disgruntled, malicious, Intelligence Browsing of proprietary • • negligent, dishonest, or information Monetary gain • terminated employees) • Computer abuse Revenge • and theft • Unintentional errors and • omissions (e.g. data entry Information bribery • error, programming error) Input of falsified, • corrupted data Interception • Malicious code (e.g. • virus, logic bomb, Trojan horse) Sale of personal • information • System bugs System intrusion • System sabotage • Unauthorized system • access The following table gives examples for vulnerabilities in various security areas, including examples of threats that might exploit these vulnerabilities. The lists can provide help during the assessment of threats and vulnerabilities, to determine relevant incident scenarios. It is emphasized that in some cases other threats may exploit these vulnerabilities as well. Types Examples of vulnerabilities Examples of threats Hardware Insufficient maintenance/faulty Breach of information installation of storage media system maintainability Hardware Lack of periodic replacement Destruction of equipment schemes or media
disgruntled, malicious, negligent, dishonest, or terminated employees) • Intelligence • Monetary gain • Revenge • Unintentional errors and omissions (e.g. data entry error, programming error) • Browsing of proprietary information • Computer abuse • and theft • Information bribery • Input of falsified, corrupted data • Interception • Malicious code (e.g. virus, logic bomb, Trojan horse) • Sale of personal information • System bugs • System intrusion • System sabotage • Unauthorized system access The following table gives examples for vulnerabilities in various security areas, including examples of threats that might exploit these vulnerabilities. The lists can provide help during the assessment of threats and vulnerabilities, to determine relevant incident scenarios. It is emphasized that in some cases other threats may exploit these vulnerabilities as well. Types Examples of vulnerabilities Examples of threats Hardware Insufficient maintenance/faulty installation of storage media Breach of information system maintainability Hardware Lack of periodic replacement schemes Destruction of equipment or media
D2.2-DITEN.docx