UhlLinuxServer Risk Assessment

Tags: UhlLinuxServer Information_Governance_Category

1 Illicit Access to Server

1.1 Impact

• 1.1.1 Attacker could have access to data stored on the server
• 1,1.2 Attacker could corrupt data stored on the server
• 1.1.2 Attacker could change or corrupt the software running on the machine

1.2 Likelihood

• 1.2.1 The servers are available on the Internet and so open to attack

1.3 Mitigation

• 1.3.1 Access via ssh is only allowed from within the University of Leicester
• 1.3.2 Servers are behind a proxy server, which attackers would have to compromise before accessing the server itself.
• 1.3.3 Only ports 80 and 443 communication is allowed through the proxy server.

1.4 Improvements

2 Illicit Access to Data

2.1 Impact

2.2 Likelihood

2.3 Mitigation

2.4 Improvements

3 Illicit Use of Data by Employees

3.1 Impact

3.2 Likelihood

3.3 Mitigation

3.4 Improvements

4 Illicit Access to Software

4.1 Impact

4.2 Likelihood

4.3 Mitigation

4.4 Improvements

5 Communication Interception

5.1 Impact

5.2 Likelihood

5.3 Mitigation

5.4 Improvements

6 Software Security Vulnerability

6.1 Impact

6.2 Likelihood

6.3 Mitigation

6.4 Improvements

7 Data Loss or Corruption

7.1 Impact

7.2 Likelihood

7.3 Mitigation

7.4 Improvements

8 Software Loss or Corruption

8.1 Impact

8.2 Likelihood

8.3 Mitigation

8.4 Improvements

Error: Macro BackLinks(None) failed

'Environment' object has no attribute 'get_db_cnx'