Threats

Index

A

• access control, 176–182, 185
• access control list (ACL), 119–120, 177–178
• account takeover, 72–76
• artificial intelligence (AI), 53, 81, 116–117
• attenuation, 152, 173–174
• authentic/authentication
  • attacks on mechanisms of, 28–30
  • defenses for, 37–38
  • defined, 1
  • denial of service and, 142, 144
  • identifiers and, 2–12
  • organization considerations regarding, 24–25
  • threats against types of, 30–36

• authority. See also expansion of authority
  • artificial intelligence and, 160
  • cloud and, 160, 164–166
  • of code, 157
  • to communicate, 154–155
  • confused deputies and, 160–162
  • defined, 152, 182
  • as design pattern, 182–185
  • expanding, 153, 159
  • granting of, 154, 155
  • Internet of Things and, 163
  • levels of, 153
  • machine learning and, 160
  • mobile phones and, 163–164
  • overview of, 126

B

• blockchain, 81–82, 117
• business email compromise, 269–271

C

• canonicalization, 158
• ciphertext, 123–124, 127
• cloud
  • authority and, 160, 164–166
  • denial of service and, 144
  • information disclosure and, 114–116
  • kill chain and, 273–274
  • repudiation in, 80
  • spoofing and, 23
  • tampering with, 53–54

• confused deputy, 160–162
• cryptocurrency, 81–82, 133
• cryptography, 58, 84–85, 123–128

D

• data
  • computation of, 110–111
  • human connection of, 106–107
  • linkages of, 107
  • in motion, 101–103, 104, 126–127, 129
  • obscured, 99–100
  • processes and, 104–105
  • at rest, 96–101, 104, 125–126, 129

• denial of service (DoS)
  • abundance and, 146–147
  • amplification and, 141
  • authentication services and, 144
  • authentication targets and, 142
  • besoke ...