Essays on Malware

Operating Environment:

Hardware: Laptop or Desktop Computers Software: Windows 8.1 Professional Description: This section deals with updating anti-virus definition files, configuring real-time scanning, full system scanning, fast or quick scanning for high vulnerability areas of the system, removable media scanning, and reviewing scan results in a Windows 8.1 system. Notes, Warnings, & Restrictions: Windows Defender is a sensitive utility used to perform system security tasks. Please exercise caution when using it.

Resources (Further Reading):

https://www.microsoft.com/security/portal/definitions/adl.aspx http://www.thewindowsclub.com/update-windows-defender-manually-windows-8 Procedures: Update Anti-Virus Definition Files This procedure guides the user on how to update anti-virus definition files on a system running Windows 8.1. Search for Windows Defender from Start ...

Introduction

A small accounting firm has 20 computers and two multipurpose printers that are all connected wirelessly to a NETGEAR MR814 device that is connected to a Motorola SB3100 cable modem. The firm also has 20 employees who emails accounts are set up through the organization’s internet service provider. To access their email accounts, the staff use Microsoft Outlook and standard web browsers. The company wants to move from using wireless connection as the primary network connection but want to maintain wireless access for their customers in the building. To do this, the firm has hired a contractor to ...

Answer 1

The role of the US-CERT is to respond to cyber threats on the US industrial sectors through prevention, detection of the attacks, and responding to them before damage is done. US-CERT has some efforts towards preparedness and incident and recovery management (Reiter & Rohatgi, 2004). US-CERT have invested in analysis systems that enable them to review, research, vet, and document computers defense attributes to enable them to respond to threats that they consider to be credible. Actually, there are many threats that have been detected by the US-CERT, but only a few of them have forced rapid report because they ...

Approval Draft 1: Acceptable Use Policy.

Executive Summary. The AUP (Acceptable Use Policy) for IT systems by employees is designed to protect Red Clay Renovations, our clients, partners and the employees themselves from any sort of harm arising from the misuse of our IT systems, data and other resources. Misuse covers both inadvertent and deliberate actions. The consequences of misusing Red Clay’s system can be severe since the potential damages range from but are not limited to malware infections, data breaches, legal and financial implications due to data leakages, and productivity losses arising from network downtimes. This policy covers Red Clay’s IT systems ...

Introduction

Endpoint protection platform remains a security technology, which ensures that security of an endpoint device is superb in its functionality as a unit. The unit is composed of antivirus, personal firewall, anti-spyware, control application and intruded preventions styles, hosted in it. A number of Enterprise endpoint protection platforms (EPP) with higher advancement are combining patch, vulnerability and capabilities that manage configuration; this eventually enhances the protection. The current products of the EPP have included features of protection like data loss prevention, file and disk encryption and also device control, besides fighting malware. Higher number of EPP market focuses on ...

Introduction

Cyber security has been a primary concern for all individuals and organizations regardless of their size over the years. Security concerns are on the rise as attacks become more sophisticated and requiring complex ways of mitigating them. Although the security risks are on the rise, accomplishing daily business operations is nearly impossible without heavy reliance on information technology devices and networks. In the previous year’s security has not been a priority for factory controls and industrial systems. The key focus on security has been on personal computers and business networks. Recent attacks such as the Stuxnet has proven ...

All organizations face the risk of attacks. In today’s world businesses cannot function efficiently without computers, networks, and the internet. Increased internet connectivity has provided the companies with many incentives but along with them a tremendous increase in the level risk. Although no organization can be fully secure, we have the responsibility to mitigate all risks. The company must assess, plan and address threats and vulnerabilities through different security measures. Denial-of- Service is a major risk for the organization. The attack would aim at disrupting the service network. The attackers can send high volumes of traffic and data ...

Introduction

Digital archiving and preservation ensures that digital content remains in a format that is usable and accessible both in the present period and in the future. In the context of an organization, digital preservation is a process that involves planning, resourcing, and actual archiving using relevant technologies and applications. In the case of an institutional repository as this university, it is necessary to have policies and regulations that would guide the digital archiving and preservation program. Such policies would serve as a guide for the program while setting out its objectives. It is therefore necessary to have an evaluation ...

Hardware

• To have a complete function and properly designed maintenance system transaction devices will be required. • The bookstore will require a sale transaction device to keep a track on the book quantity and sales. For that, the use of scanners and registers will be needed. For that, computers are required with fast CPU, mouse, and keyboard.

• The maintenance crew will keep a track on book quantities and record.

• Also, a printer will be required at the bookstore to mention notices on the notice board. Estimated Capacities • A manageable storage capacity will be required by the books tracking system. For that, 8TB capacity storage will be needed. • The backup storage capacity is also ...

Introduction

Networks and computer systems are imperative to establishments in the present age. They have managed to simplify sending and receiving of information and colossal data processing over very short time periods. However, they are always facing threats and attacks from hackers. Dangers to the computing environment, network, and the database comes from everywhere. In such a high stake facility, it is critical to ensure that the main threats are identified and mitigated. The major threats can come from three areas: the physical installation, the users, and malicious attacks. The five top threats to the new network will be the ...

Threat actors

Threat actors represent elements that are wholly or partially responsible for any cyber security incidences either. There is a high potential or a likelihood of an attack to take place if the security system contains threat actors. Hackers use internal, external or partner threat actors to gain entry into a security system. Internal and Partner threat actors are more likely to allow hackers to bypass a cyber security system compared to external threat actors.

Targets

Targets refer to an organization, an entity or an individual containing the information or data that hackers want to access. The goal of the hacker ...

The informatics solutions help the organizations to manage data of the process, clients, providers, payment methods, and supply chain. The informatics solutions work as networks from centralized data centers in several countries in the world as United States of America, Canada, Ireland and Iceland. There are companies that store their data centers in their warehouses under their maintenance and surveillance, but most of the corporations of the world give that responsibility to a third company that provides the hardware, maintenance, and security service. The data centers while they are connected 24 hours and 365 days a year to the ...

Question 1

Encryption defines the process involved in encoding information such that only the authorized person or computer, with a key, can decode it. This process is based on cryptography, the all-important tool for protecting information on computers and computer systems. Encryption has been used to protect information since time immemorial, being used by the Greek that created ciphers which are codes involving transpositions or substitution of letters and numbers. One of the most common ciphers is Caesar’s cipher who shifted each alphabetical letter to the right or left by a few positions, and the Polybius square, just to mention ...

Abstract

Most organizations and businesses have reported a loss of billions of money while others have become bankrupt leading to closure. Security breaches have propagated most of these events due to the kind of technology implemented. Mobile devices and Internet connections have been on top of the list. As technology keeps on evolving, different convenient methods of communication and accessing information keeps on improving. This evolution leads to new cybercrime activities which have posed to be a significant threat to financial growth in different economic sectors. However, there have been the implementation of new methods to curb the security breaches ...

Nowadays various threats of malicious software are considered the most dangerous because of the sphere of their influence and rapid spread. One should be aware of the reasons for viruses attack as well as be ready to find ways to identify and eliminate malware. Considering worms, viruses and Trojans as the greatest challenges for security personnel, it is extremely important to be well aware of the issues and methods of solving problems connected with malware. Users as well as systems administrators should act fast when a potential infection is detected. This way, the key to dealing with malware is ...

Nowadays cryptography is critical to all organizations. Cryptography is usually used by passwords, SSL, smart cards. Cryptographic systems can provide following services: 1) authentication, 2) non-repudiation 3) confidentiality 4) integrity. For user authentication the password should be used. The politics for password selection must be applied: the password should contain at least 8 symbols, have characters, symbols and numbers, so that it would be difficult to guess it. It is more secure to use two-factor authentication, rather relying entirely on password authentication. Non-repudiation tools are needed to prove that definite user made transaction (for example, queried statement). Only appropriate ...

Part 1

Security departments are not properly educating employees on common threats. Although they are training employees, the level of knowledge is inadequate. Threats occur when employees do not know, willingly ignore or fails to follow the set protocols. Most malicious attacks such as Pishing emails target employees and exploit the individual’s interests or family. Employees are not adequately trained on the various appeals of phishing emails. Employees also pose the risk through lost or stolen BYOD which contains company data. They need to be educated on the threats of the BYOD and it may be necessary to include them ...

Part 1

In most cases, scareware applications have limited or no advantage to the user and are forced through unethical marketing methods. The implementation of ransomware and rogue security software applications presents several implications on the unknowing user. In most cases, the user is manipulated into thinking that their computer system is infected with a virus. This perception may cause an innocent user to format his or her computer thereby losing sensitive data (Binsalleeh et al., 2010). Apart from the loss of data, the users are usually manipulated to think that they require a certain software application, which they end up ...

Ruling of Judge on Julie Amero

Julie Amero was convicted of impairing morals of seventh-grade children by exposing them to pornographic imagery. Also, the computer was corrupted with spyware and DNS hijacking software. After the appeal, the judge granted a new trial. As a result of felony charged, Julie had to face 40 years in prison. On October 19th, Julie Amero faced the porn ads exploding through her web browser during the class and the issue landed her in the court. The judge after evaluating all the facts and arguments granted a new trial and Julie was given a chance to prove that she had ...

A Report on Internet Misuse in Business Firms

Business organizations rely heavily on internet enabled systems in the present age. This has necessitated unrestricted use of internet in business firms, especially in creative area like graphic designing. This report addresses the same issue in a graphic design firm where the author works as an account manager. The firm is doing well and currently has a strength of 14 employees. However the owner is concerned about the unregulated use of the internet which allows the employees to download almost anything or view inappropriate web content in the workplace. The concern of the owner is justified because the irresponsible ...

Information System Security Plan for a Bank

Executive Summary The information security plan applies to AmeriBank, its auxiliaries, employees, information, system, processes, data, and networks collectively referred to as the Bank. AmeriBank is committed to protecting critical assets and securing information to ensure the confidentiality, integrity, and availability (CIA) of the information, preventing damage to the network and systems that are vital to the bank’s business to ensure business continuity, and minimize risk to the businesses. This is achieved by implementing administrative, technical, and physical controls such as information security policies, software, and hardware controls, which have to be implemented, monitored, and improved upon to ...

Viruses, Worms, and Spyware

Computer virus is a type of malicious software that can make copies of itself and interfere into the code of other programs, system memory, boot sectors, as well as distribute their copies on a variety of communication channels, with the aim of disrupting software and hardware, deleting files, bringing useless data allocation structures, blocking the user experience or the destruction of computer hardware systems (Rittinghouse, Ransome 88).

Viruses can be divided into several types based on the principal of its functioning:

Trojans - received such name in honor of the "Trojan horse", because they have a similar principle. This type of virus is replicating its modules withing modules of programs that are being ...

VA Hospital

When considering the VA, many do not think about the technology behind the institution. By some it is considered run down and dreary, too behind the times to have the technology necessary to draw hackers out of their lairs. By others it is considered a medical stronghold for America’s soldiers. By those who work at the Veteran’s administration, they are aware that since 2009, 181 pieces of electronic medical equipment were infected with Malware, leaving them vulnerable to cyber attackers and hackers. One may ask why a cyber attacker would target the Veteran’s administration, or what ...

Introduction

Ever since the infamous attack on the World Trade Center which occurred last September 2001, terrorism is a real, pertinent, and primary cause of concern as of late. Many establishments, particularly airports, are very tantamount on upholding security so as to avoid any more terrorist attacks occurring on a wide scale such as what happened at the World Trade Center. In spite of these countermeasures, terrorist attacks are still a genuine threat at large. Despite best efforts, many countries are still experiencing terrorist attacks every now and then, thereby putting the safety of many people in danger. On a ...

Critical Infrastructure Risks and Vulnerability

Supervisory Control and Data Acquisition (SCADA) consists of control systems deployed to monitor and offer surveillance of critical equipment with manufacturing or industrial sites. Such industrial components are the critical infrastructures whose collapse due to interferences is adverse to entire sectors of the economy. Examples of such infrastructures include telecommunications, water, transport, gas and waste control. The SCADA systems collect and interpret instant information for monitoring and control of the systems. The processed data is then continuously reviewed by the administrators SCADA systems in the USA are prone to threats by outsiders from different locations around the globe (Igure, ...

Abstract

A Cybercrime is a crime performed through the use of or against digital technologies . The crimes are perpetrated using a computer, computer networks or other information communication technology. The target or victim of the crime is computers or network services. The victim may be random or specifically targets. Typically, the criminal is seeking to gain personal profit or financial gain, but may also be seeking to cause physical damage or make a statement as a form of protest. Cybercrimes began to arise with the introduction of computer systems and have grown and advanced with technology. The investigation of cybercrimes ...

What Is Cyber Security?

Cyber security refers to a body of processes and technologies that are widely meant to computers, networks, data, and programs from damage, attack, and unauthorised access. For cyber security strategies to succeed, organizations should employ coordinated strategies throughout a system.

How Cyber Security Has Changed?

Over the years, Cybersecurity has changed in the sense that they have become more industrialised and organised. In the past, adversaries were not very organised, as they could compromise an entire system to look for invaluable data and get out. However, contemporary adversaries are extremely purposeful, as most of them target particular information or dat. Furthermore, relatively more destructive ...

Answer 1

The need to have an open and distributed computing system has evoked data security managers to deal with enormous modification of data centers. Technical expertise is required in the administration of data security through the establishment of environment specific standards. Technical developments and modifications in the priorities of development and enhancement of systems models enable execution of security controls (Buckingham, 2008). Modern computing involves increasing points of access such as online reporting and shared and interactive employment of data. Evolution of multiplatform environments enables data security managers to reassess the security objectives. Also, a fully integrated systems environment has ...

ABSTRACT

Internet and online security is one of the most important issues facing not only companies and organizations but individuals as well. These concerns are driven by the fact that as the world increasingly grows to use and rely on computers, mobile devices, and the internet; cybercriminals and others including government agencies, are progressively turning their attention to means and methods of exploiting weaknesses in the system. Unfortunately, weaknesses in the system, either through the diversity of devices that are available for use or the means by which those device access the internet or go online, are growing. Despite these ...

Mitigation of cyber attacks

Introduction The development of internet technology has both advantages and limitations on global development. The major drawback associated with advancement in internet technology is the cyber crime, which is globally on a rise (Weimann, 2006). Cyber terrorism poses serious threats to the security of both private companies and government institutions. Cyber attacks involve unauthorized access to critical information as well as the infrastructure of business organizations and public institutions (Weimann, 2006). The resultant effects of cyber attacks are numerous, and they make both private and public entities more vulnerable to collapse (Osipenko, 2004, p 46). Thus, these institutions adopt ...

Data breach is the act of viewing or acquiring ones secure data or confidential information without the authorization of the authorized user and releasing it to an untrusted environment. This is mostly done by hackers who get this type of information and sell it to willing buyers. The kind of information that suffers this kind of menace is financial and personal information on credit and debit cards. When applying to get a credit or debit card, one has to offer their personal data and their account details so that the companies involved can keep track of the transactions. In ...

Introduction

The most malicious software cause damage that goes beyond simply infringing on the victims’ privacy. They usually seek to disrupt, steal and even cause some illegal actions on networks, data, and hosts. A common class of malware is the Trojan horse. Usually this class of malware tricks the user to think that it is a genuine software. Once the user interacts with it such by installing or opening it, it becomes activated and spreads into its targeted areas in the host. Trojans cause many damages, including creating a backdoor for its authors to gain access to one’s system. ...

The computer software industry is a versatile industry that lends itself to many innovative approaches to addressing technological issues. It is also among the best paying industries globally. Venturing into this industry to work with firms that have their origins in Silicon Valley such as Microsoft Corporation would be a prudent move, because of the industry’s global outreach, its rate of growth, and the insatiable demand for computer-based electronic goods that require programming at one point or another. Nevertheless, I would like to work with Oracle programming in SQL, which was an idea borne of two programmers, and ...

Smart watches

It is evident that smart watches have revolutionized the contemporary and highly technological world tremendously. However, the current use of smartphones only offer a glimpse of what smart watches can do in the future when its application is fully embraced. Consequentially, the application of smart watches is postulated to stretch beyond its current range of use that merely involves the retrieval of data from other devices and the collection of information from both external and internal sensors. Given, smart watches are invaluable wearable gadgets when it comes to the collection of personal information including blood pressure and heart rates. ...

{Author Name [first-name middle-name-initials last-name]} {Institution Affiliation [name of Author’s institute]}

Introduction

The nature of supply chain industry demands that organizations exchange amongst themselves private and sensitive data that is necessary for the movement of the underlying goods and services. A secured environment for an exchange of such data is a major concern for the cybersecurity industry managing the supply chain networks and transactions. The risk of cybersecurity in the supply chain industry is growing as attackers and hackers become more knowledgeable and have access to latest technologies using advanced a form of hardware and software tools. The malware ...

Introduction

The development of social media has affected social interactions and studies to a great extent. For instance, the advancement of technology has enabled students to use their mobile gadgets like computers, mobile phones, and tablets in numerous ways to communicate. It is possible for individuals to use the gadgets to access the social networking sites like Facebook, Twitter, and Instagram for communication purposes. Clearly, social media has both positive and negative effects towards student’s interactions and work ethics in institutions of learning. An article by Emma Reves (2015) depicted that one in four people consumes more time in ...

Implementing Cyber-Security: Best Practices at Work

Executive Summary 3

Proposed Solutions 6 Annotated Bibliography 8 Memorandum 11

References 14

Executive Summary The internet brings forth a world of social connectivity, growth and endless innovation opportunities. These have been hastened by the advent of mobile applications and computing. The sudden surge in technology has changed the way we communicate to the way we travel. While some see the beneficial side of technology, others see an opportunity to do harm. These individuals, states or groups present a cyber-threat to anyone who uses the internet. Nothing they are involved in is new; espionage is not new and so is activism ...

Technology

Introduction Anonymous hacker group gained popularity when it hacked the Church of Scientology website in 2008. The group is a structure-less organization that was created to be used by people of all genders, races, ages, nationalities, and religion, to popularize their cause. Since there is no formal membership, the group members communicate via chat rooms on the web or through previous connections2. The group’s symbol is the Guy-Fawkes mask that its supporters worldwide wear at rallies to hide their identities. The group does not have any particular goals, and its only guideline is anti-oppression and is seen to ...

Introduction

The question that comes to mind is what is Trojan horse? Trojan horse is stated to be a malicious program that looks harmless however, it is used to hack into people’s computers. The term Trojan horse is derived from Trojan War a Greek mythology (Christensson, 2006). The myth talks about the wooden horse that was pulled by the people from Troy. The legend claims that inside the horse there were Greek soldiers in it who emerged at night and seized the city. This fact can be observed from the program where a person installs the application unaware that ...

Activity 1 Answer

There are various disasters that affect the operation of small businesses in the world today. Firstly, property loss is an example of a manmade threat that affects business operations. It involves loss through theft by employees. It occurs when the business lacks enough security systems to monitor its assets. It is a big threat that may lead to the closure of the business in the long run. Proper inventory management is vital in assisting small businesses to overcome loss property threat. The business also needs to have adequate coverage that helps in determining the loss effects of the business ( ...

(Name of author)

What Cyber Espionage Groups Steal from the United States

Anything that could give United States rivals a competitive edge against the country can be stolen by cyber espionage groups. Among the things that are stolen are intellectual property, blueprints for technology concepts, and research and development advancements (Rogers, 2012). These are used to produce copies, or versions of products or develop ideas without the consent of the rightful owner of the products or the ideas. Furthermore, the people who own the rights do not receive any compensation for the use of their products or ideas. Another thing stolen by the cyber espionage groups include merger ...

Introduction

The advent of the Internet has revolutionalized the way companies and individuals conduct business, and have necessitated the proliferation of processes involved in honoring transactions through diversified payment methods. Mobile wallet denotes mobile technology that functions like a real wallet by facilitating online payments and purchases (Amoroso et al., 2012). The ease and convenience of operating a digital wallet have made the platform to attract wide spread interest. This paper is devoted to the usage of mobile wallets, their advantages and possible problems. The number of users with smartphones grows from year to year. In this case, mobile wallets ...

It is an accepted fact nowadays that our current society is largely dependent on cyber technologies. Majority of people store their personal files and information online, do transactions over the Internet, and use the World Wide Web as one of their primary forms of communication. Aside from people, many companies and economies are powered by the internet. Thus, it can be said that the internet is an indispensable part of today’s society. Despite this fact, the World Wide Web is still largely unprotected due to its status as a free and autonomous system, free from any governing bodies ...

Deliverable A: Training and Emergency Plan

Responsibility: IT Security (IT Security Officer) Deliverables: Emergency Action PlanDocument that will detail the actions that IT security staff will undertake in the event that a ransomeware attack hits our IT systems. It will include damage control and data recovery.

A script to be read over the public address system is located at the communications center.

There would be a list of responsible persons for every room or area with computers. They will immediately take pre-planned action once an attack occurs. Storage devices containing back-up data are placed near the computers to be recovered. These devices are set at read-only. Notice signs written ‘IT security situation. Please do not use until further notice. – CIO’ are ...

Q1 Answer

There are various benefits that a company enjoys by securing its systems. Firstly, securing business systems plays a great role in preventing unauthorized access to confidential business information by unauthorized people such as employees and hackers. Unsecured systems attract unauthorized entry of the systems by intruders who can use the information for their gains at the expense of the company. The introduction of modern technology raises a lot of concern on the need to keep systems secured. Cybercrime is one common act that threatens business information if its systems are not secured (Reddy, 1990). Additionally, securing systems assist a ...

{Author Name [first-name middle-name-initials last-name]} {Institution Affiliation [name of Author’s institute]}

Introduction

Integrated Distributors Incorporated (IDI) is a public trading company with office locations in Montana, Brazil, Poland, Australia, Africa, China, Japan and Hong Kong. IDI has accounts of federal governments, state governments, and major market retailers. IDI operates a fleet of trucks and has a network of sub-contractors of freight, storage and delivery. IDI has been under severe pressure because of the competitive market to improve upon its delivery, route and vehicle fleet to reduce cost and increase profit. A high-level introspection and analysis revealed with the flaws ...

(Institution Name)

Summary

Cyber laws are established to ensure safe, fair and responsible use of the internet by all the users whether they are common internet using citizens or law enforcement agencies. These laws have been designed and have been evolving ever since because of the ever expanding canvas of the ethical considerations involved in the use of the internet. The law is confined to logic and debate, and anything that has not been debated on or legislated cannot be made a law and is hence the responsibility of the user as their ethical and moral duty. The common internet ...

Network design proposal

Introduction Any organization that has its operation on many interconnected computers remains exposed to attacks from both external and internal sources. To address the issue, a computer that operates over a network requires several measures that target to minimize possible attack. The term network security is used to describe the process of bringing together the physical and software based preventive measures to prevent the underlying network infrastructure from attacks such as modification of data, misuse of infrastructure, unauthorized access and another form of attacks.

The problem statement

Analysis of security needs The university environment provides different security threats. Data that is stored ...

The information technology (IT) industry has advanced significantly over the past few decades. Technology is not only ubiquitous, but also integral to every aspect of the society. Since the devices and components related to IT are interdependent, any disruption caused to one may affect the other. Over the past years, there has been a raising concern with regards to protecting IT systems from cyber-attacks, which have increased drastically over time. Therefore, cyber security refers to the act of protecting IT systems, including computers, software, hardware and related devices from attacks, threats and disruption . It plays a significant role in ...

Incident Report Planning

Incident Response Planning Technological advancement can be beneficial to organizations, as it provides fast and easier way of dealing with every day operations. However, due to the same advancement of technologies, there are scenarios that can put the organization to circumstances that may breach essential information of the organization. Additionally, it can cause firewall breaches, malware, or virus outbreaks, and other internal cyber-attacks. These events call for the need of incident response (IR), as it is encompasses essential protocols that will address the occurrence of any security breach. The goal of this study is to present the significance of ...

ANALYSIS OF COMPUTING NEWS USING ACTOR NETWORK THEORY (ANT)

Module code Analysis of Computing News Using Actor Network Theory (ANT) Introduction Rapid development of digital information technologies has created a new dimension of relationships in the modern society. Nowadays, almost all people encounter with the IT during their daily life, either texting in their smartphone or sending an email on the laptop. At the same time, the interconnections among all actors involved in this process are the subject of constant discussions due to the difficulty of understanding the relationship between human and non-human objects. While it is hard to determine the links between these actors, as they are ...

Objective

CardConnect Company faces challenges in international management. In the recent past, the company has failed to formulate an effective strategy, structuring an appropriate organizational design and managing people in an international surrounding. The CardConnect firm is forced to handle technical, economic and social differences in the business environment. Although CardConnect has reached the global market scene, it still faces international challenges while competing with other credit card companies. CardConnect firm should take precaution to protect the Clover (POS company) because it is depicted as one of the commonly applied computing systems around the world. The hackers have targeted the ...

The DBIR 2015 is the ninth one from Verizon, and similar to the others, it highlights patterns and trends present in an aggregated incident data set. The report begins by emphasizing that there are few unique breaches in the cyber-world, and that the likelihood that an intrusion mechanism has been applied previously is relatively high. Furtherance, the DBIR informs against the presumption that victims of data breach believe they are in isolation; it is this falsehood that impedes on information sharing on attack patterns, which could collectively help prevent future intrusions. Verizon has managed to develop a classification for ...

Introduction

The modern market is full of surprises that if left to the perceived strong players and watched from a distance by junior players, would lead to monopoly and subsequently compromise product and service quality. In the past, fierce competition was a thing for big companies scrambling for a sizeable market share. It mainly involved product oriented companies. Service industry operated like a shaved sheep that has nothing to worry of when approaching a sliding ground. Today, the wave of quality products and services continue to awaken these companies that have so long enjoyed the royal nap for many years.

Process Design

...

Introduction

Zero days presents a great amount of security risk to numerous organizations across the globe. The evolution and fast embrace of information technology by organizations and business in their daily operations have resulted in more advanced attacks, threats, and vulnerabilities. Zero-day vulnerability is a flow or security loopholes that exist in software or systems that are either unknown or have no security patches (Alazab et al., 2011). In most cases, the zero-day attack takes advantages of the exploits that exist in software that was previously not known. The exploit usually takes place the moment the vulnerability in the software ...

Introduction

We live in a digital age today, where everything is accessed and stored online. One observable effect of this phenomenon is that millions of people are now using social sites like Facebook, Twitter, Instagram, Tumblr, and the like. The primary objective of people using these sites is that they can be updated on the latest news and trends, as well as to communicate with friends and loved ones. Because of this, people put personal information such as contact numbers, passwords, school and work information, e-mail and home addresses, and the like so that they can be easier to be ...

Introduction

A database refers to a collection of organized information. The purpose of this configuration is to enable the easy access, management and updating of data. Databases can be grouped according to the content types they hold. They can be full-text, bibliographic databases and images. In the field of computing, databases get classified according to their approach in terms of organization. The relational database is the most common approach. It is a tabular database whereby data gets refined so as to be organized and accessed in multiple ways. Object-oriented programming databases are congruent with data defined in object subclasses and ...

Introduction

This paper outlines the web security required for a brand new Windows PC for home use with Windows 10 operating system. The PC connects to the internet using existing internet connection. It will also detail the essential security software that is needed for the keeping the computer secure, the password policy for the home computer, the steps that one has to take to ensure that the online banking process is secure. It will also outline the guidelines that one has to discuss with a 13-year old son regarding operating a Facebook account.

Securing the home Windows PC

Home computing carries the risk of theft ...

Introduction

The advancement in computing technologies has been accompanied by increased exposure of the users to ethical violations including software threats, immorality, legal issues, confidentiality, and trust. The use of computers affects people’s decisions as well as how they make them. Computers persuade, facilitate, and enable various human cognitive processes, attitudes or processes while inhibiting and discouraging others. For example, while performing an internet search, internet search engines usually prioritize and provide information in a given order. As such, they influence what internet users see. These technological artifacts become “active mediators” because they shape people’s actions and perceptions, ...

With the gradual advancement in technology and the Internet, the need to automate most processes in a company is becoming more of a necessity than an option. The benefits of automation are ever increasing and helping the companies to save on extra expenses. However, its adoption lead to the increase in cyber crimes and attacks, where hackers steal information from companies and dump them on the internet or sell it. Due to the nature of these attacks, no one has an idea of when or who will be targeting them. Hence, large and mid-sized companies invest heavily on securing ...