Attempts by insiders to perform appropriate acts, on information assets to which they have been given rights or permissions.

Attempts by insiders to access resources, without proper access rights

Attempts by insiders to access external resources, without proper access rights.

Attempts by insiders to perform inappropriate acts, on external information assets to which they have been given rights or permissions.

Attempts by insiders to perform inappropriate acts, on information assets to which they have been given rights or permissions.

Security Triad

Privilege aggregation

Need-to-know

Privilege escalation

Least privilege

AES

Blowfish

DES

CAST

Triple DES

Adversaries sort through trash to find information.

Adversaries use anomalous traffic patterns as indicators of unusual activity. They will employ other methods, such as social engineering, to discover the cause of the noise.

Adversaries use movement patterns as indicators of activity.

Adversaries take advantage of a person's trust and goodwill.

Seemingly, unimportant pieces of data may yield enough information to an adversary, for him to disseminate incorrect information and sound authoritative.

Parallel

Full interruption

Checklist

Structured walkthrough

Simulation