Week 09 Lab 2

Hi I want to make a video presentation on this topic which should be 5 mins atleast, so need help below format:   Discussion: Misadventures of a Nation State Podcast Discuss Darknet Diaries Episode 10. Why is this a video discussion instead of a written response? It is an important skill to master to be able to present and summarize the key concepts of a complex cybersecurity incident in a short time frame. Remember that unless you are talking to other cybersecurity professionals, probably no one thinks this stuff is as interesting as you do. Instructions:  The main purpose of the video discussion assignments is to get you to dig into the main four cybersecurity frameworks and references we use in the class. Use the context of the specific security incident to explore and explain some aspects of the NIST CSF, the CIS CSCs, ACSC Strategies to Mitigate Cyber Incidents, and the MITRE ATT&CK matrix. Keep each discussion sub-topic focused and to approximately 1 minute  for a TOTAL video…

113 Spoofing attack is a) an application that captures TCP/IP data packets, which can maliciously be used to capture passwords and other data while it is in transit either within the computer or over the network. b) a situation in which one person or program successfully masquerades as another by falsifying data and thereby gaining illegitimate access. c) a toolkit for hiding the fact that a computer’s security has been compromised, is a general description of a set of programs which work to subvert control of an operating system from its legitimate (in accordance with established rules) operators. d) None of these

You've been warned about a ransomware assault known as Ryuk. Assume that each infected device will cost you $100 to restore your files. Write a one-page executive briefing (in memo style) outlining the following actions to address the danger you've identified: Find out about a security danger and/or breach and study the information you findAssess the danger and prepare a briefing for senior management (a one-page paper in Word, PDF, etc.)Write a concise summary of the main aspects of the problemWhat effect, if any, could it have on St. Eligius?Make suggestions for short-term measures to reduce the risk.Suggestions for long-term mitigation

Joe Green, a system administrator for a large corporation, is installing a new software package on Chuck Dennis’ personal computer. The company has not authorized Joe to read the employees’ e-mail, Web logs, or personal files. However, in the course of installing the software, he accidentally comes across directories containing files with suspicious-looking names. He opens a few files and discovers they contain child pornography. Joe believes possessing such images is unethical for their profession. What should he do? Acme Corporation licenses a sophisticated software package to many private and government agencies. Kyla is one of Acme's employees who works in the support organization. She mostly provides phone support but also teaches an on-site class from time to time. In fact, she created many of the instructional materials used in these classes. One day Kyla gets a call from Maria, who works for a government agency that uses Acme's software package. Maria offers to pay Kyla Php…

True or false: Intrusion Detection Systems have the ability to block threats True False Question 25 The intrusion response Trace Recording collects artifacts to determine TTP sends an alert to systems capable of SNMP communication brings in additional specialized resources opens the application trace route

You are assisting with the Investigation of a report of Bestiality, and have been accessed to conduct the digital forensic examination of the Suspect’s Cellular telephone.  You have been provided with a Warrant, which authorizes you to acquire a forensic image of all data on the phone, and then conduct a subsequent review of the data for images or videos of obscenity involving animals.  The Warrant authorizes you to search all files and folders on the phone, to include deleted files, unallocated space which may exist on the phones flash memory, and, to conduct the same examination of any SD Card the phone may contain. After conducting an acquisition of the data using the Cellebrite Physical Analyzer Mobile Device Toolkit, you realize no images or videos were extracted.  After a little research, you realize that the phone uses a Cloud Based storage system, by default, to save all pictures and videos to the users Google Drive.  In an attempt to verify this setting, you set up a digital…

You are assisting with the Investigation of a report of Bestiality, and have been accessed to conduct the digital forensic examination of the Suspect’s Cellular telephone.  You have been provided with a Warrant, which authorizes you to acquire a forensic image of all data on the phone, and then conduct a subsequent review of the data for images or videos of obscenity involving animals.  The Warrant authorizes you to search all files and folders on the phone, to include deleted files, unallocated space which may exist on the phones flash memory, and, to conduct the same examination of any SD Card the phone may contain. After conducting an acquisition of the data using the Cellebrite Physical Analyzer Mobile Device Toolkit, you realize no images or videos were extracted.  After a little research, you realize that the phone uses a Cloud Based storage system, by default, to save all pictures and videos to the users Google Drive.  In an attempt to verify this setting, you set up a digital…

You are assisting with the Investigation of a report of Bestiality, and have been accessed to conduct the digital forensic examination of the Suspect’s Cellular telephone.  You have been provided with a Warrant, which authorizes you to acquire a forensic image of all data on the phone, and then conduct a subsequent review of the data for images or videos of obscenity involving animals.  The Warrant authorizes you to search all files and folders on the phone, to include deleted files, unallocated space which may exist on the phones flash memory, and, to conduct the same examination of any SD Card the phone may contain. After conducting an acquisition of the data using the Cellebrite Physical Analyzer Mobile Device Toolkit, you realize no images or videos were extracted.  After a little research, you realize that the phone uses a Cloud Based storage system, by default, to save all pictures and videos to the users Google Drive.  In an attempt to verify this setting, you set up a digital…

Discuss the concept of end-to-end encryption in messaging apps. How does it work, and what are the benefits and limitations of implementing it?

What precisely is meant by the term "spoofing," and how may it be used to the detriment of a victim?

Make a distinction between spoofing and session hijacking. In the case that you're a web user, what are some of the countermeasures you use to protect yourself against session hijacking?

How do you think the introduction of new technologies has affected how people think about and approach internet security?

Data Security is considered a senior Management concern and responsibility. It affects every company’s operation, reputation and ultimately impacts revenue, profits, and a competitive edge. Yet many companies do not implement defenses that could help to prevent and control data breaches. In June 2012 LinkedIn a business social network site was hacked, this data breach was discovered when IT security experts discovered millions of LinkedIn passwords on a Russian underground site. The reason this happened was that the company was using outdated encryption methods and within 2 days, most passwords were cracked. What steps can a business take to keep control of its data security? What security management processes and activities in each process should a business follow to ensure they have an Information Technology Risk management strategy in place?

In October 19, 2012, HSBC servers came under a denial of service (DoS) attack which affected a number of HSBC websites around the world. The London-based banking giant said in a statement, "This denial of service attack did not affect any customer data, but did prevent customers using HSBC online services, including internet banking." a) Explain how the objective of DoS differs from other types of network attacks b) How the DoS attack is carried out? c) How the Dos attack works? d) As an expert in computer security, explain the challenges in identifying the real attacker who launched the DDOS attack against HSBC website. e) Discuss the relationship between DDOS attack and Botnet

A researcher working on a study has been aware of a problem referred to as "security breakdowns in social media," and they want to look into it more. What are the steps that he has to follow in order to complete his research? Please provide a condensed description of each step.

Describe the ways in which people's perspectives and behaviors about internet security have changed as a direct result of the development of new technologies?

TASK 01 (SHODAN)•For this assignment you will have to do some observation task on some vulnerabilities that can be exploited to attack ICS security.•Remember: ONLY OBSERVE for study purpose. UNITEN will not be responsible for your experimentation beyond the required task.Search for potential location of ICS devices•Use Shodan website•Search for location that is linked to port 102 in Malaysia•Note how many are there in Malaysia1.Find out what all those displayed information mean from the search. Explain it in your report. [5 marks]2.Use the map in SHODAN to actually find out where these location actually is. [2 marks]3.Cross check with google map if the location is actually real. List at least TWO detailed address and information found through SHODAN, [3 marks]4.Extra bonus marks: Find out other port number that might be used by ICS device and perform a search. List them out and perform the same test. Write the same report of your findings. TASK 02 (GOOGLE HACKING)•For this assignment…

Discuss the differences between symmetric and asymmetric encryption algorithms and their applications in network security.

▾ Topic 1 (Refers to Lesson #1) Discuss how the definition of privacy that is commonly used (freedom from observation) may differ from the definition of privacy from the information security perspective (freedom from unsanctioned intrusion). Topic 2 ▸ Topic 3 8 f ion_topics/2947715?module_item_id=12935597# Q Search S T Q Search entries or author G H N & 7 M Unread hp 3 K fo ↑ © E fo F11 P alt 112 C ** ļ Insert ctn E pause 10:14 10/30/20 backspace

For the Agent Tesla malware, please write a short paragraph based on the given background and website info: Agent Tesla is a RAT that targets Windows operating systems. It is available for purchase on criminal forums as Malware-as-a-Service (MaaS). It has various capabilities depending on the version purchased, including capturing keystrokes and screenshots, harvesting saved credentials from web browsers, copying clipboard data, exfiltrating victim files, and loading other malware onto the host. https://www.cisecurity.org/insights/blog/top-10-malware-december-2022   Agent Tesla is an extremely popular spyware Trojan written for the .NET framework that has been observed since 2014 with many iterations since then. It is used to steal sensitive information from a victim’s device such as user credentials, keystrokes, clipboard data, credentials from browsers, and other information. This information can then be traded or used for business intelligence or ransom. Agent Tesla is most commonly…

A researcher for a study has observed a problem referred to as "security flaws in social media" and wants to analyze it further. What steps should he take to do his research? Describe each procedure succinctly.

Conduct research on user authentication as a form of access control and compose a report on your findings.

Is there a way to protect vehicle-to-vehicle communication by using security approaches and mechanisms? * The second question is how long each security method takes to encrypt and decode a message.

Describe the security techniques used for the following situations and justify their uses: a) Separating files of one user from another b) Making data secure and hard to read by unauthorised users c) Detecting malicious files received from the Internet d) Blocking unwanted traffic trying to access a network criteria  List the names, purposes and characteristics of a range of security techniques. Justify the use of a range of security techniques in typical situations. note just listing isn’t enough. We need to know the purpose and technical details of each security technique no handwriting please

a) Alice is an employee at the Xiamen University of Technology (XUT). Recently, Alice's computer had some issues, and the IT department of XUT provided Alice with a temporary computer. While using this temporary computer, Alice notices (from the browser history, downloaded files) that the temporary computer was previously used by some other employees of XUT, and contains sensitive information such as several user's ID and passwords (stored in the browser), PowerPoint slides containing confidential employee information etc. To address the security issues discussed in this scenario, answer the below questions: i) Describe a control measure based on policy and procedures, and a control measure based on education, training and awareness. i1) Compare the control measures described above. Which of these do you think will be the most effective in this scenario? Justify your answer.

Discuss the significance of access control lists (ACLs) in network security.

1）Discusss the security aspects of gmail system

Describe the concept of end-to-end encryption in the context of secure messaging applications. How does it ensure the privacy of communication?