Security Fundamentals

A potential danger or event that could exploit a vulnerability to cause harm to an asset.

A weakness or flaw in a system, configuration, or process that can be exploited by a threat.

The actual mechanism, code, or technique used to take advantage of a vulnerability.

An entity (person, group, or organization) responsible for carrying out an attack or causing a security event.

The total sum of all points (interfaces, services, ports, code) where an attacker could attempt to enter or extract data.

Confidentiality, Integrity, and Availability - the three core goals of information security.