Category: Uncategorized

Explain role rahab plays in christian exegetical traditions

The relatively few verses devoted to Rahab in the HB stimulated an amazingly rich exegetical tradition in both Judaism and Christianity. She was widely depicted as a proselyte or convert to the monotheistic faith of Israel. In Judaism, she could then be portrayed as one of the most pious converts-a worthy wife of Joshua and the ancestor of prophets.

A parallel, but distinctly Christian development, is found in Matt 1:5 where a Rahab is identified as the wife of Salmon and the mother of Boaz. This accords to Rahab a prominent position in the genealogy of “Jesus Christ, the son of David, the son of Abraham.” Inasmuch as Matthew does not specifically link “his” Rahab with the harlot of the book of Joshua, and while the Greek text of Matthew preserves a distinctive spelling of the proper name (rachab, raab elsewhere), it is possible that this is another Rahab. However, the appearance and identity of three other women from the HB (Tamar, Ruth, and the wife of Uriah [i.e., Bath-sheba]) in the genealogy of Jesus make it virtually certain that we are dealing with only one Rahab in both Testaments. This is clearly the case in the other two NT references to “Rahab the harlot”: Heb 11:31, and Jas 2:24-25.

QUESTION: The role Rahab plays in Jewish and Christian exegetical traditions (many other examples could be cited) is larger than that attributed to her in the HB itself. Why in your opinion did Rahab spur such rich tradition both in Jewish and Christian literature?

Discuss specific characteristics of global botnets

Evaluation of Ethical Issues Associated with Formulating Global Cybersecurity Policy

Individual Assignment

Each student evaluates the issues associated with Botnets and with formulating global cybersecurity policy through a 10 page (minimum length) position paper. If you have any questions, please ask them early in the week so you have enough time to complete this assignment on time.

Students are to discuss the characteristics of Botnets:

1. Discuss Six specific characteristics of global Botnets (such as purpose, size, attack method, attribution, etc.), and describe how these characteristics have emerged, changed, or evolved over the past 5-10 years. Also describe the key technical features of six example Botnets.

2. Discuss briefly what contributing factors may cause Botnet characteristics to change, and how these characteristics may change over the next ten years.

3. How might these future Botnets be countered by global cybersecurity POLICY controls (do not describe technology controls) in the future?

4. Discuss policy, security practices, ethical principles, and recommendations. Support your ideas by using examples and cited references.
The assignment is due at the end of Week 8.

Prepare your paper in either Word or PDF format in APA format.

Describe the principles of security management

As you begin to craft a Security Management Plan for your organization to secure and protect the quality and integrity of the data, you will take this opportunity in the first assignment to create the shell of your Security Management Plan.

The assignments each week build upon the work and knowledge from the weeks beforehand. You will create 1 document that contains all of the weekly assignments-in separate sections-culminating with the final submission being a single document containing all of the weekly assignments.

You are responsible for adding each of these ongoing Individual Project assignments into your Key Assignment document that will contain a security plan for the organization to be used to protect the organization’s assets.
The project deliverables are as follows:

Security Management Plan
Use Word
Title page
Course number and name
Project name
Your name
Date
Table of Contents (TOC)
Use an autogenerated TOC.
This should be on a separate page.
This should be a maximum of 3 levels deep.

Be sure to update the fields of the TOC so that it is up-to-date before submitting your project.

Section Headings (create each heading on a new page with “TBD” as content, except for Section 1)

Section 1: Information SecurityManagement (Week 1)

This section will be used to describe the organization and will establish the security model to be used by the organization.

Section 2:Security Program (Week 2)

This section will focus on existing frameworks that can help in the implementation of a security plan and what a security organization should look like.

Section 3:Security Policies (Week 3)

This section looks at security policies and their creation.

Section 4:Assessing Risk (Week 4)

This section will focus on risk assessments and methodologies used to perform one.

Section 5: ControllingRisk (Week 5)

This final section combines all of the previous sections and gives the opportunity to look at mechanisms to control risk.

Create the following section for Week 1:

Section 1: Information Security Management

Describe an organization of your choosing, for which you will implement a security program.

Describe the principles of security management, including the following:

People
Process

Technology

Describe the role of project management with respect to implementing security management.

Describe how you plan to instill a secure mentality into an organization, including a tie into the project management discussion about when security concepts should be introduced into the project lifestyle.

You should provide at least 2-3 pages of discussion for this information.

Explain possible network infrastructure vulnerabilities

Project: Network Infrastructure and Security

This assignment consists of two sections: an infrastructure document and a project plan. You must submit both sections as separate files for the completion of this assignment. Label each file name according to the section of the assignment it is written for. Additionally, you may create and / or assume all necessary assumptions needed for the completion of this assignment.

With the parameters set forth at the onset of the project, present the infrastructure and security policy that will support the expected development and growth of the organization. The network solution that is chosen should support the conceived information system and allow for scalability. The network infrastructure will support organizational operations; therefore, a pictorial view of workstations, servers, routers, bridges, gateways, and access points should be used. Since the company will be merging with a multinational company, virtualization and cloud technology should be taken into consideration. In addition, access paths for Internet access should be depicted. A narrative should be included to explain all the nodes of the network and the rationale for the design. Lastly, using the Confidentiality, Integrity and Availability (CIA) Triangle, define the organizational security policy.

Section 1: Infrastructure Document

Write a five to ten page infrastructure document in which you:

1. Identify possible network infrastructure vulnerabilities. Address network vulnerabilities with the appropriate security measures. Ensure that consideration is given to virtualization and cloud technology.

2. Design a logical and physical topographical layout of the planned network through the use of graphical tools in Microsoft Word or Visio, or an open source alternative such as Dia. Explain the rationale for the logical and physical topographical layout of the planned network. Note: The graphically depicted solution is not included in the required page length.

3. Illustrate the possible placement of servers, including access paths to the Internet and firewalls. Note: facility limitations, workstations, printers, routers, switches, bridges, and access points should be considered in the illustration.

4. Create and describe a comprehensive security policy for the company that will:

• Protect the company infrastructure and assets by applying the principals of CIA. Note: CIA is a widely used benchmark for evaluation of information systems security, focusing on the three core goals of confidentiality, integrity, and availability of information.

• Address ethical aspects related to employee behavior, contractors, password usage, and access to networked resources and information.

• Section 2: Project Plan

Use Microsoft Project or Excel:

1. Create three to five new project tasks each consisting of five to ten subtasks.

Pros and cons of very simple plans versus detailed plans

Pros & Cons of Very Simple Vs Very Planned Network

Write a 3-5 page report that discusses the pros and cons of very simple plans versus detailed plans, although the standards mandate very specific requirements for the plans that add a level of complexity.

Summary paragraph/abstract at the beginning of the report.
Conclusion at the end of the report.
Include at least 3-5 professional references.
Include all references (books, web sites, etc.) where you collected your information.

Compare and contrast public and in-house cas

Case Study: Public Key Infrastructure

Suppose you are the Information Security Director at a small software company. The organization currently utilizes a Microsoft Server 2012 Active Directory domain administered by your information security team. Mostly software developers and a relatively small number of administrative personnel comprise the remainder of the organization. You have convinced business unit leaders that it would be in the best interest of the company to use a public key infrastructure (PKI) in order to provide a framework that fosters confidentiality, integrity, authentication, and nonrepudiation. Email clients, virtual private network (VPN) products, Web server components, and domain controllers would utilize digital certificates issued by the certificate authority (CA). Additionally, the company would use digital certificates to sign software developed by the company in order to demonstrate software authenticity to the customer.

Write a two to three page paper in which you:

1. Analyze the fundamentals of PKI, and determine the primary ways in which its features and functions could benefit your organization and its information security department.

2. Propose one way in which the PKI could assist in the process of signing the company’s software, and explain the main reason why a customer could then believe that software to be authentic.

3. Compare and contrast public and in-house CAs. Include the positive and negative characteristics of each type of certificate authority, and provide a sound recommendation of and a justification for which you would consider implementing within your organization. Explain your rationale.

4. Use at least three quality resources in this assignment (no more than 2-3 years old) from material outside the textbook. Note: Wikipedia and similar Websites do not qualify as quality resources.

Your assignment must follow these formatting requirements:

• Be typed, double spaced, using Times New Roman font (size 12), with one-inch margins on all sides; citations and references must follow APA or school-specific format. Check with your professor for any additional instructions.

• Include a cover page containing the title of the assignment, the student’s name, the professor’s name, the course title, and the date. The cover page and the reference page are not included in the required assignment page length.

Examine two advantages of hardware and software vpns

Assignment

Please respond to the following questions with 2-3 paragraphs each. Thanks

• SouthWall is a firewall application. Examine the SouthWall fire application and one additional firewall application. List and discuss three advantages and three disadvantages of the SouthWall firewall application and the one additional firewall application that you chose. Select and explain which is superior to the other. Provide a rationale for your response.

• Select and examine two VPN appliances. List and describe three advantages and three disadvantages of each of the two VPN appliances Select and explain which is superior to the other. Provide a rationale for your response.

• Examine two advantages of hardware VPNs and two advantages of software VPNs. Select the type of VPN (hardware or software) that you consider the better of the two. Provide a rationale for your response.

• Examine and explain the two advantages and two disadvantages for three types of protocol used in VPNs. Select the one type of protocol that you would recommend to be used for a VPN. Provide a rationale for your response.

Prepare analysis of the interconnectedness of cybersecurity

Large Individual Paper Assignment

There is one large individual assignment in the course that must address one of the following topics.

The paper length must be between 18-20 pages and the assignment is due at the end of Week 11.

The student will either:

1) Prepare a paper highlighting the threat that China poses to the United States as regards Cyberwar and theft of Intellectual Property (IP). The student should identify the key issues and recommend an effective strategy for US policy makers.

2) Prepare an analysis of the interconnectedness of cybersecurity, global peace, and the pursuit of commerce. The student should incorporate global ethical, political, social and cultural perspectives in the analysis of the interconnectedness of cybersecurity to society and the pursuit of commerce.

Prepare your paper in Word format.

The citations and the reference list in the paper should be formatted in accordance with APA 6th edition guidelines. References, title page, and table of contents are NOT included in the page count.

Before you submit your paper, you will need to run your assignment through Turnitin.com and receive an originality report.

Explain importance of explicit enterprise security policies

Write a cumulative 10- to 12-page paper incorporating your prior work. Solve the design problems of your Virtual Organization. Illustrate all network design using Microsoft® Visio®.

Address the following in your paper:

· Include a final network design.

· Include a timeline for the project.

· Explain the design approach and rationale.

· Analyze the detailed design.

· Prove that the design meets the data rate requirements.

· Analyze the existing security situation in the organization.

· Identify the predominant electronic and physical threats to communications networks.

· Explain the importance of explicit enterprise security policies and procedures.

· Describe potential threat detection and protection techniques.

· Explain the importance of explicit enterprise security policies and procedures.

· Describe how firewalls mitigate some network attack scenarios.

· Describe common security concerns inherent to wired, wireless, and mobile networking.

· Design a security hardware and software environment that will protect the organization.

Evaluate the benefits of upgrading software

When you are confident that you have met all requirements for this assessment task, upload your file using Study Smart for marking.

Make sure your work follows the style guide and naming conventions presented in the Style Guide document available in the Learning and Study Support section of Study Smart.

As a member of Small Business Intranet’s task management group, you have successfully completed a basic domain controller in Assessment Task using Windows 2003/2008 Server. This server is to be used as an evaluation tool to help management decide the best possible replacement for the company’s existing domain controller. If you have not completed Assessment Task, please contact your facilitator for further instructions.

This assessment requires you to continue refining the domain controller created in Assessment Task 1. In order to fully evaluate the benefits of a domain controller in Windows 2003/2008, you will be asked to configure the domain controller with the needs of Small Business Intranet, in terms of application software, usability and security.

Before starting this process, please ensure that you have a complete backup (ghost image etc.) of your domain controller. The Windows 2003 or 2008 server will be referred to as a Windows 200X server in the following sections.

Resources you will need:

• Computer capable of running Windows 200X server and operating system software. It should be set up as a Windows 200X server configured with Active Directory, DNS, DHCP and Terminal Services (Administration mode). The server build from Assessment Task 1 is preferable.

• Network cards, cables and modem (for internet access).

• Computer capable of running Windows 2000 Professional or XP Professional and operating system software.

• Windows 200X build disk and service pack 1 available from Martin College.

• Norton’s ghost (or similar product) to enable you to regularly backup your system. (Not available from Martin College.)

• Windows 200X server text (your choice) and internet access.

You will need to complete the following tasks:

1. Research client requirements – application software

This task allows you to demonstrate your ability to examine a business’ requirements for application software and recommend appropriate software solutions.

Small Business Intranet is suffering from the use of an out-dated application software package. Office 95 is no longer supported by Microsoft and cannot handle new data types such as embedded video or web content. Its ability to transfer data to other applications is also limited. Management has requested information about what recommendations you have for a new replacement application software. It should include word processing, spreadsheet, database and presentation software. They would like to add assessment management software to the network in any software upgrade.

You are to:

• Research the requirements of Small Business Intranet for an application software suite. Small Business Intranet currently uses Microsoft Office 95. All information regarding Small Business Intranet’s current system requirements can be extrapolated from WITSIM IT operational plan.

• Evaluate two possible replacement packages, one of which should be an upgrade to the current version of Microsoft Office.

• Evaluate the benefits of upgrading software as opposed to starting with a new produce line.

• Create a report containing your evaluation. This should have an overview of the purpose of the report, a brief (one page each) summary of the two best current application software packages and a recommendation as to which would be best suited for Small Business Intranet.

Additional information may be attached as appendices to the report. The report should include details related to the package’s cost, supplier, after sales support (and cost) and the installation requirements for the host computer.

2. Corporate purchasing procedures – purchase orders

This task allows you to demonstrate your ability to research the licensing and purchase details of a software package(s).

You are to:

• Select the most appropriate software reseller to source the application suite recommended in task 1.

• Investigate what licences are available and which is the most appropriate licence for the software.

• Price the total software purchase cost for Small Business Intranet.

• Create a memo detailing this information and requesting approval for the purchase to proceed.

• Create a purchase order that follows the purchasing guidelines and procedures in Small Business Intranet’s IT Operational Plan. The purchase order must follow the Small Business Intranet procedures related to purchasing items.

3. System utilities – system monitor

This task allows you to demonstrate your ability to use system monitoring tools to determine the system load of business processes.

You are to:

• Install the network monitoring service on your domain controller. Alternatively, many third party software products exists that will capture the performance of the host computer under working conditions.

4. Software deployment – planning

This task allows you to demonstrate your ability to research, plan and document impending system changes based upon an approved system change request.

You have received authorisation for the deployment of the new application software package(s). The authorisation requires you to make every attempt to minimise the impact of the software deployment on the staff.

You are to:

• Examine the application software package to see what tools are supplied by the manufacturer to support the remote installation of application software across a network.

• Examine your operating system for tools which support the remote installation of application software across the network.

• Examine any third-party software distribution tools which support the remote installation of application software across the network.

• Determine the best method for deploying the application software package across the network.

• Determine the best method for restoring the system in the event of deployment failure.

• Document your findings about the most appropriate distribution method in a memo, including your justification and information resources.

5. Software deployment – implementation

This task allows you to demonstrate your ability to deploy software over a network with minimal disruption to clients.

You are to:

• Using the deployment strategy decided on in task 4, prepare a procedure for the deployment of software across the Small Business Intranet network. This procedure must include actions to be taken to restore the current configuration should the deployment fail.

• Using the test unit OU and test user account in your Active Directory structure from Assessment Task 1, deploy the software according to your procedure.

• Test the installation by logging in as the test user.

• While installing, record the time taken, network traffic generated and server CPU utilisation during the installation process for the test user.

• Using the resource information gathered from the single user installation, determine the system’s capacity to deploy this software with minimal impact upon other users. This information can then be used to estimate the network resource requirements of rolling out this software to the company’s employees.

• Produce a memo recommending a software deployment schedule for the entire company for both the client operating installation and application software deployment. It should state any bandwidth, server utilisation and time implications.

6. User training – application software

This task allows you to demonstrate your ability to research and recommend appropriate staff training for new technologies.

You are to:

• Research the most appropriate update training program for employees of Small Business Intranet who need to update their skills for the new software package.

• Identify the most appropriate and cost effective provider of the training program.

• Design an evaluation questionnaire that could be completed by staff members at the end of any training program. Information from this could be used to evaluate the effectiveness of the training package.

• Produce a memo outlining your training recommendations, complete with information on the training program, the preferred training supplier and the expected cost of the program.

7. Technical training and documentation – change management procedure for software deployment

This task allows you to demonstrate your ability to manage, inform and demonstrate system changes.

You are to:

• Produce a small memo/email alerting users to the pending software deployment and the procedures they are required to follow during the installation.

• Document the software deployment procedure for other technical IT staff to follow during the companywide software deployment.

• Demonstrate the deployment procedure for other technical IT staff who may have to implement this in the future.

8. User configuration – user account restrictions

This task allows you to demonstrate your ability to ensure that user accounts meet business security requirements.

You are to:

• Ensure that the test user account meets the requirements set out in the IT Operational Plan. In particular, ensure that:

i. The test user account details match the requirements in the Network Security – User Accounts section. ii. The account’s roaming profile matches the requirements in the Client Computer Configuration section. iii. The group policy for the test OU matches the requirements in the Network Security – User Accounts section. iv. The login script for the Test OU matches the requirements in the Network Security – Login Scripts section.

• Modify the default user profile to hold a copy of the test user profile, which should match the requirements of Small Business Intranet. To test that it works, create a new user who should inherit the profile.

• Enable system wide auditing of Logon events as required by the Network Security – User Accounts section of the IT Operational Plan.

• Enable encryption of data on the test user’s home folder.

9. Group policy – user access restrictions

This task allows you to demonstrate your ability to create group policy objects which limit the users’ access to the system according to the employers requirements.

You are to create a group policy for the test OU that:

• Redirects users’ My Documents folder to their home directory on the server for all members of the OU.

• Hides the control panel and prevents browsing the network through My Network Places for all members of the OU.

Test this policy using the test user account created in Assessment Task 1. When satisfied, apply to the Administration and Accounting OUs only.

10. Operating system security – security analysis

This task allows you to demonstrate your ability to access independent security analysis tools to evaluate equipment in the network.

You are to:

• Obtain Microsoft documentation on default NTFS permissions, security groups and/or group policies for your operating system version. This can be accessed from the site http://support.microsoft.com/gp/hublist by selecting the appropriate operating system. Search the site for the required information.

• Run/download OS vendor security diagnosis tools such as Microsoft Baseline Security Analyser (MSBA) available from http://www.microsoft.com/technet/default.asp.

• Run/download third party security diagnosis tools which examine the security settings of your server. This may include http://scan.sygate.com/. Check your system against a number of such third party security checks.

• Write a brief memo summarising to management any updates that your server would require.

11. Operating system security – upgrades

This task allows you to demonstrate your ability to update your system’s security, based upon the manufacturer’s recommendations.

You are to:

• Solve any problems with your domain controller, raised in your memo (task 10). This may involve the modification of group policies, user accounts or the installation of the service packs. Document all changes made for future reference. Rerun the MSBA tool to view the effect of these changes.

• Identify the latest security patches for Windows 2008 server from the Microsoft site at http://windowsupdate.microsoft.com or alternatively, visit the Microsoft download centre. Record the names and sizes of these patches PRIOR to installing them.

• Configure your server to automatically update from the internet or other update source.

12. Demonstration – presentation

Demonstrate the work done in this assessment to your facilitator and other students. This demonstration should consist of:

• A practical demonstration of work done during each of the tasks completed in the assessment.

• A presentation of the main security weaknesses of your domain controller (task 10) and the corrective action taken to address each issue task.

The presentation itself is not assessable, but the quality of your domain controller configuration and your depth of knowledge will contribute to the marks allocated for each task.