The Module 3 of Comptia Security + will discuss about the Malware threat, Phishing, various types of attacks, both wireless and application attacks, LDAP, XML injection, mitigation and deterrent techniques, security traits and vulnerabilities, and […]
There are four main different types of methodologies which we use for our design process. The first is waterfall which is a very traditional model where there are lots of phases and steps to it. […]
This particular section discusses having a design, the risks associated with the design process and aspects to consider for design from previous sections. Risks associated with designing software or systems involve code reuse and the […]
This section is about threat modeling. There are a number of factors to consider when discussing threat modelling. For example, look to your objectives. First is the security objectives and then also there are other […]
The reasons to give Goals of Security are: Confidentiality: It refers to limiting disclosure and access of information to those who are authorized. The confidentiality can be maintained by Access Controls and Encryption. Integrity: Another […]
Organizations should first engage in the Business Impact Analysis to identify the critical systems and components in their enterprise. It is essential to understand the multiple people function that is in our business, we know […]
This first topic looks under environmental security: Heat and Ventilation and Air Condition (HVAC) :We should have an independent power source such that there is an outage for electricity. There should be positive air pressure […]
The breach of the security at any point and instant in the organization should be easily identified. A proper training of the users on what the policy is, should be imparted. People working should be […]
The first item we look at Preparations to ensure that the people are trained and are equipped with the tools to identify and monitor the incidence. No Incident in the organization should go unnoticed. Incident […]
Cloud Computing is carrying out the business operations over the internet on someone else’s computer. We have several models like infrastructure, platform, software, and other as the service.Let us know about the risks associated with […]
Copyright © 2020 Gotowebsecurity