{"id":39705,"date":"2016-11-23T22:36:01","date_gmt":"2016-11-24T04:36:01","guid":{"rendered":"http:\/\/diegospassword.wordpress.com\/?p=797"},"modified":"2016-11-23T23:09:42","modified_gmt":"2016-11-24T05:09:42","slug":"mythology-risks","status":"publish","type":"post","link":"https:\/\/kenscourses.com\/tc2027fall2016\/syndicated\/mythology-risks\/","title":{"rendered":"Mythology risks"},"content":{"rendered":"<p class=\"syndicated-attribution\"><em> --Originally published at <a href=\"https:\/\/diegospassword.wordpress.com\/2016\/11\/23\/mythology-risks\/\"><a href=\"https:\/\/diegospassword.wordpress.com\">Diego&amp;#039;s Password<\/a><\/a><\/em><br \/><\/p>\n<p><img class=\" size-full wp-image-884 aligncenter\" src=\"http:\/\/kenscourses.com\/tc2027fall2016\/wp-content\/uploads\/2016\/11\/e81ea9b5e3e46482c713a06dca3cef7f.jpg\" alt=\"tumblr_mhhv7oRsbv1rjl16lo1_500.gif\"   \/><\/p>\n<p>Risk assessment mythologies, haha funny right&#8230; Methodologies. What could it mean&#8230;<\/p>\n<blockquote><p>The evaluation or estimation with of the nature, quality or ability of someone or something.<\/p><\/blockquote>\n<p>So is the actual quantification of a risk, being quantitative or qualitative. How could we even count or grade a risk; well, that&#8217;s when the mythologies comes in. Normally two factors are taken into consideration, the consequences and the probability. The consequences being all the potential loss, counted either monetary or by a given parameter and the probability being the actual percentage, the likeliness of happening or occurring.<\/p>\n<p><img class=\"  wp-image-879 aligncenter\" src=\"http:\/\/kenscourses.com\/tc2027fall2016\/wp-content\/uploads\/2016\/11\/369ae6942a0be13e6f7f182e50c52919.jpg#038;h=230\" alt=\"giphy.gif\" width=\"409\" height=\"230\" \/><\/p>\n<p>He&#8217;s probably right, but first we need to learn how to analyze a risk and take a wise decision. There&#8217;s a really interesting articule written by the GIAC. I&#8217;ve written about them before, I&#8217;ll link the post <a href=\"https:\/\/diegospassword.wordpress.com\/2016\/10\/20\/6000-for-a-certification\/\">here<\/a>. This post will be based on that article.<\/p>\n<p>There are three mythologies&#8230; haha enough. Three methodologies used in risk management in information systems, I wrote another post in that manner, linked <a href=\"https:\/\/diegospassword.wordpress.com\/2016\/11\/23\/it-risk-management-frameworks\/\">here<\/a>. Anyways I&#8217;ll explain them briefly.<\/p>\n<ul>\n<li>Asset Audit<br \/>\nThis asset takes in consideration information flows, specifically if it&#8217;s protected at all times. It has\u00a0in consideration around seven areas in the system that\u00a0evaluates their security and behavior. Based on this study the threads and risk are analyzed.<\/li>\n<\/ul>\n<ul>\n<li>\u00a0Pipeline model<br \/>\nIn this approach, risks are analyzed in a pipeline manner with five main sections: active processes, communication processes, stable data processes, enquiry processes and access control processes. This sections are different kind of process with distinct tasks and responsibilities. Once the pipeline is define, we need to look for the weakest link and its gaps, finally\u00a0we\u00a0would define be how that given risk would be assessed.<\/li>\n<\/ul>\n<ul>\n<li>Attack trees<br \/>\nThis methodology focus on these questions: who, when, how, why and with what probability an attack will happen. The root of the <div class=\"post-limited-image\"><img alt=\"\" border=\"0\" src=\"http:\/\/kenscourses.com\/tc2027fall2016\/wp-content\/uploads\/2016\/11\/c61cfcdf8e6f2d5b01e268e025fca15a.jpg\" \/><\/div>\n<div class=\"post-limited-image\"><img alt=\"\" border=\"0\" src=\"http:\/\/kenscourses.com\/tc2027fall2016\/wp-content\/uploads\/2016\/11\/0e4fce5448a72d27ec258ef41e718064.jpg#038;blog=116288089&%23038;post=797&%23038;subd=diegospassword&%23038;ref=&%23038;feed=1\" width=\"1\" height=\"1\" \/><\/div><!--more--> would represent the final goal of the attacker and the nodes all his possible ways. This structure help visualize all the possible threads and points of opportunist in the security area.<\/li>\n<\/ul>\n<div class=\"page\" title=\"Page 10\">\n<div class=\"section\">\n<div class=\"layoutArea\">\n<p>We think this topic is rather technical and repetitive with the linked post. We learned some ways to represent possible risks and analyze them.<\/p>\n<p>I wrote this post with Ivan. Lucrative and fun experience. I&#8217;ll link his blog <a href=\"https:\/\/mariohansfv.wordpress.com\/\">here<\/a>.<\/p>\n<\/div>\n<\/div>\n<\/div><br \/>  <a rel=\"nofollow\" href=\"http:\/\/feeds.wordpress.com\/1.0\/gocomments\/diegospassword.wordpress.com\/797\/\"><img alt=\"\" border=\"0\" src=\"http:\/\/kenscourses.com\/tc2027fall2016\/wp-content\/uploads\/2016\/11\/c61cfcdf8e6f2d5b01e268e025fca15a.jpg\" \/><\/a> <img alt=\"\" border=\"0\" src=\"http:\/\/kenscourses.com\/tc2027fall2016\/wp-content\/uploads\/2016\/11\/0e4fce5448a72d27ec258ef41e718064.jpg#038;blog=116288089&%23038;post=797&%23038;subd=diegospassword&%23038;ref=&%23038;feed=1\" width=\"1\" height=\"1\" \/>","protected":false},"excerpt":{"rendered":"<p>&#8211;Originally published at Diego&amp;#039;s Password Risk assessment mythologies, haha funny right&#8230; Methodologies. What could it mean&#8230; The evaluation or estimation with of the nature, quality or ability of someone or something. So is the actual quantification of a risk, being quantitative or qualitative. How could we even count or grade a risk; well, that&#8217;s when &hellip; <a href=\"https:\/\/kenscourses.com\/tc2027fall2016\/syndicated\/mythology-risks\/\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">Mythology risks<\/span><\/a><\/p>\n","protected":false},"author":28,"featured_media":39712,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5,4],"tags":[38],"class_list":["post-39705","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blogs","category-syndicated","tag-sin-categoria"],"_links":{"self":[{"href":"https:\/\/kenscourses.com\/tc2027fall2016\/wp-json\/wp\/v2\/posts\/39705","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/kenscourses.com\/tc2027fall2016\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/kenscourses.com\/tc2027fall2016\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/kenscourses.com\/tc2027fall2016\/wp-json\/wp\/v2\/users\/28"}],"replies":[{"embeddable":true,"href":"https:\/\/kenscourses.com\/tc2027fall2016\/wp-json\/wp\/v2\/comments?post=39705"}],"version-history":[{"count":3,"href":"https:\/\/kenscourses.com\/tc2027fall2016\/wp-json\/wp\/v2\/posts\/39705\/revisions"}],"predecessor-version":[{"id":39718,"href":"https:\/\/kenscourses.com\/tc2027fall2016\/wp-json\/wp\/v2\/posts\/39705\/revisions\/39718"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/kenscourses.com\/tc2027fall2016\/wp-json\/wp\/v2\/media\/39712"}],"wp:attachment":[{"href":"https:\/\/kenscourses.com\/tc2027fall2016\/wp-json\/wp\/v2\/media?parent=39705"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/kenscourses.com\/tc2027fall2016\/wp-json\/wp\/v2\/categories?post=39705"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/kenscourses.com\/tc2027fall2016\/wp-json\/wp\/v2\/tags?post=39705"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}