Question

Case Project 1-6: Preventing Attacks Select one of the recent attacks listed under Today's Security Attacks earlier in the chapter. How could the attack been prevented if the five fundamental security principles-layering, limiting, diversity, obscurity, and simplicity-had been applied? Create a table that lists each of these security principles and how they could have been used to mitigate the attack. You may need to be creative in your thinking.

Answer 1

UK-based reseller Dixons Carphone suffers cyber attack on customer data

It is a British mobile phone retailer fall prey to the security attacks.

Where the card details of the customer has miss-used.

How the following principles can defend the attack on the customer data:

Layering:

It has multiple defences in preventing the data instead of having a single defence layer. More the layers more will be the security for our customer data.

Limiting:

None other people who are unauthorized are allowed to use our data at any cost of time or at any emergency period.

Other than database custom data maintainer no one has to access it.

Diversity:

As of layer each layer should have different type of security, that makes our security more complex, and it makes hacker a bit challenge.

Obscurity

The thing happening inside should not be known outside of the company.

Privacy policy has to be maintained very strictly.

Company’s secret has not been exposed outside, proper sleeper cells has to be kept to notice everyone.

Simplicity

Making much harder security will leaves the user in hardship. And they will feel lazy and leads to missing of any vulnerability in protection process.

If the above solution is helpful to you in any way please rate it Or if you have any concerns please comment it, I will help you through