[Manny Varela]

Staying ahead of attacks is crucial for a security officer.  Discuss the “more advanced attacks” presented in this chapter.  Rationalize how a SO could try to prevent these advanced attacks.

[Aaron Elliott]

Advanced attacks are thefts done by side channels, which is using data regarding systems that perform tasks and give off readings that can be tracked by bad actors like power usage and heat given off by the device. When the attackers know a sensitive process is being performed, they can use the byproduct of the process to find an entry point. Third party attacks are dangerous due to the trusted nature and attackers gain access through means out of the scope of the base company.

Security Officers would need to be able to separate the sensitive data from what is being leaked. Perhaps through the use of a honeypot to distract attackers in to thinking they found valuable data while keeping the critical data safe. Proper shielding of equipment from heat and energy data being recorded from unauthorized parties.

[Author]

Posts