{"id":110,"date":"2017-01-28T22:14:36","date_gmt":"2017-01-28T22:14:36","guid":{"rendered":"https:\/\/www.cia-cubed.org\/secco\/?p=110"},"modified":"2017-02-07T22:15:39","modified_gmt":"2017-02-07T22:15:39","slug":"threat-summary","status":"publish","type":"post","link":"https:\/\/www.cia-cubed.org\/secco\/2017\/01\/28\/threat-summary\/","title":{"rendered":"Threat summary"},"content":{"rendered":"

Simple chart with classification of different InfoSec threats.<\/p>\n\n\n\n\n\n
Misdirection:<\/b><\/p>\n
    \n
  • Spoofing,<\/span><\/li>\n
  • Pharming,<\/span><\/li>\n
  • XSS,<\/span><\/li>\n
  • poisoning (arp,dns) <\/span><\/li>\n<\/ul>\n<\/td>\n
Social trust:<\/b><\/p>\n
    \n
  • Phishing,<\/span><\/li>\n
  • Social engineering,<\/span><\/li>\n
  • Social network attacks,<\/span><\/li>\n
  • <\/li>\n<\/ul>\n<\/td>\n
Vulnerability:<\/b><\/p>\n
    \n
  • SQl inject,<\/span><\/li>\n
  • code injection,<\/span><\/li>\n
  • path traversal,<\/span><\/li>\n
  • buffer overflow, <\/span><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n
Snooping:<\/b><\/p>\n
    \n
  • Replay attacks,<\/span><\/li>\n
  • Sniffing,<\/span><\/li>\n
  • Keylogging,<\/span><\/li>\n
  • Session Hijacking,<\/span><\/li>\n
  • TEMPEST <\/span><\/li>\n<\/ul>\n<\/td>\n
Password attacks:<\/b><\/p>\n
    \n
  • Dictionary,<\/span><\/li>\n
  • Brute force,<\/span><\/li>\n
  • Rainbow(hash) tables,<\/span><\/li>\n
  • Shoulder surfing<\/span><\/li>\n
  • <\/li>\n<\/ul>\n<\/td>\n
Escalation:<\/b><\/p>\n
    \n
  • Authentication<\/span><\/li>\n
  • Bypass,<\/span><\/li>\n
  • Pivoting,<\/span><\/li>\n
  • Heuristic commits<\/span><\/li>\n
  • <\/li>\n<\/ul>\n<\/td>\n<\/tr>\n
Malware:<\/b><\/p>\n
    \n
  • Rootkits,<\/span><\/li>\n
  • Trojans,<\/span><\/li>\n
  • Worms,<\/span><\/li>\n
  • Spyware <\/span><\/li>\n<\/ul>\n<\/td>\n
Malicious actions:<\/b><\/p>\n
    \n
  • DoS,<\/span><\/li>\n
  • DDoS,<\/span><\/li>\n
  • Virus,<\/span><\/li>\n
  • Scare\/Ransomware <\/span><\/li>\n<\/ul>\n<\/td>\n
Mitigations:<\/b><\/p>\n