> For the complete documentation index, see [llms.txt](https://thmflags.gitbook.io/thm-walkthroughs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://thmflags.gitbook.io/thm-walkthroughs/difficulty-info/principles-of-security.md).

# Principles of Security

{% embed url="<https://tryhackme.com/room/principlesofsecurity>" %}
<https://tryhackme.com/room/principlesofsecurity>
{% endembed %}

| Room Attributes       | Value                                                                  |
| --------------------- | ---------------------------------------------------------------------- |
| Subscription Required | <mark style="color:green;background-color:green;">False</mark> \[Free] |
| Type                  | Walkthrough                                                            |
| Difficulty            | <mark style="color:blue;background-color:blue;">Info</mark>            |
| Tags                  | CIA Triad, Information Security, Incident Response, Threat Model       |

## Task 1 Introduction

### Let's proceed!

{% hint style="success" %}
No answer needed
{% endhint %}

## Task 2 The CIA Triad

### What element of the CIA triad ensures that data cannot be altered by **unauthorised** people?

<details>

<summary>Reveal Flag <span data-gb-custom-inline data-tag="emoji" data-code="1f6a9">🚩</span></summary>

:triangular\_flag\_on\_post:`integrity`

</details>

### What element of the CIA triad ensures that data is available?

<details>

<summary>Reveal Flag <span data-gb-custom-inline data-tag="emoji" data-code="1f6a9">🚩</span></summary>

:triangular\_flag\_on\_post:`availability`

</details>

### What element of the CIA triad ensures that data is only accessed by **authorised** people?

<details>

<summary>Reveal Flag <span data-gb-custom-inline data-tag="emoji" data-code="1f6a9">🚩</span></summary>

:triangular\_flag\_on\_post:`confidentiality`

</details>

## Task 3 Principles of Privileges

### What does the acronym "PIM" stand for?

<details>

<summary>Reveal Flag <span data-gb-custom-inline data-tag="emoji" data-code="1f6a9">🚩</span></summary>

:triangular\_flag\_on\_post:`Privileged Identity Management`

</details>

### What does the acronym "PAM" stand for?

<details>

<summary>Reveal Flag <span data-gb-custom-inline data-tag="emoji" data-code="1f6a9">🚩</span></summary>

:triangular\_flag\_on\_post:`Privileged Access Management`

</details>

### If you wanted to manage the privileges a system access role had, what methodology would you use?

{% hint style="warning" %}
**HINT:** I'm looking for the short acronym here (PIM/PAM)
{% endhint %}

<details>

<summary>Reveal Flag <span data-gb-custom-inline data-tag="emoji" data-code="1f6a9">🚩</span></summary>

:triangular\_flag\_on\_post:`PAM`

</details>

### If you wanted to create a system role that is based on a users role/responsibilities with an organisation, what methodology is this?

{% hint style="warning" %}
**HINT:** I'm looking for the short acronym here (PIM/PAM)
{% endhint %}

<details>

<summary>Reveal Flag <span data-gb-custom-inline data-tag="emoji" data-code="1f6a9">🚩</span></summary>

:triangular\_flag\_on\_post:`PIM`

</details>

## Task 4 Security Models Continued

### What is the name of the model that uses the rule "**can't** read up, can read down"?

{% hint style="warning" %}
**HINT:** Formatting: The x Model Look at the direction of the arrows and the text next to them to understand what directions can read up/down depending upon the model
{% endhint %}

<details>

<summary>Reveal Flag <span data-gb-custom-inline data-tag="emoji" data-code="1f6a9">🚩</span></summary>

:triangular\_flag\_on\_post:`The Bell-LaPadula Model`

</details>

### What is the name of the model that uses the rule "**can** read up, can't read down"?

{% hint style="warning" %}
**HINT:** Formatting: The x Model Look at the direction of the arrows and the text next to them to understand what directions can read up/down depending upon the model
{% endhint %}

<details>

<summary>Reveal Flag <span data-gb-custom-inline data-tag="emoji" data-code="1f6a9">🚩</span></summary>

:triangular\_flag\_on\_post:`The Biba Model`

</details>

### If you were a military, what security model would you use?

{% hint style="warning" %}
**HINT:** Formatting: The x Model
{% endhint %}

<details>

<summary>Reveal Flag <span data-gb-custom-inline data-tag="emoji" data-code="1f6a9">🚩</span></summary>

:triangular\_flag\_on\_post:`The Bell-LaPadula Model`

</details>

### If you were a software developer, what security model would the company perhaps use?

{% hint style="warning" %}
**HINT:** Formatting: The x Model
{% endhint %}

<details>

<summary>Reveal Flag <span data-gb-custom-inline data-tag="emoji" data-code="1f6a9">🚩</span></summary>

:triangular\_flag\_on\_post:`The Biba Model`

</details>

## Task 5 Threat Modelling & Incident Response

### What model outlines "Spoofing"?

{% embed url="<https://web.archive.org/web/20070303103639/http://msdn.microsoft.com/msdnmag/issues/06/11/ThreatModeling/default.aspx>" %}
<https://web.archive.org/web/20070303103639/http://msdn.microsoft.com/msdnmag/issues/06/11/ThreatModeling/default.aspx>
{% endembed %}

<details>

<summary>Reveal Flag <span data-gb-custom-inline data-tag="emoji" data-code="1f6a9">🚩</span></summary>

:triangular\_flag\_on\_post:`STRIDE`

</details>

### What does the acronym "IR" stand for?

<details>

<summary>Reveal Flag <span data-gb-custom-inline data-tag="emoji" data-code="1f6a9">🚩</span></summary>

:triangular\_flag\_on\_post:`Incident Response`

</details>

### You are tasked with adding some measures to an application to improve the integrity of data, what [*STRIDE*](https://web.archive.org/web/20070303103639/http://msdn.microsoft.com/msdnmag/issues/06/11/ThreatModeling/default.aspx) principle is this?

<details>

<summary>Reveal Flag <span data-gb-custom-inline data-tag="emoji" data-code="1f6a9">🚩</span></summary>

:triangular\_flag\_on\_post:`Tampering`

</details>

### An attacker has penetrated your organisation's security and stolen data. It is your task to return the organisation to business as usual. What incident response stage is this?&#x20;

<details>

<summary>Reveal Flag <span data-gb-custom-inline data-tag="emoji" data-code="1f6a9">🚩</span></summary>

:triangular\_flag\_on\_post:`Recovery`

</details>