CSARCH Logs

It describes network communication in seven layers so that communication across very different technical systems can be described and developed further; in CSA it is used to classify what a security component does and to describe attacks. * Name the layer and you know which comp...

Quiz: CSARCH / Models, Standards and Terms | updated: Oct 26, 2026

Network symbols (firewall, router, switch, LAN, load balancer) are borrowed from network topology diagrams, process symbols (activity, start and end points, decision) from UML, and application symbols cover user interfaces, servers, databases, services, identity providers, cloud...

Quiz: CSARCH / Models, Standards and Terms | updated: Oct 26, 2026

Badly on interaction: it blocks not only bad interaction but also the desired and permitted kind. Well on the system boundary: the isolation barrier is built exactly there. Today it is realistic only in special cases, and the natural next step is a perimeter model with a very res...

Quiz: CSARCH / Security-by-Isolation and Security-by-Obscurity | updated: Oct 26, 2026

It fails on every point: no defined system boundary, good and bad actors cannot be distinguished, good and bad interaction cannot be recognised, and the desired environment is unknown. It should not be pursued, but since it usually stems from missing security knowledge, the peopl...

Quiz: CSARCH / Security-by-Isolation and Security-by-Obscurity | updated: Oct 26, 2026

The requirements for an information security management system (ISMS): for establishing, implementing, operating, monitoring, reviewing, maintaining and improving it with respect to the organisation's business risks, including the introduction of security controls tailored to the...

Quiz: CSARCH / Models, Standards and Terms | updated: Oct 26, 2026

A design pattern is a proven solution template for a recurring design question; an anti-pattern is a pattern that is unsuitable, harmful or useless, in plain words "a bad idea". * Same question, two answers: one proven, one that only looks clever until someone finds the hidden d...

Quiz: CSARCH / Models, Standards and Terms | updated: Oct 26, 2026

Because the weighing data is certainly needed elsewhere (inventory, production and billing); if it is passed on without the PC, for example on a paper form, the isolation holds, but if the Windows PC passes it on, the isolation is broken and the communication must be analysed. *...

Quiz: CSARCH / Security-by-Isolation and Security-by-Obscurity | updated: Oct 26, 2026

The administrator protected a "door open" web page only by putting it on an unusual network port, which is hiding, not security. Proper access protection (AAA) is needed, and the security-awareness gap calls for an information or training campaign. * Hiding the page on an unusua...

Quiz: CSARCH / Security-by-Isolation and Security-by-Obscurity | updated: Oct 26, 2026

Architecture designs the plan and demands a secure construction; the IT department builds and operates the cyber system following the plan; information/IT security sets requirements, using ISO 27001 as its template, and demands that the system is securely manageable. The goal is...

Quiz: CSARCH / Models, Standards and Terms | updated: Oct 26, 2026

Legacy IT means old systems that may no longer meet today's state of the art or were not designed to run in modern environments; on-premises (on-prem) means "in our own data centre", as opposed to a service hosted by an external provider such as a cloud or outsourcing partner. *...

Quiz: CSARCH / Models, Standards and Terms | updated: Oct 26, 2026