Blog

Analyze three specific potential malicious attacks

 

Analyze three specific potential malicious attacks

Computer Network Security

 

You have just been hired as an Information Security Engineer for a videogame
development company. The organization network structure is identified in the
below network diagram and specifically contains:

1) 2 – Firewalls

5) 2 – Windows Server 2012 Active Directory Domain Controllers (DC)

2) 1 – Web / FTP server

6) 3 – File servers

3) 1 – Microsoft Exchange Email server

7) 1 – Wireless access point (WAP)

4) 1 – Network Intrusion Detection System (NIDS)

8) 100 – Desktop / Laptop computers

9) VoIP telephone system

The CIO has seen reports of malicious activity being on the rise and has
become extremely concerned with the protection of the intellectual property
and highly sensitive data maintained by your organization. As one of your
first tasks with the organization, the CIO requested you identify and draft a
report identifying potential malicious attacks, threats, and vulnerabilities
specific to your organization. Further, the CIO would like you to briefly
explain each item and the potential impact it could have on the organization.

Write a four to five page paper in which you:

1. Analyze three specific potential malicious attacks and / or threats
that could be carried out against the network and organization.

2. Explain in detail the potential impact of the three selected malicious
attacks.

3. Propose the security controls that you would consider implementing in
order to protect against the selected potential malicious attacks.

4. Analyze three potential concerns for data loss and data theft that may
exist in the documented network.

5. Explicate the potential impact of the three selected concerns for data
loss and data theft.

6. Propose the security controls that you would consider implementing in
order to protect against the selected concerns for data loss and data theft.

7. Use at least three quality resources in this assignment (no more than
2-3 years old) from material outside the textbook. Note: Wikipedia and similar
Websites do not qualify as quality resources.

Your assignment must follow these formatting requirements:

• Be typed, double spaced, using Times New Roman font (size 12), with
one-inch margins on all sides; citations and references must follow APA or
school-specific format. Check with your professor for any additional
instructions.

• Include a cover page containing the title of the assignment, the
student’s name, the professor’s name, the course title, and the date. The
cover page and the reference page are not included in the required assignment
page length.

The specific course learning outcomes associated with this assignment are:

• Explain the concepts of information systems security as applied to an
IT infrastructure.
• Describe the principles of risk management, common response
techniques, and issues related to recovery of IT systems.
• Describe how malicious attacks, threats, and vulnerabilities impact an
IT infrastructure.
• Explain the means attackers use to compromise systems and networks,
and defenses used by organizations.
• Use technology and information resources to research issues in
information systems security.
• Write clearly and concisely about network security topics using proper
writing mechanics and technical style conventions

Give the security levels top secret-secret and confidential

Give the security levels top secret-secret and confidential

Computer Network Security

Give the security levels Top SECRET,SECRET,CONFIDENTIAL, and UNCLASSIFIED
(order from highest to lowest), and catergories A, B,C, specify what type of
access (read,write, both or neither) is allowed in each of the following
situations. Assume that discretionary access controls allow anyone access
unless otherwise specified.

Discusses methods for systems and application security

 

Discusses methods for systems and application security

Computer Network Security

Securrity

Post for elprofessori

Part 1

Based on your team’s Week Five Learning Team Collaborative discussion, write
the Network Security Policy section of the Information Security Policy.

Include the following:

• Network security control devices
• Threat monitoring and protection
• Threat identification and remediation

Compile all sections of Information Security Policy. This should include all
parts of the policy from Weeks Two through Five.

Write the conclusion for your Security Policy.

Format according to APA guidelines.

Part 2

Complete ALL of the following lessons in Pluralsight:

• “Operate and Configure Cloud Security” of the SSCP: Systems and
Application Security Pluralsight course.

• “Implement and Operate Endpoint Device Security” of the SSCP: Systems
and Application Security Pluralsight course.

Take a screenshot showing your completed course in Pluralsight.

Paste the screenshot into a Microsoft Word document.

 

Perform security exploits on web applications and websites

Perform security exploits on web applications and websites

Computer Network Security

Advanced Topics in Digital Security

Objectives

– To apply skills and knowledge acquired throughout the trimester in
exploiting web application security loopholes and the techniques to fix such
loopholes.
– To demonstrate ability to use WebGoat to test security exploits on web
applications and servers.
– To gain experience in documenting every application exploit that was tested.

Problem Statement

You are required to perform security exploits on web applications and
websites. To complete this assignment, you need to select and choose FOUR of
the security topics of web application security lessons specified in the
WebGoat J2EE web application package, including topics and tools that we have
not covered but you may find interesting. You may choose to use WebGoat and
any appropriate tools from the SIT704 CloudDeakin course website to complete
this assignment. You can also use other non-commercial (free and open-source)
tools (e.g. WebScarab, Wireshark, w3af, metasploit) to help you complete this
assignment. You are not allowed to use any commercial security-related or
automated hacking products such as IBM Security AppScan for this assignment.
To demonstrate your achievement of these goals, you must write a 2,000 word
report.

Your report should consist of the following chapters:

1. A proper title which matches the contents of your report.

2. Your name and Deakin student number in the author line.

3. An executive summary which summarizes your findings.

(You may find hints on writing good executive summaries from
http://unilearning.uow.edu.au/report/4bi1.html.)

4. An introduction chapter which lists the four vulnerabilities of your
choice, the impact of these vulnerabilities, the brief summary of your
findings, and the organization of the rest of your report.

5. A literature review chapter which surveys the latest academic papers
regarding the four vulnera- bilities of your choice. With respect to each
vulnerability, you are advised to identify and include at least two papers
published by ACM and IEEE journals or conference proceedings. Your review must
not simply be a summary of each paper, but rather a deep analysis of the body
of work reported in the set of paper. Your aim in this part of the report is
to demonstrate deep and thorough understanding of the existing body of
knowledge encompassing multiple vulnerabilities of modern web applications.
(Please read through the hints on this web page before writing this chapter
http://www.uq.edu.au/student-services/learning/literature-review.)

6. A technical demonstration chapter which consists of fully explained
screenshots when your tests were conducted. That is, you should explain the
identification of your target web services or web applications, the
information about the server(s), each step of the procedure of exploitation,
and the results. You must prove that your tests are original.

7. A conclusions chapter which summarizes major findings of the study and
indicates future work which should be conducted in the area.

8. A bibliography list of all cited papers and other resources. You must use
in-text citations in Harvard style and each citation must correspond to a
bibliography entry. There must be no bibliography entries that are not cited
in the report. (You should know the contents from this page
http://www.deakin.edu.au/students/study-support/referencing/harvard.)

 

Discuss a case study on your chosen it system

Discuss a case study on your chosen it system

Computer Network Security

 

The purpose of this assignment is to develop skills to identify appropriate
network security tools for various operating systems. Students will also have
opportunity to explore the use of the tools on specific security risks and/or
vulnerabilities. This exercise gives student the opportunity to build skills
such as the ability to identify secure information strategy, and the ability
to administrate system security commands.

Description of the assessment: Answer the following points. This task requires
you to do literature search on internet, magazines, publications of journal or
conference, textbook etc. This is an individual assignment. Therefore, it is
very important to write the findings in your own words.

1. Choose one of the following IT systems:
1) Cloud apps Security
2) Mobile apps Security
3) Data Centre Security
4) Enterprise Security

2. Find and discuss a case study on your chosen IT system.

3. Identify three (3) security vulnerabilities in the chosen case study.

4. Discuss how these threats can be mitigated using security policies and
security tools.

5. Summarize the discussion and results.

Answered:-
Verified Expert

The paper is about cyber security and how the security of mobile applications
can affect any normal user. It highlights s case study about Wyndham wherein
they misused the data of the users to cause a large degree of credit card data
manipulation thereby affecting a hoard of customers. The paper talks about how
these can be prevented and how we need to deal with cyber security incidents
specially relating to mobile applications. The paper has been prepared in
Microsoft Office.
Preview Container
Mobile Apps Security:

With the advancement in technology these days there is a mobile application
for practically for every general software. Every application has become so
handy that it is of utmost importance to make sure that we have safer mobile
applications.

Hence mobile application security ideally refers to the protection of our
mobile application from any malware or activities of crackers, or any other
criminal is the direction of saving our app. It can also refer saving the data
of the users from being hacked and put to illegitimate use.

There has been various incident in which the data of the user have been hacked
and been misused by the criminals. Hence this term can also refer to various
practices that need to be followed that will minimize the risk that is
associated with our mobile device through the apps which we access through it
(Guttman, M.,1996).

Every mobile device has various components which make it so vulnerable to
attack from external resources. These applications use the data of the user
and sometimes hold this data in their database which either gets cached or
through other means get misused by any other individual.

There have also been incidents in which malware have been planted to spoil the
data for the users. Hence mobile app security requires us to safeguard the use
from any such attack on their device.

The mobile app security is also one of the major concerns of the upcoming
industries that wish to launch their mobile application because of the
stringent rules and policies that are coming place.

Explain main targets seem to be larger or smaller companies Computer Network Security

Explain main targets seem to be larger or smaller companies
Computer Network Security

Research three recent information security breaches. Do the main targets seem
to be larger or smaller companies? Is there a particular industry that seems
predominately targeted? Do you think breaches at smaller companies are just as
likely to occur but not as likely to make the news? Explain your reasoning.

What is the most important benefit of asymmetrical encryption? Contrast with symmetrical encryption

Important benefit of asymmetrical encryption

Computer Network Security

1. What is the most important benefit of asymmetrical encryption? Contrast
with symmetrical encryption

a. It speeds up the encryption process.

b. It makes e-mail easier to encode.

c. Only the sender knows to whom the information is going.

d. Messages can be transmitted openly and only the receiver can decrypt the
information

2. Which part of CAIN is realized through the use of message digest functions
and hashes?

a. confidentiality

b. authenticity

c. integrity

d. non-repudiation

3. Code books are normally associated with

a. substitution ciphers

b. Caesar ciphers

c. Spartan scytales

4. What defines the strength of a cryptographic method?

a. number of shifts

b. need for a code book

c. complexity of the algorithm

d. length of time needed to crack it

5. Cryptography is related to mathematics because _______.

a. the functions of mathematics have cryptographic properties

b. logarithms can cause convergence of numbers

c. mathematics is simple and easy to use

d. information can be represented as numbers and manipulated mathematically

6. To create a digital signature, a sender needs the plain text, the
asymmetrical encryption algorithm, and ___________.

a. his/her public key

b. the receiver’s public key

c. his/her private key

d. the receiver’s private key

7. One should establish access control policies for each part of the
information system that is ______________.

a. a high traffic area

b. a high security area

c. a high maintenance area

d. accessible to the public

8. If you are attempting to gain access to restricted information, what is the
first thing you should do?

a. kidnap an employee

b. ask for what purpose

c. spoof the server

d. disable the alarm system

9. Suppose your spy colleague wanted to send you messages that you could be
sure came from him (and not an enemy trying to pretend to be him). What CAIN
property is that? Your colleague tells you: “Whenever I send you a message,
the last thing in the message will be a number. That number will be a count of
the number of letter E’s in the message. If you get a message, and the number
at the end is NOT an accurate count of the number of letter E’s, that message
is from an imposter.” [a,b,c: 2 points, d: 4 points]

a) This number, put at the end of each message, is an example of what
cryptographic item?

b) Does it have the characteristic of being one wayi.e can you deduce the
original message by knowing the number?

c) Is it collision resistant?

d) Can you suggest some other way to indicate that message is from the sender
without resorting to encryption?

 

Explain difference of internal and external security threats Computer Network Security

Explain difference of internal and external security threats
Computer Network Security
Discussion Question

Question 1 Explain the difference between internal and external security
threats. Please provide two examples of each.

Question 2 How does disaster recovery planning differ from business continuity
planning? Do organizations really need both?

Examine the security characteristics of both ipv4

Examine the security characteristics of both ipv4

 

Computer Network Security

 

1- “Security Objectives” Please respond to the following:

· The confidentiality, integrity, availability (CIA) triad represents generic
security goals. CIA is typically applied to specific areas of information
technology as a metric or guideline for establishing or maintaining security.
Apply CIA principles to email technology. Explain in detail how each of the
three components of CIA can be satisfied in a typical email transaction from
one user to another. Be sure to include specific technologies involved (such
as digital certs, signed certs, encryption, etc.).

· Security today, in one way or another, depends on trust relationships.
Describe two scenarios in which the trust relationship between a user (client)
and e-Commerce site (server) may be violated after being granted digital
certificates from the same certificate authority (CA). Also, determine some
possible mitigation steps.

2- “Necessary Filtering ” Please respond to the following:

· Analyze in detail a non-stateful firewall’s interaction with the
transmission control protocol / Internet protocol (TCP / IP) stack as a packet
arrives from an internal (trusted) interface and is destined for a network on
its external interface. Describe the details of the decision-making process.

· As you may already be aware of by now, port 80 traffic possesses one of the
largest security threats in the IT industry today. This is evident since in
today’s world the Internet is so powerful and is used for so many different
purposes within any organization that it cannot be completely taken out of the
picture. Explain in detail how a Web proxy might be used to detect malware
from entering or leaving organizations.

Part 2

1- “VPN Solutions” Please respond to the following:

· Imagine you are a consultant called upon by a large U.S. corporation having
more than 10,000 employees nationwide. You are asked to implement a VPN
solution for remotely located employees to access the same corporate resources
as they could from their desktops at work. Describe, in order, the types of
questions you would ask their management and IT personnel in an information-
gathering session before providing them a plan of work.

· Explain what is meant by “split tunnel” VPNs. Explain the purpose of using
this technology over other types of VPN technologies. From a security
perspective, analyze how a remote user using split-tunneling to gain access to
the corporate network from home might invite unintended guests.

2- “VPN Choices ” Please respond to the following:

· Organizations use VPNs for many different purposes, each having its own
benefits and drawbacks when compared to others. Describe in detail four
deployment models for VPNs (for example site-to-site, host-to-site, edge
router). Explain the context in which each would be used and the resources
required; rank the ease of implementation over the others you choose.

· Determine the characteristics of a VPN that make it a desirable form of
remote access for many businesses or organizations. Be sure to address aspects
of authentication, encryption, authorization, and implementation.

Part 3

1- “Knowing the Threat” Please respond to the following:

· Explain the added challenges of securing wireless devices versus securing
LAN-connected devices. Imagine you are starting a new small- to-midsized
cybercafe business from the ground up. Explain which areas of your network
would be LAN based and which areas would be wireless.

· Analyze seven types of malware attacks applicable to a military weapons
company. Explain where each is likely to manifest itself (i.e., thumb drive,
hard drive, system files, email, Web pages, database server, and BIOS).
Determine how likely it is the attacker is an internal employee, neighbor at
home, someone located oversees, or an arbitrary person on the Internet.
Finally, discuss what motivation there is for the attack.

2- “Being Prepared for Anything” Please respond to the following:

· IT “readiness” is a common buzz word of today’s information technology
industries. From a security perspective, it basically refers to a posture of
being prepared for both foreseeable and unforeseeable issues. Explain some key
steps any organization can take regarding IT readiness planning and
implementation.

· One of the ways to defend against security threats is to know what one is up
against. List five most commonly used security tools. Describe their intended
function and explain how they may be used with malicious intent.

Part 4

1- “Security Layers” Please respond to the following:

· Analyze the seven security domains of a typical IT infrastructure and
determine which two of the seven you would implement first for a nationwide
bank. Explain your rationale for your choice.

· Explain the concept of incorporating redundancy throughout and corporate
network. There are also times when redundancy can produce a false sense of
security primarily based on how it is incorporated in a design. Explain such a
case and how to overcome the falsehood.

2- “Protecting the System” Please respond to the following:

· Describe some drawbacks to hardening a computer system which is currently in
a production environment and how the fears associated with those drawbacks can
be put to rest. Propose how you would proceed in this environment.

· Assess the importance of implementing Authentication, Authorization, and
Accounting (AAA) as a security measure. Explain the value AAA holds throughout
an organization’s network. Identify the layers of the open systems
interconnection (OSI) model that are influenced by a typical AAA
implementation or solution.

Part 5

1- “Beat the Hacker ” Please respond to the following:

· A honeypot can be a useful for discovering some of the hacking trends
occurring within an organization. Of course, there have to be certain measures
placed upon its operation, maintenance, and the reconnaissance information
obtained as a result. Describe some of the negative consequences of
implementing a honeypot within any organization. Determine if honeypots may or
may not favor the intruder, rather than serve its true intended purpose to
fool intruders.

· Provide a least two examples of security knowledge that would assist you in
preparing for or preventing a threat. Explain the time-sensitive nature of the
knowledge.

2- “Audits and Assessments” Please respond to the following:

· From the e-Activity, explain, in your own words, each security compliance
measure and how each, in general, is designed to protect an organization.

· Security assessment tools vary with industry. Imagine being hired as a
security auditor for a single, small privately-owned bank. Imagine that the
bank has deployed typical industry-wide physical, network, application, and
system security commonly seen in banks; including cameras, security guards,
bank tellers, safes, proxies, firewalls, etc. In addition, the bank also has
an Internet portal for its customers to access their bank accounts 24 / 7.
Discuss the process you would go through in choosing vulnerability assessment
tools.

Part 6

1- “Firewall Implementation” Please respond to the following:

· Imagine working for an organization in which you were assigned to protect
mission critical cloud-based Web applications that several of your third-party
customers need to have access to on a regular basis. List at least three main
types of firewalls you would use. Explain your reasoning behind your choices.
Note: You may make any assumptions about your fictitious employment as long as
your assumption is identified in your answer.

· Today’s log management needs have come at a time when storage memory is
cheap, information is abundant, and computer processors are much faster.
Despite many of these benefits, challenges have also been introduced. Describe
the main challenges to log management. Discuss any future challenges which may
arise from newer technologies, such as external cloud hosting.

2- “Firewalling the Attacks” Please respond to the following:

· List and describe at least five different malware attacks which can be
carried out against a large Internet dating company. Explain for each the role
a firewall plays in either preventing or stopping the attack from fully
manifesting.

· Describe the key differences between a network-based attack and client-based
attack. Give some examples of each and determine which deserves the most
attention at this point in time. Explain your reasoning.

Part 7

1- “How Is Your Firewall Implementation?” Please respond to the following:

Imagine you have installed and configured firewalls in all of the right places
within your organization’s network. Like any other organization, you try to
stay current by deploying the latest and greatest in firewall technology.
Similarly, the purpose of your firewall is to filter bad traffic, which your
firewall has been doing. Occasionally, you add more rules to filter more
traffic, but have no evidence of going back to visit historical log data.
Explain in detail and give examples of the problems that result from this
practice.

You have a firewall in your production environment and occasionally need to
add rules mostly to open up ports, services, IPs, and so on, from ingress
traffic from the Internet, but do nothing to egress traffic leaving your
network. Determine the possible pitfalls of adding rules to egress traffic
leaving the network. Describe in detail solutions to such pitfalls in the
order you would implement them.

2- How Much Protection Do You Really Need?” Please respond to the following:

Examine the specifications for an enterprise class firewall and a personal or
home firewall. Determine why “all firewalls are not equal”. Assess the
effectiveness of each and determine if one outperforms another at its intended
function. Discuss risk, manageability, scalability, need, and cost of each.

Describe the applicability of software network firewalls, appliance firewalls,
and virtual firewalls. Explain the circumstances under which each would be
used and why. Discuss risk, manageability, scalability, need, and cost of
each.

Part 8

1- “VPN Implementations” Please respond to the following:

From a very practical point, create a list of attributes you would expect to
be present at any organization implementing a VPN solution for the first time.
Then, explain the differences in attributes you would choose for a
pharmaceutical company creating the latest groundbreaking drugs for the
consumer market as opposed to the VPN implementation at a private college.

From the e-Activity, list the product specifications and features being
offered. Compare and contrast what makes one different from the other. Also,
determine what you believe to be the most basic requirements just about any
VPN solution should have.

2- “Security and Risk” Please respond to the following:

Oftentimes, companies use VPNs to extend their employees’ internal access when
they are away at home or out of the office. For many companies, this means
that a VPN connection, which may be externally initiated from the Internet,
mimics the level of access an employee would have if he or she was physically
present at the office. Furthermore, oftentimes the employee utilizing such a
VPN is allowed to access the internal corporate network from laptops,
desktops, PDAs, and other personal devices owned by them and not the company.
Explain the security implications and measures required to protect the assets
of companies that permit the use of VPNs.

After designing a brand-new remote VPN for your corporate users, your manager
tasked you with creating a training guide in the form of a presentation. The
goal of the training guide is to inform end users of possible security risks
when connecting as well as what goes on as the connection is being
established. Mention the degree of access the remote employee would have to
internal corporate resources. Explain possible limitations.

Mitigate risk by using information security systems policies Computer Network Security Scenario

Mitigate risk by using information security systems policies
Computer Network Security
Scenario

You work for a large, private health care organization that has server,
mainframe, and RSA user access. For the third week in a row, Sean comes into
your office at 5:00 p.m. on Friday and needs you to write a report describing
some of the risks associated with not having all the security items in place.
He needs you to research a generic risk management policy template and use
that as a starting point to move forward. He also asked you to search for risk
outcome examples from organizations similar to theirs.

You realize that your organization does not have much in the way of an
information security strategy, and is missing many of what you think are
critical components. Your organization is compliant with the Health Insurance
Portability and Accountability Act (HIPAA) and follows other external
compliance requirements.

Assignment Requirements

Research templates, and look for risk outcome examples from organizations of a
similar type as your organization. Write a report identifying the risks
associated with the current position your organization is in, and how your
organization can mitigate risk by using information security systems policies.
Include an introduction explaining the following: Who? What? When? Why? Be
sure to add a conclusion with a rationale detailing how risks can be
mitigated. Reference your research so that Sean may add or refine this report
before submission to senior management.