Case Study For any business ping sweeps and port scans could be a huge security threat if they continue unnoticed. Ping sweeps are performed to find end points on a network. Then a port scan is performed to find an open door into that particular end point or end points. After that anyone can find all kinds of utilities on the internet to exploit these open doors on systems and gain access to important and confidential files on the network. It’s imperative that we not only protect against these types of activities on the network, but that we also conduct them ourselves.
For my paper, I will further assess how often privacy is invaded with technological devices and how different people use this information. How can it harm society and are there any uses for this invasion of privacy. I will also look at how common it happens and assess, based on several occasions, how they have been useful or detrimental for people. I hope to further understand how technological devices can be easily used as a tool to invade people’s privacy through social media and technology and further assess whether it has any benefits. Methods First, I will approach the several ways of how technology can be used to invade privacy.
Software devices used are; firewalls, Host intrusion Prevention Systems (HIPS), and Antivirus/Malware scanners. The concept of “work factor” is an important part of layering and is defined as the amount of effort a hacker, malware, etc. must use to breach the security measures guarding our network. Obviously, the less work they have to do point out that our security isn’t good. Showing that we have strong, layered security around our data and network will convince them to go elsewhere.
k) Man-in-the-Middle Phishing This is harder to detect than many other forms of phishing. In these attacks hackers position themselves between the user and the legitimate website or system. They record the information being entered but continue to pass it on so that users' transactions are not affected. Later they can sell or use the information or credentials collected when the user is not active on the
d. denial-of-service attack (an example: smurf attack) 4. What type of device guards against an attack in which a hacker modifies the IP source address in the packets he's issuing so that the transmission appears to belong to your network? b. proxy server 5. Which of the following devices can improve performance for certain applications, in addition to enhancing network security? b. proxy server 6.
1. Does the nature of ChoicePoint’s business make them more vulnerable to this sort of attack? Which aspects? Aspect of ChoicePoint’s business | Effects on vulnerability | Basic Purpose- ChoicePoint’s mission is to provide information that is reliable through a secured internet channel to fulfill the data needs of various firms for a variety of purposes. | * Using the internet as a primary source of information transferal immediately adds to the threat of cyberattacks, in addition to the ability to commit fraud due to the fact that ChoicePoint does not physically interact with the businesses it, at least to confirm the business’ credentials | Changes in clientele- ChoicePoint’s initial customer base was based in the automobile industry, and had recently expanded into a variety of different industries for data collection and sale | * Having only been accustomed to particular industries beforehand, ChoicePoint is ill-equipped to deal with numerous small businesses and the challenges they pose, including, but not limited to, their authenticity.
Is Employee Privacy a Reasonable Right to Have? Abstract Employee monitoring is not something new, but the advancements in technology to give employers more power to “spy” on the employees. With the gowning number of employees who are technologically literate, employers need to protect themselves against the internet world. The question is how far can, or should, an employer go to protect the organization against an employee’s abuse of the internet or office products, and are the employee’s rights violated in the process? This research examines the different avenues employers take to “spy” that employees may not even know about.
9/8/2013 SEC280 Case Study Week 1 Case Study: Ping Sweeps and Port Scans Ping sweeps and port scans are not an immediate threat to the company. While it may be used by an attacker to build a profile against the company, it can also be used by an administrator to gather information about the company. Although it is not an immediate threat, it should still be monitored for potential threats because it is a common way for hackers to attempt to break a network. In the following document, more will be discussed about what ping sweeps and port scans are and how they are used to gather information about a company’s network. What is a ping sweep and how does it work?
Some examples of a threat could be an attacker looking to get into the network to steal classified data, or a protester group looking to make a cause statement. B. Hazard * A hazard is a circumstance that has the possibility of causing damage. This word is used to reference events that are non-manmade such as natural disasters, fire, power outage, etc. A hazard in and of itself, can be considered a threat if damage to assets is allowed through a vulnerability.
To be prepared for anything is hard to do but with research and good instincts a business could be and feel safe from manmade and natural disasters. Physical security can be used to fix any gaps or problems with security. They may bring in surveillance, fences, hiring someone for the front desk, security badges for employees, guards at entrances. Anything that could prevent unwanted visitors that would be the proper type of security for the business will be considered. Computer programs like firewalls and back up programs to prevent cyber crime.