Question 1

 

Select ONE ARTICLE from the following links and summarize the reading in your own words. Your summary should be 2-3 paragraphs in length and uploaded as a TEXT DOCUMENT. Click the link above to submit your work. There is an EXAMPLE attached to show you the format requirements.

What is most important is that you use YOUR OWN WORDS to summarize the news article. It is essential that you do not copy text directly from the Internet. Plagiarism is unacceptable. You can easily avoid this by rephrasing the contents and summarizing it using your own words.

http://topics.nytimes.com/top/reference/timestopics/subjects/c/computer_security/index.html

https://www.lifewire.com/learn-how-antivirus-4102748

http://www.sans.org/newsletters/

http://news.cnet.com/security/

https://www.onlinesecurity.com/news–publications-page

http://www.esecurityplanet.com/views

http://netsecurity.about.com/

 

Question 2

 

Select ONE ARTICLE from the following links and summarize the reading in your own words. Your summary should be 2-3 paragraphs in length and uploaded as a TEXT DOCUMENT. Click the link above to submit your work. There is an EXAMPLE attached to show you the format requirements.

What is most important is that you use YOUR OWN WORDS to summarize the news article. It is essential that you do not copy text directly from the Internet. Plagiarism is unacceptable. You can easily avoid this by rephrasing the contents and summarizing it using your own words. 

http://topics.nytimes.com/top/reference/timestopics/subjects/c/computer_security/index.html

https://www.lifewire.com/learn-how-antivirus-4102748

http://www.sans.org/newsletters/

http://news.cnet.com/security/

https://www.onlinesecurity.com/news--publications-page

http://www.esecurityplanet.com/views

http://netsecurity.about.com/
https://www.techrepublic.com/

 

Question 3:

 

 

Select ONE ARTICLE from the following links and summarize the reading in your own words. Your summary should be 2-3 paragraphs in length and uploaded as a TEXT DOCUMENT. Click the link above to submit your work. There is an EXAMPLE attached to show you the format requirements.

What is most important is that you use YOUR OWN WORDS to summarize the news article. It is essential that you do not copy text directly from the Internet. Plagiarism is unacceptable. You can easily avoid this by rephrasing the contents and summarizing it using your own words. 

http://topics.nytimes.com/top/reference/timestopics/subjects/c/computer_security/index.html

https://www.lifewire.com/learn-how-antivirus-4102748

http://www.sans.org/newsletters/

http://news.cnet.com/security/

https://www.onlinesecurity.com/news–publications-page

http://www.esecurityplanet.com/views

http://netsecurity.about.com/ https://www.techrepublic.com/

 

Question 4

Compare and contrast two difference cloud computing services (Amazon Web Service and Microsoft Azure). Explain the differences and the similarities and select your choice of providers if you had to make the decision for your business. Write up a comparison on the services offered (2 pages maximum). Once again, it is essential that you use your own words (do not just copy and paste from the Internet). 

These two links may offer some additional information for this assignment but you are encouraged to use additional sources for your project/assignment.

https://aws.amazon.com/security/introduction-to-cloud-security/

https://azure.microsoft.com/en-us/

 

Question 5:

According to recent surveys, China, India, and the Philippines are the three most popular countries for IT outsourcing. Write a short paper (4-5 paragraphs) explaining what the appeal would be for US companies to outsource IT functions to these countries. You may discuss cost, labor pool, language, or possibly government support as your reasons. There are many other reasons you may choose to highlight in your paper. Be sure to use your own words.

 

Question 6:

Go online and search for information about companies that have been harmed or bankrupted by a disaster. Choose one such company and create a brief case study about it. Successful narratives will focus on the manner in which the organization was impacted, including financial losses, losses of sales, or the need for layoffs. Your assignment should be 3-4 paragraphs in length.

 

Question 7:

For this assignment, you are asked to conduct some Internet research on any malware, virus or DOS attack. Summarize your findings in 3-4 paragraphs and be sure to include a link to your reference source. Explain this occurrence in your own words (do not just copy and paste what you find on the Internet).

Include the following information:

1. Name of the Malware or Virus

2. When this incident occurred (date)

3. Impact it had or explanation of the damage it caused

4. How it was detected

5. Reference source citation

Question 8:

Some organizations prohibit workers from bringing certain kinds of devices into the workplace, such as cameras, cell phones, and USB drives. Some businesses require employees to use clear or see-through backpacks when carrying personal items. What other devices might not be allowed in certain facilities, and why would they be restricted? The video on Google’s Data Center may give you some ideas to write about for this assignment.

Your written assignment should consist of 2-3 paragraphs.

 

Question 9:

For this assignment, you are asked to locate any company privacy policy. Some of the more popular ones might include GOOGLE, APPLE, or MICROSOFT, but you may elect to review another agency. In 3- 4 paragraphs, explain what you find to be the most interesting information contained in that privacy policy. At the end of your report, please include a LINK to the policy you have reviewed.

 

Question 10:

Some common biometric techniques include:

1. Fingerprint recognition

2. Signature dynamics

3. Iris scanning

4. Retina scanning

5. Voice prints

6. Face recognition

Select one of these biometric techniques and explain the benefits and the  vulnerabilities associated with that method in 3-4 paragraphs.

 

Question 11:

In this module, you learned that random numbers (or, at least, pseudorandom numbers) are essential in cryptography, but it is extremely difficult even for powerful hardware and software to generate them. Go online and conduct research on random number generators. What are the different uses of these tools besides cryptography? How do they work? Explain your answer using your own words in 2-3 paragraphs.

 

Question 12:

Using the Internet, locate TWO companies that provide VPN services. Compare the TWO different services offered. Include their services, pricing, and make a decision which VPN service would be best for your own personal use should you decide to make the purchase in the future.

Upload your research by clicking on the BLUE LINK ABOVE Complete this assignment using WORD or another text editor that is compatible with MS WORD. Also provide web links to all sites you use to conduct your research. 

 

 

Question 13:

Law enforcement professionals and investigators use digital forensic methods to solve crimes every day. Locate one current news article that explains how investigators may have used these techniques to solve a crime. Explain the crime that was solved and the methods used to determine how the crime was committed. Some examples of crimes solved may include locating missing children, finding criminals who have fled the scene of a crime, or unsolved crimes from the past that have been solved due to the use of new techniques (such as DNA testing).

 

Your written assignment should be 3-4 paragraphs in your own words, and should include a reference citation for your source of information.

Question 14:

Select any article or link from the Internet site listed below. Summarize what you have read in 3-4 paragraphs using your own words. Submit a one-page WORD formatted document as an attachment.

https://www.independent.co.uk/topic/dark-web

 

 

Question 1:

 

· Describe the key security requirements of confidentiality, integrity, and availability.

· Describe the X.800 security architecture for OSI.

· Discuss the types of security threats and attacks that must be dealt with and give examples of the types of threats and attacks that apply to different categories of computer and network assets.

· Explain the fundamental security design principles.

· Discuss the use of attack surfaces and attack trees.

· List and briefly describe key organizations involved in cryptography standards.

 

Question 2:

 

· Present an overview of the main concepts of symmetric cryptography.

· Explain the difference between cryptanalysis and brute-force attack.

· Summarize the functionality of DES.

· Present an overview of AES.

· Explain the concepts of randomness and unpredictability with respect to random numbers.

· Understand the differences among true random number generators, pseudorandom number generators, and pseudorandom functions.

· Present an overview of stream ciphers and RC4.

· Compare and contrast ECB, CBC, CFB, and counter modes of operation.

Question 3:

 

· Define the term message authentication code.

· List and explain the requirements for a message authentication code.

· Explain why a hash function used for message authentication needs to be secured.

· Understand the differences among preimage resistant, second preimage resistant, and collision resistant properties.

· Understand the operation of SHA-512.

· Present an overview of HMAC.

· Present an overview of the basic principles of public-key cryptosystems.

· Explain the two distinct uses of public-key cryptosystems.

· Present an overview of the RSA algorithm.

· Define Diffie–Hellman key exchange.

· Understand the man-in-the-middle attack.

 

Question 4

· Understand the issues involved in the use of symmetric encryption to distribute symmetric keys.

· Give a presentation on Kerberos.

· Explain the differences between versions 4 and 5 of Kerberos.

· Understand the issues involved in the use of asymmetric encryption to distribute symmetric keys.

· List and explain the elements in an X.509 certificate.

· Present an overview of public-key infrastructure concepts.

· Understand the need for a federated identity management system.

Question 5:

 

· Discuss the principal elements of a network access control system.

· Discuss the principal network access enforcement methods.

· Present an overview of the Extensible Authentication Protocol.

· Understand the operation and role of the IEEE 802.1X Port-Based Network Access Control mechanism.

· Present an overview of cloud computing concepts.

· Understand the unique security issues related to cloud computing.

Question 6:

 

· Summarize Web security threats and Web traffic security approaches.

· Present an overview of Transport Layer Security (TLS).

· Understand the differences between Secure Sockets Layer and Transport Layer Security.

· Compare the pseudorandom function used in Transport Layer Security with those discussed earlier in the book.

· Present an overview of HTTPS (HTTP over SSL).

· Present an overview of Secure Shell (SSH).

Question 7

· Present an overview of security threats and countermeasures for wireless networks.

· Understand the unique security threats posed by the use of mobile devices with enterprise networks.

· Describe the principal elements in a mobile device security strategy.

· Understand the essential elements of the IEEE 802.11 wireless LAN standard.

· Summarize the various components of the IEEE 802.11i wireless LAN security architecture.

Question 8:

· Summarize the key functional components of the Internet mail architecture.

· Explain the basic functionality of SMTP, POP3, and IMAP.

· Explain the need for MIME as an enhancement to ordinary e-mail.

· Describe the key elements of MIME.

· Understand the functionality of S/MIME and the security threats it addresses.

· Understand the basic mechanisms of STARTTLS and its role in e-mail security.

· Understand the basic mechanisms of DANE and its role in e-mail security.

· Understand the basic mechanisms of SPF and its role in e-mail security.

· Understand the basic mechanisms of DKIM and its role in e-mail security.

· Understand the basic mechanisms of DMARC and its role in e-mail security.

Question 9:

· Present an overview of IP security (IPsec).

· Explain the difference between transport mode and tunnel mode.

· Understand the concept of security association.

· Explain the difference between the security association database and the security policy database.

· Summarize the traffic processing functions performed by IPsec for outbound packets and for inbound packets.

· Present an overview of Encapsulating Security Payload.

· Discuss the alternatives for combining security associations.

· Present an overview of Internet Key Exchange.

· Summarize the alternative cryptographic suites approved for use with IPsec.

Question 10:

· Describe three broad mechanisms malware uses to propagate.

· Understand the basic operation of viruses, worms, and trojans.

· Describe four broad categories of malware payloads.

· Understand the different threats posed by bots, spyware, and rootkits.

· Describe some malware countermeasure elements.

· Describe three locations for malware detection mechanisms.

Question 11:

· Distinguish among various types of intruder behavior patterns.

· Understand the basic principles of and requirements for intrusion detection.

· Discuss the key features of intrusion detection systems.

· Define the intrusion detection exchange format.

· Explain the purpose of honeypots.

· Explain the mechanism by which hashed passwords are used for user authentication.

· Understand the use of the Bloom filter in password management.

Question 12:

· Explain the role of firewalls as part of a computer and network security strategy.

· List the key characteristics of firewalls.

· Discuss the various basing options for firewalls.

· Understand the relative merits of various choices for firewall location and configurations.

Question 13:

· Discuss the different types of computer crime.

· Understand the types of intellectual property.

· Present an overview of key issues in the area of privacy.

· Compare and contrast various approaches to codifying computer ethics.