An enterprise organization suffers a security incident where an unauthorized actor intercepts and alters router configuration files in transit across an unencrypted network link, causing network routing tables to become corrupted. The security team must implement controls to ensure that data cannot be modified in transit without detection. Which core principle of the CIA triad was violated during this attack, and which security mechanism directly mitigates this specific vulnerability?
- Integrity was violated; it is mitigated by implementing cryptographic message hashing and digital signatures.Answer
- BConfidentiality was violated; it is mitigated by applying traffic policing to buffer out-of-profile configuration packets.
- CAvailability was violated; it is mitigated by adding explicit permit statements to prevent implicit deny ACL behavior.
- DConfidentiality was violated; it is mitigated by isolating management traffic onto Type 1 hypervisor virtual switches.
Answer
Integrity was violated; it is mitigated by implementing cryptographic message hashing and digital signatures.
The security incident involved the unauthorized modification of data in transit. In the CIA triad, protecting data against unauthorized alteration or tampering is the core requirement of Integrity. To mitigate this threat, cryptographic mechanisms such as message hashing (e.g., HMAC) and digital signatures are deployed to detect any payload tampering.
Step-by-Step Solution
Key Concept
CIA Triad Principles and Integrity Verification Mitigations