quartz/content/notes/02-concepts-and-roles.md

title	aliases	tags
02-concepts-and-roles		comp210

News

• more personal email scams
  • They have more knowledge about your personal information
• deakin university attack
  • staff credentials were leaked and acces to students information was gathered
• rusian hackers attack lithuania
• attacks against india
• retbleed attack affects AMD and Intel CPUs (spectre-based speculative-execution attacks)

Vulnerabilities

• a potential weakness in an asset
  • or in its defense security control
• e.g., flaws in software packages or an unprotected system port

exploit is the technique used to attack

• RAND report r-609-1 (1979)
• need to be aware of vulnerabilities

e.g.,

• websites can steal browser data via extension APIs

Security services and control

• services
  • the intended security goal or property (C.I.C provides the three main security services)
• controls
  • the mechanisms employed to implement the services

CIA

Privacy and Actions

Shared responsibility

Balance