Premium Essay

Security from the Ground Up & Controlling a Computer

In:

Submitted By mx66626
Words 476
Pages 2
R1. Describe the three strategies people often use to make security decisions.
There are three strategies for security that people can employ. The first is a rule-based decision. A rule based decision are established by external circumstances which security personal have deemed a threat that is anticipated and are widely accepted as guidelines to follow. The second strategy is relativistic decisions. Relativistic decisions are when you look at other security systems from other companies and you make yours one step above theirs making you a harder target thus, making those around you an easier score. You don’t have to have the best system but the strongest system around you basically. The third and final security decision is rational decisions. Rational security is the process of probing where the weak points are in your security system and identifying potential threats before they happen. (Smith, 2013)

R2. What is the hunter’s dilemma?
The hunters dilemma is when you are a few of your buddies are out in the middle of nowhere and an angry bear pops out and starts chasing you. The dilemma is that you don’t have to be faster than the bear, just not be the slowest person in the group. Basically, it is Darwinism at its finest. (Smith, 2013)

R3. Explain the role of “reasoned paranoia” in the security process.
Reasoned paranoia is a mind-set that identifies potential threats to the system. It is like what the Department of Homeland Security does where they have a think tank that is dedicated to finding what the next big attack could be and they come up with countermeasures and procedures to stop or mitigate damages. (Smith, 2013)

R4. Describe the six phases in the security process.
There are six phases in the security process: 1. Identify your assets: Basically, your hardware, services and software. (Smith, 2013) 2. Analyze the risk of attack: How the

Similar Documents

Free Essay

Security from the Ground Up & Controlling a Computer

...distrust. What is a delusion? It's a false belief held despite evidence to the contrary. Are extreme security measures acting on false threats that don't really exist? Some consider some of my security strategies a bit extreme. I call it meticulous precaution. Sure, the threat might not be real. No one may ever actually want what you have on your PC. But does that really matter? Does the threat have to be real to warrant strong security? Sometimes I have a "Password Day" where I change every password I own on the same day, just in case someone might happen to have one of my passwords. I frequently change my passwords after traveling. Its not that I think someone is trying to hack me, but I also don't think someone is not trying to hack me. That's really not the point. There's no need to analyze the threat of every situation. Just practice strong security always and you should be okay. I frequently see people posting PGP signed e-mails to security mailing lists. It's not that these people are afraid of someone actually spoofing fake comments from them on the latest CGI flaw; they just make it a practice to sign every e-mail, no matter how trivial it might be. Sure, these people are signing e-mails when it's really not important, but I doubt they get caught not signing when it is important. If you always practice the best security, you never have to worry about mediocre security. I use very long passwords for everything, even with the lamest accounts I have. I require my...

Words: 395 - Pages: 2

Premium Essay

Internal and External

...Internal and External Factors Holly Yungwirth XMGT/230 May 24, 2015 Craig Fowler The four functions of management; planning, organizing, leading, and controlling can be made or broken depending on the way in which they are ran. Although there are many concepts that can lead to these functions working or falling apart, there are some of the most important; globalization, technology, innovation, diversity, and ethics. Each other these has had a hand in leading the four functions from where they used to be to where they are now. Planning is an important step when it comes to being an effect manager. Globalization is when a company is operating worldwide, planning becomes very important when a company reaches this stage of success. If planning was nonexistent in a company that had achieved globalization, the company would not last much longer. Being able to even reach globalization without effective planning would be extremely difficult. Technology is used effectively with planning when a company is able to communicate the direction they are going in, or any information that they see fit across the internet. Technology has also helped with planning when it comes to smart phones, palm pilots, and other types of digital planners. Innovation helps the planning function by constantly updating the way in which to communicate and save data. The amount that you can save and the privacy that can be enhanced all helps planning in a business setting. Diversity is something...

Words: 1063 - Pages: 5

Premium Essay

Protecting Your Network

...probably don’t have the time or resources available to test your network infrastructure systems for all possible vulnerabilities, using every tool and method imaginable. Instead, you need to focus on tests that will produce a good overall assessment of your network. Beaver (2010), also states that when you assess your company’s network infrastructure security, you need to look at as the following: * Where devices, such as firewalls or IPS, are placed on the network and how they’re configured. * What external attackers see when they perform port scans, and how they can exploit vulnerabilities in your network hosts. * Network design, such as Internet connections, remote access capabilities, layered defenses, and placement of hosts on the network. * Interaction of installed security devices, such as firewalls, IPSes, antivirus, and so on. * What protocols are in use. * Commonly attacked ports that are unprotected. * Network host configurations. * Network monitoring and maintenance. If someone exploits a vulnerability in one of the items in the preceding list or anywhere in your network in your network’s security, bad things can happen: * A hacker can use denial of service (DoS) attack, which can take down your Internet connection or even your entire network. * A malicious employee using a network analyzer can steal confidential information in the emails and...

Words: 2274 - Pages: 10

Premium Essay

Ethical Issue

...Introduction Today’s world computer crimes are internet related, and in this area carrying out law barriers are either not well defined or most of the countries they don’t have arraign cyber crime laws. Those laws deliver the absence of the safe, the only substitute is protection against apparent warning exists is to develop ones own, depend on constitutional protection, a big range, and ethics to reduce constitutional entrance. Establishing information systems are grater speed than process of making legal and law, sometimes don’t have accorded legal safe opposite to the abuse of new technology. In some situations, what possible and what impossible is not clear, and so do not endure plenty of laws, or in most situations fair inadequate argue be allowed to proceed by abuse from assured technical system. The above conditions, which ethics adopt, it is very essential, in order to deliver reason to what would or else it’s being a very complicated case as with society. People who build and use the technology, it’s their responsible to confirm that it is applied in a responsible and ethical conduct. It just as with society does not suggest any real safe, because sustains complete social cooperation or noncooperation of developing moral code, for controlling the misuse of technology. Ethics in Security Most organizations bargain along very large space about online network, it apprehend unsocial barriers or general limit of influential. With various values and assents, organizations...

Words: 1182 - Pages: 5

Premium Essay

Intro to Security

...generally divided into two areas on grounds totaling approx. 700 acres. The firearms Training Facility (FTF) and the Drivers Training Facility (DTF) are co-located approx. 2 miles from the Academic Center. These training areas are un-fenced, and goes through public roadway and to several residential communities; closest houses being approx. . . .25 miles. The FTF facility has staff offices, classrooms, armory, weapon cleaning area and outdoor ranges which is approx. 25 miles from the FTF.  The Academic and administrative Complex (AAC) is located on the ground of the Maryland Springfield State (Mental) hospital, and hosts approx. 400 patients. AAC has offices and classrooms, computer labs, a food preparation area and dining hall, and shops. Two residential dorms for overnight guests/students, a physical training center and it include offices, classrooms, basketball gym, weight room, and swimming pool.  PSETC has 122 staff members, including DTF, FTF, and there is currently no security for PSETC. The hours of operation are 7:30 am to 5:00 pm, Monday through Friday for all facilities and it has about 450 students daily in law enforcement and correctional training programs. 150 guests/students can stay overnight; there is a contractor who prepares food, for them. The record maintenance for all administrative reports for PSETC members, approx. 30,000 personnel.  Janitorial services for the PSETC are performed by minimum security inmates from a local correctional institution, and...

Words: 3210 - Pages: 13

Premium Essay

Footnote to Youth

...* COMPUTER USE IN MILITARY Without a computer, life at UNC would be very different. For example, taking this class without a computer would be nearly impossible. Today, computers have opened up a door in the military. Computers help our military train and educate members in ways that were not possible before. In short, computers help to simplify the complexities that our military faces and allow our military to more easily assess these problems in an efficient manner. This cuts down on risks associated with training new members of the military. Also, the introduction of computers allows for a much faster training speed. * Computer Simulations There are many reasons why simulations were a perfect fit for the military, the most obvious of which is training. Training for war is a dangerous business. It is also expensive, seeing as many people need to be trained to operate many millions of dollars worth of machinery. Simulations of real life situations, and real machinery, offers the military a safer and more cost effective way to train their soldiers. Now, mistakes in training that would have previously resulted in death, injury, or huge monetary costs only result in a failure of the simulation. Therefore, it is easy to see the enormous impact computer simulations have had in the military, and the lives of the soldiers that comprise the military. * Communications Learning and communicating successfully in large groups is key to surviving on the front line in the military. Everyone...

Words: 2543 - Pages: 11

Premium Essay

Essay On Cyber Terrorism

...can accomplish without them physically being present and having the assurance of not being caught has promoted this form of terrorism all the more. In this paper an attempt has been made to understand cyber-terrorism, its various facets and also the laws and legislations in our country that inhibit such acts of terror. Introduction: The separation between the real world and virtual world is vanishing. The dependence of life on computers has increased high level. This dependency is used by the terrorists to their advantage by the use of internet. There are several types of cyber-crimes, such as Cyber Theft, Cyber Trespass, Cyber Stalking, Cyber Pornography, Cyber laundering, Cyber Theft, Cyber Vandalism and Cyber Terrorism, but the most threatening and dangerous are ones the that come under the category of the term cyber terrorism. Techno legal experts of India have been warning against growing incidences of cyber-attacks, cyber-crimes, cyber espionages, etc....

Words: 2882 - Pages: 12

Premium Essay

Aircraft Solutions

...Running head: AIRCRAFT SOLUTIONS AIRCRAFT SOLUTIONS Keller Graduate School of Management SEC 571 Principles of Information Security and Privacy Abstract An assessment of Aircraft Solutions (AS) as to what Security Vulnerabilities that might be found, two areas discussed are Hardware & Policy weakness and impact. Table of Contents Executive Summary 1 Company Overview 1 Security Vulnerabilities 2 Hardware Vulnerability …………………………………………………..…….....2 Policy Vulnerability……………………………………………………………….3 Recommended Solutions 5 Hardware Vulnerability 5 Policy Vulnerability 8 Impact on Business Processes 9 Summary 11 References 12 Executive Summary The purpose of this paper is to explore and assess computer security as it relates to Aircraft Solutions. When we talk about computer security, we mean that we are addressing one or all of the three important aspects of any computer-related system: confidentiality, integrity, and availability. One of the challenges in building a secure system is finding the right balance among the goals, which often conflict. Aircraft Solutions provides full spectrum design and implementation solutions to multiple industries including the electronics, aerospace, commercial, and defense industries. In addition to the background information presented in the course assignment, additional information on geographic layout, business process, and IT architecture were presented. With the information provided, and based on...

Words: 1902 - Pages: 8

Premium Essay

Syllabus

...CIS4361C IT Security Course Syllabus Version 1 FALL 2015 Course Description This course introduces students to information security. Security often involves social and organizational skills as well as technical understanding. In order to solve the practical security problems, we must balance real-world risks and rewards against the cost and bother of available security techniques. During this course we will use continuous process improvement to investigate these elements. Security is a very broad field. Some people may excel in the technical aspects, while others may do better in more social or process-oriented aspects. Others will successfully succeed between these poles. This course applies to all students, and help you find where you will excel. To learn a solid understanding of security technology, look must look closely at the underlying strengths and weakness of information technology itself. This requires particularly in cryptography (diagram or in mathematical notation). The book will use both, but is bias toward diagrams. Prerequisites COP2253 Java Programming or COP2830 Script Programming Student Learning Outcomes Upon completion of this course, students will be able to: * Describe the common treats of information and communication systems * Identify safeguards for securing data and systems * Gather and analyze digital evidence after a security breach * Develop an IT security program based upon a risk assessment Course Objectives ...

Words: 1802 - Pages: 8

Premium Essay

Important Functions of Planning and Organizing

...FedEx name worldwide including FedEx Express and Home Delivery, FedEx Ground, FedEx Freight, FedEx Kinko’s and Print Services, FedEx National LTL, FedEx Custom Critical, FedEx Trade Networks and FedEx Supply Chain Services. (X Facts, 2007) FedEx will produce superior financial returns for shareowners by providing high value-added supply chain, transportation, business and related information services through focused operating companies. Customer requirements will be met in the highest quality manner appropriate to each market segment served. FedEx will strive to develop mutually rewarding relationships with its employees, partners and suppliers. Safety will be the first consideration in all operations. Corporate activities will be conducted to the highest ethical and professional standards. FedEx is committed to making each customer’s experience positive as the company strives to uphold its promise “We Deliver”. Technology plays a key role in the organization’s ability to continually support customer service goals. FedEx’s technology is constantly trying to keep up with the latest technology. They are able to do this by using the 95,000 square feet of the FedEx Institute of Technology located at the University of Memphis, TN. This facility is responsible for areas of research including research centers such as the Center for Artificial Intelligence, Center of Next Generation Transportation and Cyber Security Center. This institute and...

Words: 1332 - Pages: 6

Premium Essay

Security Management

...Organizing 4 Organizational Structure 5 Division of Labor 5 Delegation of Authority 6 Departmentation 7 Informal Structure 8 Leading 8 Staffing 9 Staffing Success – More than Luck 10 Starting with Self Assessment 10 Know yourself 11 Know your business 11 Know Advantage & Disadvantage of Employment 11 Directing 12 Motivation 13 Removing Barrier of Communications 13 Facilitating Communication 16 Controlling 17 B. Management Plan (Intro) 20 Security Management Plan 22 -oOo- Ils-pwu-2012 Principles of Organization & Management: Four Functions of Management Planning means looking ahead and chalking out future courses of action to be followed. It is a preparatory step. It is a systematic activity which determines when, how and who is going to perform a specific job. Planning is a detailed programme regarding future courses of action. It is rightly said “Well plan is half done”. Therefore planning takes into consideration available & prospective human and physical resources of the organization so as to get effective co-ordination, contribution & perfect adjustment. It is the basic management function...

Words: 7522 - Pages: 31

Premium Essay

Trends in Cybercrime-"Sextortion" in Teens and Children

...Trends in Cybercrime-“Sextortion” in Teens and Children Curtis M. Styles CJA/570 April 23, 2012 Ray Gagne Trends in Cybercrime-"Sextortion" in Teens and Children Electronic methods of committing crimes in society today, is generally a new phenomenon. Modern crimes directed against the operation of computer technology itself, presents new crimes that are as new as contemporary technology. The Internet has opened a variety of new rooms for cybercriminals to commit cyber-based terrorist attempts, computer intrusions, and major cyberfrauds. Cyberextortion is an outsider threat designed to obtain money, products, or favorable considerations from an organization or individuals by using illegal means of persuasion related to computer intrusion (Cybercrime Investigation & Intelligence, 2012). This paper addresses the relatively new form of sexual exploitation called “sextortion” that has emerged on the cybersex crime scene recently, and its affect upon teenagers and children. In addition, the paper addresses the dangers of scams associated with “sextortion”, its criminal profile, law enforcement initiatives to combat “sextortion”, and the penalties for committing these types of crimes. “Sextortion” is a method of sexual exploitation in which individuals are extorted with nude images of themselves shared online over the Internet. Texting has become the modern day method of communication among teens and children, and in the case of “sextortion” these images are displayed...

Words: 2163 - Pages: 9

Free Essay

Cyber Attacks

...Breaches and Security Implications by Penetration of the Western Interconnection’s  Traffic Control System and its Effects on Modern Day Life  Year after year, a number of films are released involving computer hacking of some sort along with cyber-villainy. As entertaining as they are, the validity of these possibilities is not explored. Many of these films center revolve around a chaotic vehicle-related scene where a form of the government’s transportation grid is compromised. The breach typically involves traffic control. As the stoplights and streetlights are in a state known as gridlock, external hackers usually make the situation as unruly as humanely plausible. However, the very nature of this unfortunate scenario can only be determined once the backgrounds of the systems that control it are thoroughly studied.  The contiguous United States is divided into three main alternating current power grids.  The Western Interconnected System, or Western Interconnection, is the one applicable to those  of us living in California. The electric utilities functioning in this region are tied together,  operating at 60Hz. While the grid is currently electrically powered, research by the National  Renewable Energy Laboratory (NREL) in Colorado indicates the Western Interconnection can  handle higher levels of renewable energy, in a quest to implement alternative energy sources. If  integrated correctly, the NREL have claimed the Western Interconnection can take up to  approximately...

Words: 3038 - Pages: 13

Free Essay

Persuasive Speech

...sophomore sits in his dorm, anger bubbling and building up inside of him. His eyes scan an empty dorm that has been robbed. His expensive laptop and textbooks are no longer there. His hand fingers the gun as he thinks about the people who are responsible and how he can get revenge. Imagine being a college student, hearing of thieves that steal textbooks and computers. You think that having a legal gun offers you a sense of protection and it scares the other thieves. Now imagine yourself as a stressed out college student who has a hard time controlling your emotions. One night your future is taken away from you and your put in a difficult predicament. The gun that you own assures you that you can get revenge. College students should not be allowed to have guns on campus. Allowing a young adult to own a gun on school campus endangers the life of other students and people. As a mother, I wouldn’t want to attend a college where reckless young adults are allowed to have guns. Not all college students are mature enough to handle the responsibility and repercussions that comes with owning a gun. There is also the question of how mentally stable they are. The stress of working and college exams can cause someone to do something they might regret, and if that person is allowed to own a gun, they are not only threat to someone else, but to their selves also. If college students feel unsafe, a solution would be to improve security. As a college student, would you rather your peers own...

Words: 629 - Pages: 3

Premium Essay

Chapter 2 It Infrastructure and Support Systems

...handles the resale of fuels, including electronic invoicing and a credit module that checks and tracks a customer’s credit risk. This tracking is done by hedging large purchasing contracts by selling futures on the New York Mercantile (Commodities) Exchange. By hedging, the company protects itself against the risk of a large drop in oil prices. The software is plugged directly into the primary commodity exchanges--automating the process. Why is controlling risk important? By hedging, the company protects itself against the risk of a large drop in oil prices. The software is plugged directly into the primary commodity exchanges--automating the process. Does PetroMan provide Western Petro with a competitive advantage? Explain. Competitive advantage is defined as the strategic advantage one business entity has over its rival entities within its competitive industry. Achieving Competitive Advantage strengthens and positions a business better within the business environment The company operates on a razor-thin profit margin, so controlling purchasing costs determines profitability. Costs are controlled by using an industry-specific software platform that facilitates trading and helps schedule employees. Visit sisugrp.com/petroman.htm. Why is PetroMan referred to as an enterprise information system? An...

Words: 10310 - Pages: 42