Help
Options
Didn't know it?
click below
click below
Knew it?
click below
click below
Don't Know
Remaining cards (0)
Know
retry
shuffle
restart
0:00
Embed Code - If you would like this activity on your web page, copy the script below and paste it into your web page.
Normal Size Small Size show me how
Normal Size Small Size show me how
CH1SecurityExpectati
Software Vulnerability Fundamentals_Introduction : The Art of Software Security
| Question | Answer |
|---|---|
| What helps determine which software issues people consider to be security violations? | Considering the possible expectations people have about software security. |
| What are the three core components of security? | Confidentiality, integrity, and availability. |
| The cornerstones (or core components) of software security are used to evaluate what? | Possible expectations for software security. |
| What does confidentiality require? | It requires that information be kept private. |
| What does the security concept of confidentiality require? | Keeping information private.Hiding sensitive information.Hiding the existence of information. |
| What type of sensitive information do software systems often have to protect? | Data containing secrets, including: Nation- or state-level intelligence Company trade secrets Sensitive personal information |
| Where do businesses and organizations store many of their secrets? | In their software. |
| Why do businesses expect financial and sensitive data to be kept confidential? | Strategic importance: Protects plans and performance data from competitors. Prevents crime: Stops unlawful competitive advantages and insider trading. Legal protection: Safeguards business relationships, contracts, and lawsuits. |
| What happens to confidentiality expectations when a software system stores personal data? | They are often high. |
| Why must software systems strictly control who can view individual user details? | To protect user privacy and meet organization expectations. |
| What might improper disclosure of data involve if it contains financial details or medical records? | Liability issues. |
| What type of user data is software often expected to keep secret? | Personal files E-mails Activity histories Accounts and passwords |
| What constitutes a secret in many types of software? | The actual program code. |
| Why might actual program code be kept secret or classified as highly sensitive? | Trade secrets: Proprietary algorithms: commodity market transaction evaluators or new 3D graphics engines. Sensitive logic: Systems assessing credit risks for loan applicants .Competitive fairness: Hidden combat system algorithms in online video games. |
| What two security processes does software use to compartmentalize information and restrict data access? | Authentication (verifying identity) Authorization (verifying permissions) |
| What security mechanisms are used to compartmentalize information and ensure only authorized parties can access or view data? | Access Control Technology: Authenticates users and checks their authorization when accessing data. Encryption: Maintains the confidentiality of data when it is transferred or stored. |
| What is data integrity? | The trustworthiness and correctness of data. |
| What is data integrity in software? | Definition: Trustworthiness and correctness of data. Expectation: Software capability to prevent unauthorized alteration. |
| What two elements does data integrity refer to? | Contents of the data Source of the data |
| How do different types of software maintain or manage data integrity? | Preventing unauthorized source changes Detecting alterations to data Noting changes in origins |
| What software security approach restricts data modifications by authenticating users and verifying their permissions first? | Compartmentalization of information (a core component of software integrity). |
| What component of software ensures data source integrity by definitively verifying who the user is? | Authentication Confirms user identity. Preserves data source integrity. |
| What is the general user expectation regarding data integrity, and what constitutes a security flaw in this context? | Users expect integrity just like confidentiality. Unauthorized modification of information is a security flaw. |
| If an issue allows users to masquerade as others and manipulate data, what type of security breach is it considered? | A breach of data integrity. |
| Why are software vulnerabilities particularly devastating in breaches of integrity? | Attackers modify data. They leverage changes. They gain deeper access. They compromise software systems. They seize hosting resources. |
| What is the definition of availability in information security? | The capability to use information and resources. |
| What is Availability in system security? | Capability to use info and resources. Expectations users have about system uptime. Resilience to denial-of-service (DoS) attacks. |
| An issue that allows users to easily crash or disrupt software is a vulnerability that violates which core security expectation? | Availability |
| What security issue involves using specific inputs, environmental disruptions, or resource exhaustion (like CPU, disk, or network bandwidth) to disable a program? and what does it effect? | Denial of Service (DoS) / Resource Exhaustion. it effects availability. |
Created by:
user-1830624
Popular Computers sets