Analyzing Computer Security: A Threat / Vulnerability / Countermeasure Approach

1. Security Blanket or Security Theater?

Chapter Spotlight

• Computer security: the threat–vulnerability–countermeasure paradigm

• Harm to confidentiality, integrity, availability

• Nature of threats; method–opportunity–motive; risk

• Kinds of attackers

• Countermeasure effects: prevent, deter, detect, recover

• Analyzing security

How Dependent Are We on Computers? 6

What Is Computer Security? 8

Threats 11

Harm 24

Vulnerabilities 30

Controls 30

Analyzing Security with Examples 33

Conclusion 34

Exercises 35

Imagine a series of events unfolding on a single day. First, 20 million U.S. smart phones stop working. Next follow outages in wireline telephone service, problems with air traffic control, disruptions to the New York Stock Exchange, ...