INFORMATION, ASSURANCE & SECURITY

Attackers send deceptive emails or messages to trick recipients into revealing sensitive information, clicking on malicious links, or downloading malicious attachments.

• Man-in-the-Middle (MitM) Attacks

• SQL Injection

• Cross-Site Scripting (XSS)

• Phishing

Injecting malicious scripts into web pages viewed by other users, allowing attackers to steal information or perform actions on behalf of the victim.

• Man-in-the-Middle (MitM) Attacks

• SQL Injection

• Cross-Site Scripting (XSS)

• Phishing

Intercepting communication between two parties to eavesdrop, modify, or inject malicious content into the conversation.

• Man-in-the-Middle (MitM) Attacks

• SQL Injection

• Cross-Site Scripting

• Phishing

Can detect possible areas of data leakage or illegal access and assist in determining how data flows across a system.

• Data Flow Diagram

• DREAD Model

• Attack Trees

• STRIDE Model

S in STRIDE Models stands for what word?

E in STRIDE Models stands for what word?

It is the visual representations of potential attack scenarios, with the root node representing the main goal of an attacker

U.S. federal law that sets standards for the security and privacy of protected health information (PHI) in the healthcare industry.

Manipulating individuals into divulging confidential information, credentials, or access to systems through psychological manipulation.

Threat modeling and the identification of attack vectors are essential components of any effective cybersecurity strategy.

• TRUE

• FALSE