What is an Threat?

What is an Threat?

Threat is a potential violation of security. It is the intention to inflict harm.

 What is an Attack?

Attack is defined as any action that violates the security. There are two types of attacks passive and active attacks. 

1)  An "active attack" attempts to alter system resources or affect their operation. Due to these attacks, systems get damaged, and information can be altered.

2)  A "passive attack" attempts to learn or make use of information from the system but does not affect system resources (e.g., wiretapping).

Again here the attack can be carry out by anyone inside the organization or may be outside the organization.  Inside attack is defined as the attack that is initiated inside of the security perimeter in organization. Outside attack is defined as person outside of organization, some unauthorized user.

What is a Vulnerability?

Vulnerability is the weakness or implementation error that leads to the unexpected event compromising the security of the system. Due to this cybercriminals can exploit and gain unauthorized access to system.

What is a Exploit?

Exploit is a piece of software that take advantage of vulnerability to cause unintended behavior to occur in computer software and electronic resources. There are two types of exploits :

 

1)  A "remote exploit" works over a network and exploits the security vulnerability without any prior access to the vulnerable system.

2) A "local exploit" requires prior access to the vulnerable system and usually increases the privileges of the person running the exploit.  

What is a Bug ?

A software bug is an error, flaw or fault in the design, development, or operation of computer software that causes it to produce an incorrect or unexpected result, or to behave in unintended ways. The process of finding and correcting bugs is termed "debugging".