Amelia Rose Smith 231233678 CARNEGIE MELLON UNIVERSITY Cyber threats : Data Security 1. What are the many encryption techniques that may be used to safeguard data both in transport as well as at rest, and what are their benefits and drawbacks? Data may be secured using a variety of encryption techniques, including hashing, symmetric encryption, and asymmetric encryption. Asymmetric encryption employs two keys—one for encryption and the other for decryption—in contrast to symmetric encryption, which uses a single key for both operations. Hashing is a one-way encryption technique that generates an irreversible "fingerprint" of each piece of data. Symmetric encryption has the benefit of being quick and easy to deploy, but it has the drawback of using the same key for decryption as well as encryption, which can lead to weaknesses if the key is stolen. Although asymmetric encryption is more secure, it takes longer and requires more effort to set up. Although hashing can be used to check the accuracy of data, it is unable to be utilized to encrypt it. A single key is utilized for both data encryption and decryption in a process known as symmetric encryption. It is a well-liked option for encrypting huge amounts of data since it is quite quick and effective. The primary drawback of symmetric encryption is that because the same key is employed for both decryption and encryption, the system as a whole is vulnerable to vulnerability if the key is compromised. On the other hand, asymmetric encryption employs two distinct keys—a public key for encryption and a private key for decryption. As a result, it is more secure than symmetric encryption since the private key is kept private even if the public key is compromised.However, compared to symmetric encryption, asymmetric encryption is also slower and more challenging to implement. Hashing is a one-way encryption technique that generates an irreversible "fingerprint" of each piece of data. Due to the fact that any changes to the data will alter the hash value, this is helpful for confirming the accuracy of the data. Hashing, however, cannot be utilized for encryption since it is impossible to recover the original data by reversing the hash value. In conclusion, each encryption technique has pros and downsides of its own, and the choice of encryption technique will rely on the unique security needs and limitations of the system being secured. 2. What are controls for access, and how may they be used to prevent unauthorized access to sensitive data? What are some of the most important things to keep in mind when putting access controls in place in a complicated business environment? According to the user's identification and permissions, access controls are security mechanisms that restrict access to resources, such as data, applications, and systems. Sensitive data may be protected with access restrictions, which guarantee that only authorized people can access it. Implementing strong authentication techniques, clearly defining access policies and procedures, and properly managing access permissions to avoid privilege escalation attacks are important factors to take into account when implementing controls on access in a complex enterprise environment. Access controls are a key element of data security that may be used to limit unauthorized personnel's access to sensitive information. Passwords, biometric authentication, and physical security features like locks and security cameras are just a few of the many ways that access restrictions may be implemented. Another important technology that may be used to safeguard data from unwanted access is encryption. Data is encrypted so that anybody without the right decryption key cannot read it. Even if the sensitive data is intercepted throughout transmission or taken from a device, this can assist to prevent unwanted access to it. Another crucial method for identifying and preventing illegal access to sensitive data is user activity monitoring. System administrators can immediately spot unusual activities and take steps to stop additional unauthorized access by keeping an eye on user activity on a network. In addition to these strategies, a wide range of additional technologies and techniques, including as firewalls, intrusion detection and prevention systems, and data loss prevention systems, can be utilized to safeguard data against theft or unauthorized use. The secret is to design a multi-layered strategy for data security that comprises several barriers to defend against a range of dangers. 3. How can possible threats to data security be identified and addressed using user activity monitoring? What are some of the major organizational and technological issues involved in putting in place a successful user activity tracking program? The practice of observing user behavior inside an IT environment, including actions like signing in, accessing resources, and changing data or systems, is known as user activity monitoring. Through the identification of unusual or suspicious behavior and the resulting activation of alerts or automated responses, user activity tracking can be utilized to identify and address potential threats to data security. Choosing which data sources to monitor, making sure the monitoring does not interfere with regular business operations, and implementing efficient data analytics to detect potential threats are the main technical challenges associated with putting into place an effective user activity monitoring program. Clearly outlining rules and procedures for data usage and assuring that the monitoring program complies with privacy and data protection laws are two organizational issues. Confidentiality, which dictates that only authorized individuals must have access to sensitive data, is one of the core tenets of data security. This may be done by using encryption and access restrictions, as well as by putting rules and processes in place to make sure that sensitive information is only shared with those who need to know. Integrity, or the need that data be accurate and full, is another crucial aspect of data security. This may be done by using auditing and logging systems to keep track of data changes and make sure it hasn't been tampered with, as well as by using data verification and validation procedures. Another essential aspect of data security is availability, which states that only authorized individuals should have access to data when necessary it. This might be done by utilizing redundant infrastructure and backup procedures to guarantee that data is constantly accessible, regardless of system failure or other disturbance. An important concept of data security is accountability, which states that people and organizations should be held accountable for the security of the data they handle. This may be done by putting rules and processes in place to make certain that data is treated securely at all instances, as well as by utilizing auditing and monitoring tools to keep track of and report on problems with information security.