Threats, Attacks, and Assets

Threats are potential dangers that may exploit vulnerabilities, Attacks are deliberate actions that exploit vulnerabilities to cause harm, and Assets are valuable resources that need protection.

Threats

• A threat is any circumstance or event that has the potential to cause harm to a system or organization.
• It represents a possible danger that might exploit a weakness.
• Types of threats:
  • Natural threats – floods, earthquakes, fire
  • Human threats – hacking, social engineering, insider misuse
  • Environmental threats – power failure, hardware malfunction

Attacks

• An attack is an intentional act that attempts to bypass security controls and exploit vulnerabilities.
• It is the realization of a threat.
• Types of attacks:
  • Passive attacks – eavesdropping, traffic analysis (only monitoring, no modification)
  • Active attacks – modification, denial of service, masquerade, replay

Assets

• An asset is anything of value that an organization wants to protect.
• Categories of assets:
  • Hardware – computers, servers, routers
  • Software – applications, operating systems
  • Data – databases, files, confidential information
  • Communication facilities – networks, bridges, links
  • People – employees, customers

Conclusion: Security systems are designed to protect assets from threats by preventing and detecting attacks. Understanding all three is essential for building a strong security framework.