Question

CIA

Confidentiality - The avoidance of the unauthorized disclosure of information

Integrity - The property that information has not be altered in an unauthorized way

Availability - The property that information is accessible and modifiable in a timely fashion by those authorized to do so

AAA

Assurance - How trust is provided and managed in computer systems

Authenticity - The ability to determine that statements, policies, and permissions issued by persons or systems are genuine.

Anonymity - The property that certain records or transactions not to be attributable to any individual

With respect to the C.I.A. and A.A.A. concepts, what risks are posed by trojan horses?

Answer 1

Torjan horse is the kind of malware which behaves as if it has some useful functionality for the user and in the background it does the malicious work such as:

• Providing the attacker with backdoor entry
• Destroying data without the user getting to know about it.

The following can be noticed about torjan horses in regards to CIA:

1. Confidentiality: Torjan horse can provide backdoor entry to the attacker. This may endanger the confidential information stored on the system.
2. Integrity: After the attacker has gained backdoor entry, they may alter the system's data without permission of the user. If permission is absolutely needed by the file system and operating system, then the torjan horse may ask the user for permission to do some normal task but maliciously use that permission for aiding the attacker.
3. Availibility: Torjan horse being a malicious background process can pose itself as harmless and in camouflage of that, it may destroy information thereby destroying the ease of availibility.

----------------------------------------------

Now let's look at the dangers it poses towards AAA:

1. Assurance: The torjan horse may not affect this part of the system in a passive way such as although it is guaranteed to the user of some resource, the attacker using the backdoor entry provided by the torjan horse may result in instability of the system and thereby, jeopardizing the trust guaranteed to the users.
2. Authenticity: It is the torjan horse's specialty to disguise itself as authentic when in the background it is not.
3. Anonymity: The anonymity is compromised because the torjan horse leaks information by providing a background passage into the system.