MIS650 Introduction

1
MIS650 Introduction
2
Is the world a safe place?

• Cultural assumptions regarding
• Trust
• Optimism versus pessimism
• Ethics

3
Security Trade-offs

• Security is not an isolated good. It is
  intertwined with other activities, e.g.
  transactions
• Security involves costs. Understanding those
  costs is key.

4
Security Concepts
Security is about preventing adverse consequences
from the intentional and unwarranted actions of
others.
From the view of the defender
Attacks
Attackers
Countermeasures
Aimed at Assets
Role of Technology?
5
Types of Attack

• Whats the same
• Theft
• Embezzlement
• Vandalism
• Exploitation

• Fraud
• Extortion
• Threat of harm
• Privacy violations

6
Types of Attack

• Whats different
• Automation
• Class Breaks
• Action at a distance
• Propagation of techniques

7
Attack Types

• Schneiers classification
• Criminal attacks
• Privacy violations
• Publicity attacks
• Legal attacks
• By attacker motive
• Financial or other gain
• To damage others
• Privacy violations

8
Adversaries

• Those classified as criminals
• Hackers
• Lone Criminals
• Malicious Insiders
• Organized Crime
• Terrorists

9
Adversaries

• Those with claims of legitimacy
• Industrial spies
• The press
• The police
• National Intelligence Organizations
• Infowarriors