESE CONCEPTS ARE UNDER OTHER TABS--Links Needed)
  • Authentication
  • Encryption; Certificates, Public Key
  • Capability User Authorization
  • Audit Logs
  • Access Logs
  • Backup
  • Viruses, Worms
  • Transaction Management, Rollback
  • Intrusion Detection
  • Privacy Protection
  • Security Standards Organizations
  • Security Assurance Service Organizations
  • Uses, misuses, and limits of computer technology
  • Historical examples of software risks (such as the Therac-25 case)
  • Implications of software complexity
  • Risk assessment and management
  • Feasibility assessment
  • Risk management principles
  • Contingency planning

-- Main.nova - 11 Feb 2006 (by Rich LeBlanc and Bob Sloan)

Social structure

• Legal Systems
  • Legal frameworks
  • Legislation
• Ethics
  • Ethical frameworks