CYB/100i v2
Copyrighti 2020i byi Universityi ofi Phoenix.i Alli rightsi reserved.
Riski Assessmenti andi Mitigationi
Vulnerabilityi &i Potentiali Threati #1i
SQLi Injectioni –i Iti isi ai webi securityi vulnerabilityi involvingi thei injectioni ofi ai codei fori destroyingi thei
databasei (Whati isi SQLi Injection?i Tutoriali &i Examples:i Webi Securityi Academy,i 2019).i
Potentiali Risk
Thei potentiali riski ofi SQLi Injectioni includesi deletioni ofi data,i compromisei ofi confidentiali businessi
informationi andi unauthorizedi accessi intoi thei system.i Iti couldi thei integrityi ofi businessi datai andi
negativelyi impacti thei reputationi ofi thei organizationi (Whati Isi SQLi Injectioni andi Howi Cani Iti Hurti You,i
2019).i
Riski Assessment
Thei riski assessmenti ofi suchi ai vulnerabilityi involvesi conductingi routinei testingi ofi thei applications,i andi
usingi parameterizedi queriesi fori repairingi SQLi vulnerabilities.i
Mitigation
Ai mitigationi techniquei isi toi deployi ai parameterizedi databasei queriesi withi typedi andi boundi parameters.i
Thei carefuli usei ofi parameterizedi storedi protocoli ini thei databasei isi necessaryi toi preventi suchi
vulnerabilityi (Howi toi Protecti Againsti SQLi Injectioni Attacks,i 2019).i
i
Vulnerabilityi &i Potentiali Threati #2i i
Malwarei –i Differenti kindsi ofi malwarei existi likei worms,i Trojan,i etci thati couldi infecti thei ITi systemi ofi thei
organization.i
Potentiali Risk
Riski Assessmenti andi Mitigation
CYB/100i v2
Pagei 2i ofi 5
Copyrighti 2020i byi Universityi ofi Phoenix.i Alli rightsi reserved.
Vulnerabilityi &i Potentiali Threati #2i i
Thei chiefi risksi involvedi arei thei exploitationi ofi thei networki bottlenecksi leadingi toi disruptedi operations,i
lossi ofi sensitivei datai andi unauthorizedi accessi intoi Iti resources.i Iti impactsi thei networki security,i
regulatoryi concernsi andi affectsi organizationali performancei byi causingi frequenti crashingi ori freezingi
(Bayuki eti al.,i 2011,i p.i 29).i
Riski Assessment
Ai methodicali riski assessmenti processi involvesi havingi well-definedi detectioni processi toi locatei anyi
changei ini anyi software,i OSi ori otheri Iti components.i Thoroughi privilegedi accountingi monitoringi musti bei
donei andi therei shouldi bei solidi controli overi thei networki peripheryi (Bayuki eti al.,i 2011).i
Mitigation
Somei ofi thei mitigationi strategiesi includei regularlyi updatingi thei OSi andi browsers,i practicingi safei
browsingi andi layeringi thei security.
Vulnerabilityi &i Potentiali Threati #3i
Poori antivirusi securityi mechanismsi -i Iti couldi increasei thei securityi riski ofi thei businessi asi hackersi couldi
bypassi iti andi invadei thei ITi landscape.
Potentiali Risk
Thei potentiali risksi thati arisei duei toi thei vulnerabilityi includei compromisei ofi ITi systemi duei toi
unauthorizedi accessi byi others,i compromisei ini datai duei toi maliciousi programs,i etc.i Iti affectsi thei datai
integrityi andi couldi tarnishi thei reputationi duei toi datai breachi incident.i
Riski Assessment
Ai regulari checkingi ofi thei antivirusi toolsi musti bei performedi toi keepi iti updated.i Thei employeesi musti bei
educatedi abouti itsi usei ini theiri system.i Ai thoughi antivirusi softwarei auditi musti bei performedi toi checki itsi
version,i andi itsi functionalityi toi minimizei risksi (Howi toi Doi ani Antivirusi Softwarei Audit,i 2019).i
Mitigation
Riski Assessmenti andi Mitigation
CYB/100i v2
Pagei 3i ofi 5
Copyrighti 2020i byi Universityi ofi Phoenix.i Alli rightsi reserved.
Vulnerabilityi &i Potentiali Threati #3i
Thei antivirusi musti bei updatedi regularlyi wheni ai notificationi isi receivedi soi thati iti couldi safeguardi againsti
maliciousi elements.
Vulnerabilityi &i Potentiali Threati #4i i
Unpatchedi ori outi ofi datei softwarei –i Thei vulnerabilityi ini thei softwarei ini thei vasti cyberi domaini givesi risei
toi threatsi suchi asi datai breachi andi ransomwarei attacks.i
Potentiali Risk
Thei outdatedi patchesi couldi acti asi ani entryi pointi fori cybercriminalsi andi hackersi toi infiltratei thei ITi
ecosystemi ofi thei organizationi andi compromisei thei security.i Thei datai ofi thei organizationi wouldi bei ati
riski ifi unauthorizedi accessi byi maliciousi individualsi isi noti underi check.i Thei reputationi ofi thei businessi
couldi bei tarnished.i
Riski Assessment
Thei riski assessmenti processi includesi keepingi ai tabi oni everyi ITi asseti withini thei organizationi toi createi
ai securei environmenti byi thei ITi team.i Anyi changei ini thei statei ofi anyi ITi componenti musti bei trackedi soi
thati timelyi softwarei updatesi wouldi bei possiblei (Bayuki eti al.,i 2011).i
Mitigation
Fori mitigatingi thei risk,i ai regulari updatei schedulei musti bei followedi toi checki thei softwarei thati needi toi bei
updated.i
Vulnerabilityi &i Potentiali Threati #5i
Sociali Engineeringi Attacksi –i Suchi ai threati wouldi arisei duei toi thei psychologicali manipulationi ofi thei
employees.i Commoni attacksi arei phishingi mailsi andi whaling.
Potentiali Risk
Riski Assessmenti andi Mitigation
CYB/100i v2
Pagei 4i ofi 5
Copyrighti 2020i byi Universityi ofi Phoenix.i Alli rightsi reserved.
Vulnerabilityi &i Potentiali Threati #5i
Thei risksi thati couldi arisei includei thei bypassi ofi authenticationi asi welli asi authorizationi protocolsi whichi
wouldi compromisei thei networki securityi (Firch,i 2020).i Thei riski wouldi affecti thei employeesi andi impacti
theiri judgementi thati wouldi puti thei entirei businessi andi itsi datai ati risk.i
Riski Assessment
Thei riski assessmenti processi involvesi gatheringi informationi fromi employeesi abouti suspiciousi
interactioni ori elements,i introducei emaili virusi detectioni tools,i adopti ai defensei ini depthi approachi (Ghafiri
eti al.,i 2016).i
Mitigation
Thei organizationi musti assessi thei employi understandingi relatingi toi cybersecurityi andi createi ai targetedi
trainingi programi toi helpi themi identifyi suchi threatsi soi thati theyi cani takei appropriatei securityi decisions.i
Riski Assessmenti andi Mitigation
CYB/100i v2
Pagei 5i ofi 5
Copyrighti 2020i byi Universityi ofi Phoenix.i Alli rightsi reserved.
References
Bayuk,i J.,i Cavit,i D.,i Guerrino,i E.,i Mahony,i J.,i McDowell,i B.,i Nelson,i W.,i ...i &i Staarfanger,i P.i (2011).i
Malwarei risksi andi mitigationi report.i Washington,i DC:i BITSi Financiali Servicesi Roundtable,i 21,i 139.
Firch,i J.i (2020,i Novemberi 01).i Whati Arei Thei Commoni Typesi Ofi Networki Vulnerabilities?i
Retrievedi Novemberi 06,i 2020,i fromi https://purplesec.us/common-network-vulnerabilities/
Ghafir,i Ibrahimi &i Prenosil,i Vaclavi &i Alhejailan,i Ahmadi &i Hammoudeh,i Mohammad.i (2016).i
Sociali Engineeringi Attacki Strategiesi andi Defencei Approaches.i 10.1109/FiCloud.2016.28.
Howi toi Protecti Againsti SQLi Injectioni Attacks.i (2019).i Retrievedi Novemberi 06,i 2020,i fromi
https://security.berkeley.edu/education-awareness/best-practices-how-tos/system-
application-security/how-protect-against-sql
Howi toi Doi ani Antivirusi Softwarei Audit.i (2019,i Novemberi 30).i Retrievedi Novemberi 06,i 2020,i
fromi https://www.toolbox.com/tech/tech-security/question/how-to-do-an-antivirus-
software-audit-040814/
Whati isi SQLi Injection?i Tutoriali &i Examples:i Webi Securityi Academy.i (2019).i Retrievedi
Novemberi 06,i 2020,i fromi https://portswigger.net/web-security/sql-injection
Whati Isi SQLi Injectioni andi Howi Cani Iti Hurti You?i (2019).i Retrievedi Novemberi 06,i 2020,i fromi
https://www.esecurityplanet.com/threats/what-is-sql-injection.html
