Hi everybody.
Welcome to the final video of the penetration testing process module.
In this video we're going to cover the CIA triangle.
So what does the CIA triangle.
It is a common security model that's used to guide policies that are put into place.
This is also used for wouldn't be revisiting older policies but this can also be used in a wide variety
of situations.
It's not just related to policies.
That's one of the most commonly used for.
However one that when I go over each step of the CIA triangle you'll see where some of this stuff kind
of puts into play.
So the CIA triangle is confidentiality integrity and availability.
Now coffee and yet confidentiality is the control of access to information.
So making sure the people have that had the correct access have the access that they need.
So this is commonly called authorization.
A good example this is to a face or two factor authentication which is you know you log in it sends
you a pin to your phone you put it in the pin that's two factor authentication.
So let's just make sure that you do have access the information you're requesting and it's not unauthorized
access.
So integrity on the other hand is ensuring the data itself is trust in an accurate at all times.
So data that is inconsistent inaccurate breaks the CIA triangle and is considered useless data.
So if you can't trust the data that you're trying to access what uses it to you.
A good example of this is data encryption which we have an entire module over later in the blueprint
and that encryption ensures that the data that was placed in there is as it should be.
And it has not been modified and there's there's ways to identify whether it's been modified.
But we won't get into that at this particular video.
The last one is availability and if the data is unavailable it's also useless.
It's not there you can access that it doesn't serve its purpose a common cause of breaking this particular
part of triangles a DoS attack.
So distributed denial of service or just a denial of service attack which is where an attacker will
spawn up a bunch of machines that have that they have access to and have it flood a particular host
with traffic or some sort of request we'll go over that in a little bit more detail later.
But a good recovery from this is a disaster recovery plan which is a plan put into place and specific
steps to help mitigate and resolve the issue as fast as possible now.
Thank you guys for sticking with me so far.
I know it's been a lot of text a little bit a hands on stuff here there.
However with the next module starting with the Windows operating system you should see a lot less slides
from here.
So thanks for being with me and enjoy the next module.