book

Cyber Security, 2nd Edition

by David Sutton

December 2022

Intermediate to advanced

222 pages

7h 19m

English

BCS, The Chartered Institute for IT

Read now

Unlock full access

BackgroundThe expectations of users and organisationsCyber security in the wider context
Some thoughts on social, political and other issuesCybercrimeCyber harassment or cyber bullyingCyber warfareCyber surveillanceWhy we should careWhat makes cyber security difficult?
Individual targetsBusiness targetsCritical national infrastructure (CNI) targetsBuilding targetsAcademia and research targetsManufacturing and industry targets
Cyber vulnerabilitiesCyber impacts
Types of attackerMotives: what drives an attackerMeansCyber-attack methodsTypes of cyber-attack and attack vectorsThe risks of conducting a cyber-attack
A general view of riskAssetsThreatsVulnerabilitiesLikelihood or probabilityQualitative and quantitative assessmentsThe risk management process
FailuresBusiness continuityDisaster recovery
General security adviceTechnical security adviceMobile working
Security policies overviewDirective policiesAdministrative policiesCommunal policiesTechnical policies
AwarenessTraining
TrustInformation classificationProtection of shared informationAnonymisation of shared informationRoutes to information sharing
Cyber security standardsISO/IEC 27000 series standardsOther relevant ISO standardsBusiness continuity standardsNational Institute of Standards and Technology (NIST) standards
General cyber security adviceUK government cyber security advice
UK LawEU Directives and Regulations
Generic cyber security training and qualificationsSpecific cyber security training and qualifications
AbbreviationsGlossary

Content preview from Cyber Security, 2nd Edition

5 CYBER THREATS

In this chapter, we shall examine the various types of threat that individuals and organisations face, including types of attacker, types of attack, the motivations for and the benefits of launching an attack, the risks involved in doing so and how attacks typically are conducted.

There are a number of terms associated with cyber threats that are worth exploring before we look into the types of threat in greater detail:

Threat source or sponsor is the person or organisation that wishes to benefit from attacking an information asset. Threat sources often pay or otherwise pressurise threat actors to attack information assets on their behalf.
Threat actors or agents are the individuals or groups of individuals who actually ...