Title: Describe the characteristics of vulnerabilities.
Course: Cybersecurity Fundamentals (10302-I) > Section: Understanding Cyber Threats and Vulnerabilities

escription should include

- understanding that a large number of vulnerabilities historically have been through flaws in software
- describing elements that make a system vulnerable
  - a system susceptibility or flaw
  - attacker access to the flaw
  - attacker capability to exploit the flaw
- explaining the effect of a vulnerability on a system (i.e., compromised confidentiality, integrity, or availability of resources)
- discussing flaws in software that can lead to vulnerabilities, such as
  - buffer overflow or broken authentication and session management
  - injection vulnerabilities
  - input validation
  - privilege confusion.

Teacher Resources:

- Common Vulnerabilities and Exposures
- U.S. Department of Homeland Security