JAWAHARLAL NEHRU TECHNOLOGICAL UNIVERSITY HYDERABAD B.Tech III CYBER LAWS AND ETHICS Previous Question Paper (August/September - 2021 - R18)

A security vulnerability is a weakness or flaw in an information system, system security procedures, internal controls, or implementation that could be exploited by a threat source to gain unauthorized access, disrupt services, or compromise data integrity. Vulnerabilities exist due to errors in design, coding, configuration, or human behavior.

Common kinds of vulnerabilities include:

• Software Vulnerabilities: Bugs or flaws in application code, such as buffer overflows, SQL injection, or cross-site scripting (XSS), which allow attackers to execute malicious code.
• Configuration Vulnerabilities: Improperly secured systems, such as default passwords, open ports, or unpatched software, which provide easy entry points for attackers.
• Hardware Vulnerabilities: Physical weaknesses or flaws in hardware components that can be exploited to bypass security controls or extract sensitive information.
• Human Vulnerabilities: Weaknesses stemming from human error, such as susceptibility to social engineering, phishing, or poor password management practices.
• Network Vulnerabilities: Flaws in network architecture, such as unencrypted communication channels or insecure protocols, that allow for eavesdropping or man-in-the-middle attacks.

Countermeasures are actions, devices, procedures, or techniques that reduce a threat, vulnerability, or attack by eliminating or preventing it, minimizing the harm it can cause, or discovering and reporting it so that corrective action can be taken. Effective security requires a layered defense strategy:

• Technical Controls: Implementing firewalls, intrusion detection and prevention systems (IDPS), and endpoint protection to monitor and block malicious traffic. Encryption should be used for data at rest and in transit to ensure confidentiality.
• Patch Management: Regularly updating operating systems, applications, and firmware to address known vulnerabilities and security flaws.
• Access Control: Enforcing the principle of least privilege (PoLP) and utilizing multi-factor authentication (MFA) to ensure that only authorized users can access sensitive resources.
• Security Awareness Training: Educating employees on identifying phishing attempts, social engineering tactics, and safe browsing habits to mitigate human-centric risks.
• Incident Response Planning: Establishing a formal incident response policy to ensure rapid detection, containment, and recovery from security breaches.
• Regular Audits and Assessments: Conducting periodic vulnerability scanning and penetration testing to identify and remediate security gaps before they are exploited.