Security Threats, Vulnerabilities And Control Measures Essay

So what exactly is vulnerability? Vulnerability is the state of being capable of being physically or mentally wounded. Everyone has many times where they are vulnerable, but one that stands out for me is when I share my writing.

As a modular, self-describing type of software service, Web services are self-contained applications that can be:

To start off with I chose to go with our banking or financial industry. The banking industry is constantly getting attacked by various methods on a daily basis. I chose this industry because I happen to know someone who works in the security sector at Wells Fargo Bank, he was a good person to get information on what he sees on a daily or weekly basis. This paper is the opinion of myself and with gathered information from various resources.

Vulnerability: Existence of a weakness, design or implementation error that can lead to an unexpected and undesirable event compromising the security of the system.

Vulnerability is often one-dimensionally viewed as the degree to which mishaps, pain and shame are allowed to enter into one’s life. However it is also the birthplace of creativity and basis for a feeling of self-worthiness. Thereby vulnerability creates authenticity. There are various different definitions of vulnerability according to the field in which the term is used. The most commonly found dictionary definition states that “Vulnerability refers to the susceptibility of a person, group, society or system to physical or emotional injury or attack. The term can also refer to a person who let

Cyber security is a major concern for every department, business, and citizen of the United States because technology impacts every aspect of our daily lives. The more we use technology the more complacent, we get with the information that is stored within our cyber networks. The more complacent, we get, the more vulnerable we become to cyber-attacks because we fail to update the mechanisms that safeguard our information. Breaches to security networks are detrimental to personal, economic, and national security information. Many countries, like Russia, China, Israel, France, and the United Kingdom, now have the abilities and technology to launch cyber-attacks on the United States. In the last five years there have been several attacks on cyber systems to gain access to information maintained by major businesses and the United States Government. Cyber-attacks cause serious harm to the United States’ economy, community, and the safety, so we need to build stronger cyber security mechanisms. Based on my theoretical analysis, I recommend the following:

Vulnerability: a weakness or fault in a system or protection mechanism that opens it to attack or damage.

Vulnerability is a weakness is a system that leaves the system open to attacks. Exposure is the known vulnerabilities that make a system weak and open to attacks without protection.

(3) Web Services in the Cloud - instead of delivering full applications, this service allows users to access APIs for added functionality.

Web applications are nowadays serving as a company’s public face to the internet. This has created the need to identify threats and attacks directed to data servers and web applications. Hackers exploit vulnerabilities in input validation and authentication affecting the web application in order to gain illegal access and disclose sensitive data or manipulate it to their benefits.

Technology is embedded in almost every aspect of business today. Information technology has now become a primary driver of market differentiation, business growth, and profitability. This new Internet led the evolution of the ubiquitous Web 2.0 that is capable of integrating physical and virtual world entities. Web 2.0 was characterized by specialized, publicly available data sources (e.g. mapping data, weather information, etc.) accessible via light-weight APIs (Application Programming Interfaces) that can be used to create value-added services in the form of Mashups. The propagation of Web APIs has transformed the Web into a platform for collaborative development and information sharing. The core of this story on the services transformation is not about the scale of the services nor is it about the revolution in digital technology. Rather, this story is about how the application of rule-based information technology tools to service activities is transforming the services component of the economy and mutating the web to become a nimble, dynamic programming platform.

According to the U.S. Department of Homeland Security in the article Cyber Threats to Mobile Phones, phones are now sharing hardware and software similar to a PC and becoming each time more like a PC. Therefore, the risks of being hacked are increasing, allowing hackers to attack mobile devices the same way as if they were doing it with a regular PC. Personal and professional information are more often stored on mobile devices therefore it is imperative to have our data secure. Security solutions for mobile devices are not as broad or high-tech as those for PCs. The majority of mobile security relies on the proper use and smart choices that the user makes on a daily basis to be protected against cyber attacks. Even the most careful person can be attacked but the possibilities of that happening are less when you are proactive.

Information security professional’s job is to deploy the right safeguards, evaluating risks against critical assets and to mitigate those threats and vulnerabilities. Management can ensure their company’s assets, such as data, remain intact by finding the latest technology and implementing the right policies. Risk management focuses on analyzing risk and mitigating actions to reduce that risk. Successful implementation of security safeguards depends on the knowledge and experience of information security staff. This paper addresses the methods and fundamentals on how to systematically conduct risk assessments on the security risks of information systems.

The reader will become familiarised with the term risk and it definitions from specifically the ISO 31000 standard of risk management and also the definition of risk from the criminology crime triangle. Which one of these two definitions that are the most suitable for usage within the security industry will be discussed and evaluated. How and why consequence is important when assessing risk priorities and determining where to allocate resources will be examined and answered.

The differences are: vulnerability is a fault within the system, such as software package flaws, unlocked doors or an unprotected system port. It leaves things open to an attack or damage. Exposure is a single instance when a system is open to damage. Vulnerabilities can in turn be the cause of exposure.