Jump to content

Structural vulnerability (computing)

From Wikipedia, the free encyclopedia
This is an old revision of this page, as edited by Gronk Oz (talk | contribs) at 09:12, 16 November 2017 (Added {{orphan}} tag to article (TW)). The present address (URL) is a permanent link to this revision, which may differ significantly from the current revision.

A Structural Vulnerability is an IT system weakness that consists of several so-called component vulnerabilities. This type of weakness generally emerges due to several system architecture flaws.

An example of a structural vulnerability is a person working in a critical part of the system with no security training, who doesn’t follow the software patch cycles and who is likely to disclose critical information in a phishing attack.[1]

References

  1. ^ "KTH | Holistic Quantitative Threat Modeling & Attack Simulation | Robert Lagerström". www.kth.se. Retrieved 15 November 2017.