Information Security

Quick Quiz 1- What is a computer threat? a) It can be defined as a threat to any element or action capable of undermining the security of information. b) hacker or someone you trust steals information and demands compensation for your return. c) Unauthorized access to information. What an organization is trying to protect. Access to computer systems can be done remotely or directly. 2- Which is a deliberate act of tresspass? a) It can be defined as a threat to any element or action capable of undermining the security of information. b) hacker or someone you trust steals information and demands compensation for your return. c) Unauthorized access to information. What an organization is trying to protect. Access to computer systems can be done remotely or directly. 3- Deliberate act of information (extortion / blackmail)? a) It can be defined as a threat to any element or action capable of undermining the security of information. b) hacker or someone you trust s...

Deliberate Act of Trespass  Definition:  Unauthorized access to information. That an organization is trying to protect. Access to computer systems can be done remotely or directly. Logically, direct access is made to the computer that contains the external computer system. A private or public computer network is used for remote computer intrusion. It could be thought that the simple access is already fulfilled with the prescribed crime, but it is true that the intrusion must allow the availability of the data contained in that system. With fine fines, as well as the tastes of the data, how to proceed with its modification, its copy or use them. It also requires that access to the sea by mocking or violating the security measures that protect the computer system. These security measures are those that within the system itself must prevent the access of third parties without authorization. These security measures can be both software and hardware. From passwords to access t...

Deliberate Act of Sabotage or Vandalism Definition: acts aimed to destroy an information asset and, ultimately, damage the image of an organization. Example:  -Hackers accessing a system and damaging or destroying critical data. Hacking It is the permanent search for knowledge in everything related to computer systems, their security mechanisms, their vulnerabilities, how to take advantage of these vulnerabilities and the mechanisms to protect themselves from those who know how to do it. The people who are dedicated to this are called hackers. Cracking It is the permanent attempt of violation of the security of the computer systems, with justified ends or not. In the case of program cracking the definition is that of creator of cracks, iterally Mamluk, which are programs programmed for the lack of protection of commercial programs so that they can be used without limit. Example David L. Smith (1999): Smith created the "Melissa" virus,...

Deliberate Acto of Information (Extortion / Blackmail). Definition: hacker or trusted insider steals information and demands compensation for its return. Example:  -Theft of data files containing customer. -Credit card information. Ransomware  Is a type of malicious program that allows access to certain parts or files of the infected system, and asks for a ransom to remove this restriction.Some types of ransomware encrypt the operating system files that use the device and coerce the user to pay the rescue. Although the attacks became popular since the mid-2010s, the first attack was succeeded in the late 1980s by Dr. Joseph Popp. His company grew internationally in June 2013. The McAfee company noted that only in the first quarter of 2013 had detected more than 250 000 unique types of ransomware. Examples The Civil Guard of Castellón has arrested a computer hacker who used his knowledge to violate all security measures on his computer, ...

Security threat It can be defined as a threat to any element or action capable of undermining the security of information. Threats arise from the existence of vulnerabilities, that is, a threat can only exist if a vulnerability exists that can be exploited, regardless of whether the security of an information system is compromised or not. Various situations, such as the increase and improvement of social engineering techniques, the lack of training and awareness among users in the use of technology, and above all the increasing profitability of the attacks, have led in recent years to the increase of intentional threats. Threat components: Objectives Active of the organization that could be attacked information (your confidentiality, integrity, availability), software, hardware, network service, system resource, etc. Example:   S oftware attack. Agents People or organizations that originate the threat, intentional or unintentional employees, f...