CHP 7 Discussion – Security Architecture And Design Course

13. If an attacker can retrieve the API and libraries, then use these to write an agent, and then get the attacker’s agent installed, how should Digital Diskus protect itself from such an attack? The business analytics system should provide an authentication method for valid agents to prevent malicious ones. Does the agent offer a worthwhile attack surface?

If the enemy has a malignant agent, I would ask the vendor of company analytics about the security precautions they have implemented to the protocol. Only the software that is used to create and manage the agents is at risk. An attacker can provide any information they need to the system of business analytics, but not actual data. A poorly-designed API or library, as well, could make it vulnerable to attacks. Palombo and others. An attacker can gain access to the host that the agent runs on. 2020). The data collector must protect itself against attacks because there’s just one possible attack surface. Additionally, every agent is susceptible to an attack on the system they are operating. All native security options that the access method has for native access exchanges are protected (Johansson 2019,). They are therefore not included in the scope of business analytics system assessment. These credentials are not exempted from the assessment. These credentials are part of the main business analytics system’s target area. Management Console has complete control over the setting of each component. Management Console will be able to access all data sources and methods with credentials. Cont…