The Kindness Ripple A Tale of Friendship and Helping
Posts
After hacking what action one can adopts to safeguard the further attack or to recover from it.
Abstract This paper describes the reactive measures that should be taken after hacking. As the world is moving towards wireless digital technology and everything is directly or indirectly internet connected. Hacker always trying to exploit vulnerability in the system. If Attackers attack the system one time, it is most likely that this attack will happen again with high intensity. Hence It is highly recommended that take threats seriously and understand the risk and potential loss that could occur. Because the nature and purpose of every attack are different, there is no single prevention and prescription. But we can follow certain steps as a general guideline after the attack like, identify the damage and record the details, communicate the incident to the larger group, try to limit the further damage, see the legal aspect if the breach could be reported to the law enforcement agency. In this paper we will discuss about these aspects in details. Introduction Acc...
Cyber Security WILP Make Up Solution Set 2
Ques: Consider the following scenario where we have people in the marketing department of an organization. Each member of this group needs to be provided access to a copier machine, a web server, and several folders and files. What kind of access control model best suits to handle this scenario. Explain the access control model in question using the scenario as example. Describe the advantages of this model and disadvantages if this access control model is not used using the scenario as example. [1 + 2 + 2 + 2 = 7] Ans: a) RBAC b), c) and d) Answers will be evaluated when given scenario-based explanation is provided Ques: Consider that a subject means a user or process and an object means a file or other resources that subjects can access. Describe the characteristics of per-object access control list. Using an example, explain the advantage(s) of using per-object access control list. What might be a disadvantage of using such access control list? Suggest an alternative means of h...
Cyber Security WILP Make Up solution Set 1
Ques: Consider the following scenario where we have certain sales people in the organization. Each of the team member needs to be provided access to a printer, a file server, and several folders and files. What kind of access control model best suits to handle this scenario. Explain the access control model in question using the scenario as example. Describe the advantages of this model and disadvantages if this access control model is not used using the scenario as example. [1 + 2 + 2 + 2 = 7] Ans: a) RBAC b), c) and d) Answers will be evaluated when given scenario-based explanation is provided Ques: Consider that a subject means a user or process and an object means a file or other resources that subjects can access. Describe the characteristics of per-object access control list. Using an example, explain the advantage(s) of using per-object access control list. What might be a disadvantage of using such access control list? Suggest an alternative means of handling this particul...
Cyber Security Mid Sem Solution Set 2
Ques: A. What is the legal impact to an organization if three pillars of Cyber Security fail? [1 + 1 * 4 = 5] B. For each of the following assets, assign a low, moderate, or high impact level for the loss of confidentiality, availability, and integrity, respectively. Justify your answers. a. Amazon store online with flash sales every week. b. Housing development bidding application website for government projects. c. Apollo App containing reports and data of patients belonging to multiple diagnostic labs. d. Horse Riding betting application, having user’s activity and bidding details. Ans: Legal Implication of data breach: the laws requiring data protection and data privacy vary from country to country, for example, If your business is U.S.-based, you have to comply with statespecific laws, as no federal privacy law is in place; also if you’re operating from the EU, you must comply with the GDPR. Scope of Penalties: The likelihood and severity of fines can vary depending on the le...
Cyber Security WILP Solution Mid Sem
Ques: A. Explain three-pillar approach to cyber security? [1 + 1*4 = 5] B .For each of the following assets, assign a low, moderate, or high impact level for the loss of confidentiality, availability, and integrity, respectively. Justify your answers. a. Facebook, managing public information on its Web server.Company ABC which manages law enforcement and takes care of extremely sensitive investigative information. b. Company ABC which manages law enforcement and takes care of extremely sensitive investigative information c. Institute web server which hosts department and course data. Ans: A) Three pillar approach to cyber security Confidentiality Integrity Availability Confidentiality is roughly equivalent to Confidentiality measures are designed to prevent sensitive information from unauthorized access attempts. It is common for data to be categorized according to the amount and type of damage that could be done if it fell into the wrong hands. More or less stringent measures c...
Solution Software Architecture WILP
Answer key: Software Architecture Mid term WILP State the 3 main software quality attributes? Justify. There are different attributes concerning the properties of critical systems and the best methods to develop them: Performance — Availability - Dependability — Security — Modifiability — The most appropriate definitions as much as applicable to the University case study. Define the primary tactics you will use to satisfy these quality attributes Availability: Performance : Security: Exact reproduction of this diagram is discouraged. The student should really understand the real meaning of what each tactic means will get full credit. Briefly explain the strategies to protect how intruders would be protected from exporting important files through mail or Google drive Your content is stored securely When you upload a file of any type to Google Drive, it is stored securely in our wor...
Software Architecture Paper Solution
Question 1 (a) Define the pipe & filter style. [2] ● Architectural pattern for stream processing ● It consists of any number of components (filters) that transform or filter data, before passing it on via connectors (pipes) to other components. ● The filters are all working at the same time. (b) Provide the block diagram for the pipe & filter style. [4] filter pipes (c) List advantages & disadvantages of the pipe & filter style. [3] Advantages: ● Simple composition ● Reuse ● Prototype ● Easy growth & evolution ● Concurrency & parallelism Disadvantages: ● Poor performance ● Not appropriate for interaction ● Low fault tolerance threshold ● Data transformation ● Increases complexity & computation (d) Briefly describe the three variation of the pipes & filters style. [3] ● Pipelines: restricted to linear topology ● Bounded pipes: restricted the amount of data on a pipe ● Typed pipes: data on a pipe to be of an acceptable type. (e) Briefly describe a typ...