Name: Jennifer Johnson
Assignment: Chapter 2 Review
Class: CS-2713
|Question|Answer|Page #|
1|Why is information security a management problem? What can management do that technology cannot?|Information security is a management problem because mangers have to enforce the policy. Management can make sure polices are implemented, Technology can’t make people do anything. |41|
2|Why is data the most important asset an organization possesses? What other assets in the organization require protection?|Data is the most important asset because without it an organization loses its record of transactions or ability to deliver value to its customers. Another asset that requires protection is technology.|42|
3|Which management groups are responsible for implementing information security to protect the organization’s ability to function?|The management groups that are responsible for implementing Info Security are general management and IT management.|41|
4|Has the implementation of networking technology created more or less risk for businesses that use information technology? Why?|The implementation of networking technology has created more risk for businesses that use information technology because business networks are now connected to the internet and other networks external to the organization. This has made it easier for people to gain unauthorized access to the organization’s networks.||
5|What is information extortion? Describe how such an attack can cause losses, using an example not found in the text.|Information extortion is taking information that does not belong to you and trying to sell it back to the original owner. It is like kidnapping for ransom except it is not a person they took.|60|
6|Why do employees constitute one of the greatest threats to information security?|Employees constitute the greatest threat because they are closest to the organizational data and they use it in their work every day. Employees can leave classified information out or make errors that compromise the security.|59|
7|What measures can individuals take to protect against shoulder surfing?|People can take these steps to help protect from shoulder surfing; Be aware of who is around when accessing confidential information - limit the number of times you access confidential information- Avoid accessing confidential information while others are present.|52|
8|How has the perception of the hacker changed over recent years? What is the profile of a hacker today?|Hackers have become older and gender does not matter in recent years. Today’s hacker profile is Age 12-60, male or female with varying levels of tech skills, and may be internal or external.|52-53|
9|What is the difference between a skilled hacker and an unskilled hacker? How does the protection of each differ?|A skilled hacker develop software script and program exploits used by the unskilled hacker. The protection of each differ by |53|
10|What are the various types of malware? How do worms differ from viruses? Do trojan horses carry viruses or worms?|Different types of malware are Viruses, worms, Trojan horses, logic bombs, and backdoors. A worm and a virus can replicate itself but a worm is typically by its self. A Trojan horses can be a worm or a virus.|46|
11|Why does polymorphism cause greater concern than traditional malware? How does it affect detection?|Polymorphism is a bigger concern because it changes over time making it more difficult to detect.|49-50|
12|What is the most common form of violation of intellectual property? How does an organization protect against it? What agencies fight it?|The most common violation of intellectual property is software piracy. An organization can use a license agreement, online registration, copyright codes, watermarks, and embedded code to protect against software piracy. Two agencies that are helping fight are SIIA and the BSA.|45-46|
13|What are the various types of force majeure? Which type might be of greatest concern to an organization in Las Vegas? Oklahoma City? Miami? LA?|Various types of majeure (force of nature) are hurricane, tornado, earth quake, fire land slide, lightening, electrostatic discharge, dust contamination and tsunami. Las Vegas would be more likely to have dust contamination, Oklahoma City a tornado, Miami a hurricane, and LA a earthquake.|56-59|
14|How does technological obsolescence constitute a threat to information security? How can an organization protect against it?| Technological obsolescence occurs when technology becomes outdated, and results in an increased threat. Proper planning is the best way to fight it, outdated technologies must be replaced in a timely fashion.|65|
15|Does the intellectual property owned by an organization usually have value? If so, how can attackers threaten that value? |Intellectual Property has value, attackers can threaten that value by redistributing pirated software. |45|
16|What are the types of password attacks? What can an admin do to prevent them?|The types of password attacks are brute force, password crack, and dictionary. To guard against these attacks admin can adopt the manufactures security practice, and disallow passwords during the reset process.|67|
17|What is the difference between a DOS and a DDOS? Which is potentially more devastating? Why?|DOS attacks are a single user sending a large number of connections in a attempt to overwhelm a target server. DDOS is when many users (or many compromised systems) simultaneously perform a DOS attack. The DDOS is more dangerous because unlike a DOS there is no single user you can block, no easy way to overcome it.|67-68|
18|For a sniffer attack to succeed, what must the attacker do? How can an attacker gain access to a network to use the sniffer system?|For a sniffer attack to The attacker must first gain access to a network to install the sniffer. Usually this is done using social engineering to get into the building to plant a physical sniffer device.|70|
19|What methods does a social engineering hacker can attempt to gain information about a user's login and password? How would this type of attack differ if it were targeted towards administrators’ assistant versus a data entry clerk?|One of the more common methods of social engineering is roleplaying (like a IT tech) to gain access to passwords and login info. This attack would be different they were attacking an admin’s assistant because they would be more apt to ask questions then a data clerk.|70-73|
20|What is a buffer overflow and how is it used against a webserver?|Buffer over flow is an application error that occurs when more data is sent to a buffer then it can handle. Buffer overflow on a webserver may allow an attacker to run executable code on the webserver either manipulating files directly or creating a backdoor for later use.|76|