Module Question 2
Pertanyaan:
- Provide a real-world business example for a failure in Confidentiality, Integrity, and Availability?
- How might an e-commerce website prioritize one aspect of the CIA triad over the others for its product pages versus its payment processing system?
- Explain the principle of “least privilege” and how it supports confidentiality?
Status : 100%
Keterangan: saya sudah mengerjakan tugas ini dengan baik dan benar
- 1. Confidentiality Failure
Case: Yahoo Data Breach (2013-2014)
Confidentiality means ensuring that data can only be accessed by authorized parties. Yahoo experienced one of the largest confidentiality breaches in history when hackers managed to access more than 3 billion user accounts, 2. Integrity Failure
Case: The “Swift Fraud” Attack on the Central Bank of Bangladesh (2016)
Integrity means ensuring that data remains accurate, consistent, and unaltered by unauthorized parties. In this case, the hackers not only stole money but also manipulated transaction data,3. Availability Failure
Case: WannaCry Ransomware Attack on the UK’s NHS (2017)
Availability means ensuring that data and services are accessible to users when needed. The UK’s National Health Service (NHS) was completely paralyzed by this attack. - In cybersecurity strategies, the balance between the three pillars of the CIA Triad (Confidentiality, Integrity, and Availability) is often tailored to the specific function of a service. E-commerce sites are a perfect example where security priorities shift drastically depending on what the user is doing. Here’s a comparison of how these priorities are balanced.
- The Principle of Least Privilege (PoLP) is a security concept in which users, programs, or systems are granted only the access rights absolutely necessary to complete their specific tasks, and no more.by Limiting the Attack Surface, Preventing Lateral Movement, Reducing Insider Risk