Threat and Risk Assessments in a Network Environment Ted Reinhardt Course

Threat and Risk Assessment Overview an Evaluation of the Three Little Pigs Performance

Asset Value Dwelling Confidentiality, Integrity, Availability and Value

Threat Threat agent Destruction Threat Class Blows House Down Wolf f 25 km/h Threat Event

Threat Classes Destruction - Blows House Down Removal - Steals house by moving it off foundation Disclosure - Listens in to conversations in the house Interruption - Keeps knocking on the door preventing owner from doing work Modification - Redecorates house (like Trading Spaces) DR DIM

Little Pig #1 - Straw House Threat and Risk Assessment

Pig #1 Straw House Performance Evaluation  One night the big bad wolf, who dearly loved to eat fat little piggies, came along and saw the first little pig in his house of straw. He said "Let me in, Let me in, little pig or I'll huff and I'll puff and I'll blow your house in!” "Not by the hair of my chinny chin chin", said the little pig.  But of course the wolf did blow the house in and ate the first little pig. Threat Assessment was wrong. Likelihood was incorrectly assessed.

Little Pig #3 - Post Straw House Attack Threat Assessment

Safeguard Administrative, Procedural or Technical mechanisms used to mitigate a threat. Safeguards Cost to Implement House made of Sticks (wind loading 10 mph) $2.00/bundle House made of Bricks (wind loading 70 mph) $1000/pallet

Management Risk Decision accept the risk mitigate the risk Risk Cost Balance is important

Re-evaluate Safeguards Periodically

Identity Threats Events  Destruction  Removal  Disclosure  Interruption  Modification NETSEC Threat Classes

Typical Threat Events  Eavesdropping  Traffic Flow Analysis  Masquerading  Denial of service attacks  Repudiation  Replay Covert Channel

Select Safeguards  Authentication  Access Control  Confidentiality  Integrity  Non-repudiation  Availability -- redundancy,recovery,disaster

Layer Safeguards Filtering Routers & 2 feeds IPSEC VPN Gateway Firewall Web Server TLS Server Network Filter Detection Hardened Server