Top threats

Based on the implementation of the ISS concept at two Grid sites, feedback from Site security officers within operational Grid environments and the development of the ISSeG risk assessment questionnaire, we believe the top 12 threats to Grid sites to be:

Top 12 list of threats

T1: Faulty access rights management
T2: Password compromise
T3: Intrusion (by scanning techniques)
T5: Data interception techniques (sniffing/man in the middle attack)
T6: Fraudulent connection
T7: Exploiting software vulnerabilities
T8: Fraudulent use of systems
T9: Repudiation (system usage)
T13: Software alteration (time bomb, worm, Trojan, virus etc.)
T16: Use of insecure/unauthorized software
T24: Absent/insufficient staff
T27: Lack of security awareness or job training

Clearly, creating a list of the top 12 threats for all Grid sites world wide is controversial as each site and Grid infrastructure (e.g. OSG, EGEE etc.) is difference. This is an illustrative list and should not be regarded as a universal list for all sites world wide.

Return to the list of threat groups.

Copyright (c) Members of the ISSeG Collaboration 2008	Top of page	Home page
	This is version 5.2 of the website - view release notes -view visitor statistics

	Training and Dissemination web site
	Integrated Site Security for Grids	A project co-funded by EU FP6 programme