This is an image of a promotional giveaway ticket from the night Ray Bourque’s number was raised to the rafters in Boston. The Bruins honored Bourque, one of the Bruins most beloved hockey players, on October 4 2001 in front of a packed house before the Bruins played the Anaheim Ducks that evening.
1. What is an information security program?
2. What functions constitute a complete information security program?
3. What organizational variables can influence the size and composition of an information security program’s staff?
4. What is the typical size of a security staff in a small organization? A medium sized organization? A large organization? A very large organization?
5. Where can an organization place the information security unit? Where should (and shouldn’t) it be placed?
6. Into what four areas should the information security
functions be divided?
7. What are the five roles that an information security professional can assume?
8. What are the three areas of the SETA program?
9. What can influence the effectiveness of a training program?
10. What are some of the various ways to implement an awareness program?
I recently found a bunch of stuff from back in the day, including some stuff from my days as a contractor to some of the broadcast networks. Here’s a pic of some media passses from the Boston Bruins 1997 to 1998 season – the Bruins lost that year in the playoffs to the Washington Capitals.
Two examples of Ballantine’s beer trays, from the Mr.Ed collection
1. What is an information security framework?
A framework is an outline of security controls that is part of creating or implementing a security model. The blueprint is based off of the framework, containing more detail on controls in place and controls that are needed.
3. What is a security model?
A security model is a generic blueprint that assists in creating a working security plan.
5. What is access control?
Access control enables an organization to define and regulate access to data, and is based on identification, authentication, authorization and accountability.
10. What is a data classification model? How is data classification different then clearance level?
Data classification attempts to categorize information based on the level of damage that would be done if the information is exposed. The more important the data, the higher the classification level. Clearance level is a rating scheme that attempts to categorize a user’s role in an organization and access to information is granted to groups of users in each level.
11. Which international information security standards have evolved from the BS 7799 model? What do they include?
BS7799 was published by the British Standards
Institute. From this document, the ISO/IEC 27002 was released, and then later
renamed as ISO/IEC 27002. BS 7799’s second part became ISO/IEC 27001.These
purchasable standards include recommendations for information security
management for use by those who initiate, implement or maintain organizational
security. The 2005 version includes the
Plan-Do-Check- Act cycle, also known as the Deming Quality assurance model.
13. What are the documents in the ISO/IEC 27000
series?
14. What is COBIT? Who is its sponsor? What does it accomplish?
COBIT stands for Control Objectives for Information and Related Technologies. It provides advice for implementation of sound controls and control objectives for Information Security. COBIT provides a framework to support information security requirements and assessment needs, and breaks this into four domains: plan and organize, acquire and implement, deliver and support, and monitor and evaluate.
15. What are the two primary advantages of NIST
security models?
Patterns
IP attacks typically follow a set pattern. This pattern can be recognized, and rules created to help thwart it – this pattern is refered to as an attack signature. Signatures may be used to create IDS rules.
Reconnaissance and Discovery
Would-be attackers usually engage in a well-understood sequence of activities, called reconnaissance and discovery.
During the reconaissance phase The attacker may ping sweep or port probe the target. The purpose of this reconnaissance is to find out what is running and what may be vulnerable.
PING sweep
Can identify active hosts on an IP network
Port probe
Detect UDP- and TCP-based services running on a host
The attack
Attacker focuses on the attack itself. A more seasoned attacker may cover their tracks by attempting to modify log files, or terminating any active direct connections.
One method of is a brute force attack that overwhelms a victim.
Denial of Service Attacks
Designed to interrupt or completely disrupt operations of a network device or communications
SYN Flood attack
Uses the three-way TCP handshake process to overload a device on a network
Broadcast amplification attack
Malicious host crafts and sends ICMP Echo Requests to a broadcast address
Distributed Denial of Service Attack (DDOS)
DoS attacks are launched from numerous devices, such as acommand and control botnet.
DDoS attacks consist of four main elements
Attacker
Handler
Agent
Victim
Session Hijacking
The purpose of session hijacking is to impersonate an authenticated user in order to gain access to a system
Once a session is hijacked, the attacker can send packets to the server as the victim.
RFC 2401: The goal of IPSec are to provide the following kinds of security
RFC 2196: Indicated that the following documents are components of a good security policy
From the MrEd collection- Two examples of beer trays promoting Ambassador Beer. Ambassador beer was produced by the G. Krueger Brewing Co. in Newark. NJ.
Click for large version!