When we talk about,,es,or security,,es,often we tend to use the terms ",,es,threat,,es," Y ",,es,vulnerability,,es,"They represent a reality with which we often face in this work.,,es,However, many people confuse them. Therefore, we will make a comparative today,,es,Threat vs. Vulnerability,,es,to show who are both concepts and how they differ.,,es,Concepts of threat and vulnerability,,es,We see,,,es,tell us what these concepts of vulnerability and threat,,es,Vulnerability,,es,is the weakness or failure that presents an information system. This is likely to put the safety of all or part of the information at risk. That is, it is a problem that we have, our system.,,es cybersecurity or computer security We often use the terms «amenaza» and «vulnerabilidad«, because they represent a reality we often face in this line of work.

However, many people confuse the two. That's why we're going to compare them today Threat vs. Vulnerability to show you what these two concepts are and how they differ.

Concepts of Threat and Vulnerability

We see, What do these concepts of vulnerability and threat tell us?.

Vulnerabilidad

The vulnerabilidad It is a weakness or flaw in an information system. This can jeopardize the security of all or part of the information. In other words, it is a problem that we—our system—have.

The reason is that this fault or weakness allows the attacker to compromise the integrity, confidentiality and even the availability of information and data.,,es,The origins of the,,es,vulnerabilities,,es,are very different. They may be due to failures in the system design, lack of procedures or simple configuration errors.,,es,Threat,,es,It is action that uses a vulnerability to act against the security of the information system. These actions are always dangerous but obviously if there is a vulnerability and its possible effect multiplies. The,,es,It is part of the opposite side, not on our system.,,es,Its origins can be many:,,es,Malicious code or malware,,gl

Los orígenes de las vulnerabilidades They are very different. They may be due to flaws in the system's design, a lack of procedures, or simple configuration errors.

Vulnerabilidades en la seguridad informática

Amenaza

The amenaza is an action that exploits a vulnerability to compromise the security of an information system. Such actions are always dangerous, but obviously, if a vulnerability exists, their impact becomes possible and is magnified. The amenaza It is part of the opposing side, not our system.

There could be many different origins:

  • Malicious code or malware: The most general and can perform many varied offensive actions.,,es,APTs,,en,: They are well coordinated, elaborate attacks that focus on a company or organization to carry out an attack against a specific target with your information.,,es,Social engineering,,es,: Persuasive techniques are used to exploit the goodwill of the people; ie attack man component.,,es,Botnets,,en,: These infected computers that are dedicated to run, automatically, sophisticated programs to perform attacks.,,es,Cloud Services,,es,:,,en,The cloud is extremely vulnerable,,es
  • APTs: These are sophisticated, well-coordinated attacks that target a company or organization to carry out a specific attack against its information.
  • Social Engineering: Persuasive techniques are used to take advantage of people's goodwill; in other words, they target the human element.
  • Botnets: These are infected devices that automatically run programs to carry out sophisticated attacks.
  • Cloud Services: The cloud is extremely vulnerableTherefore it is necessary that if you hire a service push yourself the same security you have in your system, with agreements signed service level. Otherwise, gaps will open very quickly and you will be terribly exposed.,,es,: The reputation of the company in question can be seen with uncontrolled use of these, which, on the other hand, are extremely accessible.,,es,For this reason, it is essential to be perfectly protected. The threats are many and the attackers are lurking waiting for their chance.,,es,We have so,,es,vulnerabilities are the conditions of our system that make them susceptible to threats, which are extraneous circumstances able to pose a risk or a danger,,es,Risk,,es
  • Social networks: The company's reputation could be called into question by uncontrolled use of these tools, which, on the other hand, are extremely accessible.

For this reason, it is essential to be fully protected. There are many threats out there, and attackers are lying in wait, biding their time.

Amenazas y vulnerabilidades seguridad informática

Tenemos así que Vulnerabilities are the conditions within our system that make it susceptible to threats, which are external circumstances capable of posing a risk or danger..

Riesgo

From these concepts we can get another:,,es,the risk,,es,. He,,es,risk,,es,is a probability that can produce an incident involving the,,es,and domestic, and its main factors the existence of both a vulnerability and threat.,,es,This is a figure that indicates how likely it is that a threat, with the use of a vulnerability present, materializes producing negative impacts on the information system.,,es,2017-06-26T11:28:41 00:00,,en,Hybrid Architectures for Cloud Computing,,es,Cyber ​​Security: Threat vs. vulnerability | Informatic security,,es el riesgo. El riesgo is the probability that an incident related to the industrial cybersecurity and domestic violence, and its main factors are the presence of both vulnerability and a threat.

This figure indicates the likelihood that a threat, by exploiting an existing vulnerability, will materialize and have negative impacts on the information system.