TechExplorers

  Abstract   This paper describes the reactive measures that should be taken after hacking. As the world is moving towards wireless digital technology and everything is directly or indirectly internet connected. Hacker always trying to exploit vulnerability in the system. If Attackers attack the system one time, it is most likely that this attack will happen again with high intensity. Hence It is highly recommended that take threats seriously and understand the risk and potential loss that could occur. Because the nature and purpose of every attack are different, there is no single prevention and prescription. But we can follow certain steps as a general guideline after the attack like, identify the damage and record the details, communicate the incident to the larger group, try to limit the further damage, see the legal aspect if the breach could be reported to the law enforcement agency. In this paper we will discuss about these aspects in details. Introduction Acc...

 Ques: Consider the following scenario where we have people in the marketing department of an organization. Each member of this group needs to be provided access to a copier machine, a web server, and several folders and files. What kind of access control model best suits to handle this scenario. Explain the access control model in question using the scenario as example. Describe the advantages of this model and disadvantages if this access control model is not used using the scenario as example. [1 + 2 + 2 + 2 = 7] Ans: a) RBAC b), c) and d) Answers will be evaluated when given scenario-based explanation is provided Ques: Consider that a subject means a user or process and an object means a file or other resources that subjects can access. Describe the characteristics of per-object access control list. Using an example, explain the advantage(s) of using per-object access control list. What might be a disadvantage of using such access control list? Suggest an alternative means of h...

 Ques: Consider the following scenario where we have certain sales people in the organization. Each of the team member needs to be provided access to a printer, a file server, and several folders and files. What kind of access control model best suits to handle this scenario. Explain the access control model in question using the scenario as example. Describe the advantages of this model and disadvantages if this access control model is not used using the scenario as example. [1 + 2 + 2 + 2 = 7] Ans: a) RBAC b), c) and d) Answers will be evaluated when given scenario-based explanation is provided Ques: Consider that a subject means a user or process and an object means a file or other resources that subjects can access. Describe the characteristics of per-object access control list. Using an example, explain the advantage(s) of using per-object access control list. What might be a disadvantage of using such access control list? Suggest an alternative means of handling this particul...

 Ques: A. What is the legal impact to an organization if three pillars of Cyber Security fail? [1 + 1 * 4 = 5] B. For each of the following assets, assign a low, moderate, or high impact level for the loss of confidentiality, availability, and integrity, respectively. Justify your answers. a. Amazon store online with flash sales every week. b. Housing development bidding application website for government projects. c. Apollo App containing reports and data of patients belonging to multiple diagnostic labs. d. Horse Riding betting application, having user’s activity and bidding details. Ans: Legal Implication of data breach: the laws requiring data protection and data privacy vary from country to country, for example, If your business is U.S.-based, you have to comply with statespecific laws, as no federal privacy law is in place; also if you’re operating from the EU, you must comply with the GDPR. Scope of Penalties: The likelihood and severity of fines can vary depending on the le...

 Ques: A. Explain three-pillar approach to cyber security? [1 + 1*4 = 5] B .For each of the following assets, assign a low, moderate, or high impact level for the loss of confidentiality, availability, and integrity, respectively. Justify your answers. a. Facebook, managing public information on its Web server.Company ABC which manages law enforcement and takes care of extremely sensitive investigative information. b. Company ABC which manages law enforcement and takes care of extremely sensitive investigative information c. Institute web server which hosts department and course data. Ans: A) Three pillar approach to cyber security Confidentiality Integrity Availability  Confidentiality is roughly equivalent to Confidentiality measures are designed to prevent sensitive information from unauthorized access attempts. It is common for data to be categorized according to the amount and type of damage that could be done if it fell into the wrong hands. More or less stringent measures c...