IndianZ Logo

About Blog Cheatsheets Defense Links Offense
Defense
Architecture Authorities Concept Forensic Introduction ITlawCH Malware Management Measures Methods Network Policy Risks Rules Threats Unix Linux Windows

Threats

Attackers
economic intelligence, military intelligence, hacker, cracker, viruswriters, organized crime, terrorists, competitors, employees, government
Attacks
destruction of information, manipulation of information, copies of information, manipulation of employees, sniffing, backlogging, viruses and worms, logic bombs, trojan horses, denial-of-service, man-in-the-middle, spoofing, remote control, identity assumption, fraud, abuse, phishing, hijacking
Targets
datacommunication networks, companies, banks and insurances, military systems, health services, authorities, power supply, water supply, logistic systems, traffic control, stock exchange, creditcard-information, adresses, government, schools
Damages
financial damage, image, customers, recovery costs, computing power, computer components, confidentiality, integrity, privacy, know-how

Threat Analysis

What or who is potential dangerous?
Does the attack come from outside or inside?
What is the simpliest way to cause damage?
What makes us an attractive target for intruders?
What consequences can result from a successful attack?
How much money, time and know-how has a potential attacker?
How big is the probability of an attack?
How does the industry comparison with competitors looks like?