Deconstructing Threats, Exploits, Vulnerabilities, and Risks

This week’s topics

Deconstructing Threats, Exploits, Vulnerabilities, and Risks

1. Defining threats and attack vectors
2. Software and hardware vulnerabilities
3. Exploit payloads and zero-days
4. Qualitative risk assessment
5. Threats Vulnerabilities and Exploits
6. Zero-day Vulnerabilities - CompTIA Security+ SY0-701 - 2.3
7. Hardware Vulnerabilities - CompTIA Security+ SY0-701 - 2.3

What you will be able to do

• 3.2 Explain the following terms in relation to cyber security: • threats • exploits • vulnerabilities • risks

Activity

Start with this week’s 4 videos, then: Seminar, guided reading and a short written task: explain the following terms in relation to cyber security: • threats • exploits • vulnerabilities • risks

Study materials

Videos

• Threats Vulnerabilities and Exploits · YouTube · IBM Technology · 6 min · for registered students
• Zero-day Vulnerabilities - CompTIA Security+ SY0-701 - 2.3 · YouTube · Professor Messer · 3 min · for registered students
• Hardware Vulnerabilities - CompTIA Security+ SY0-701 - 2.3 · YouTube · Professor Messer · 6 min · for registered students

Further resources

• NIST SP 800-12r1, ch. 4: Threats and Vulnerabilities · PDF · NIST, textbook chapter; pp. 20–25 · for registered students
• NIST SP 800-30 Rev. 1: Guide for Conducting Risk Assessments · PDF · NIST, guidance; 95 pages · for registered students
• Introduction to Computer Science, 14.2: Software Security · PDF · OpenStax, textbook chapter; pp. 853–863 · for registered students