...Unit 4 Discussion 1: Compromising an Online System Learning Objectives and Outcomes * You will be able to explore how a Linux system can get compromised. * You will examine ways in which a well-secured Linux filesystem can mitigate risks. Assignment Requirements The Apache Software Foundation (ASF) is a reputable open source foundation that has a history of developing and maintaining many open source products, including the Apache Web Server. In April 2010, the ASF discovered that their server hosting issue-tracking software was “hacked.” You can read a report on the incident on the following Web link: * https://blogs.apache.org/infra/entry/apache_org_04_09_2010 This report documents how a vulnerability was exploited, which solutions worked, which didn't work, and the measures planned by the Apache Infrastructure Team to mitigate future risks. Security is a layered process. Although the hackers took advantage of a vulnerable third-party Web application to gain root access to ASF’s Linux infrastructure, you need to focus on the layers of security that worked and failed on the Linux infrastructure, and how this vulnerability could have been avoided with a more secure Linux server. Discuss how the hackers took advantage of the JIRA daemon. What role did Pluggable Authentication Modules (PAM) play in this process? What are the security measures that you would recommend to mitigate such risks in the future? Participate in this discussion by engaging in a meaningful...
Words: 1568 - Pages: 7
...Unit 6 Discussion 1: Determining Firewall Rules Learning Objectives and Outcomes <!--[if !supportLists]--> <!--[endif]-->You will be able to explore design and firewall rules for a bastion host. <!--[if !supportLists]--> <!--[endif]-->You will examine how a bastion host allows administrators to access Samba and Secure Shell (SSH) for remotely managing a server. Assignment Requirements As the Linux system administrator of insurance company Secure All, Inc., you need to design firewall rules for the organization’s bastion host file server, which uses Samba. This server is located in the local area network (LAN) with the network address 172.16.0.0/12 and subnet 255.240.0.0. The server should also allow Web application access for its online transaction platform to mount the filesystem. The Web application resides on the Web server located in the demilitarized zone (DMZ). This server has two interface cards. One card, which is for the traffic from the DMZ firewall, is linked to the wide area network (WAN). This card’s IP address is 192.168.1.5. The other interface card has the IP address 172.16.1.5 and is linked to the LAN. Which firewall rules should be written using iptables for the server hosting Samba? Discuss and suggest firewall rules to allow administrators to remotely manage the server using SSH. Use the concept of “default deny” when designing the rules. Participate in this discussion by engaging in a meaningful debate...
Words: 922 - Pages: 4
...Alan Castro Unit 10 Discussion Incident Response Strategies What are the effective responses to a security breach? The effective responses to a security breach starts with being prepared for one before it happens. Having a checklist to follow in case a security breach happens allows anyone who is taking care of the incident to know what steps to take without wasting too much time thinking of what to do. Once a security breach has occurred, quick reaction by the IT team is essential for an effective response. Firstly the IT Team must secure all the critical devices on the network. Any devices that are immediately known to be compromised must be isolated. The IT team should also inform all users via email to instruct them what steps to take to assist the IT Team in effectively taking care of the incident. Which actions would you recommend for each phase? Preparation – I would recommend for the preparation phase that before any incident occurs, that there should be quick reaction checklist for all the possible security breaches and let the IT Team know where to access these checklist and how to use them beforehand. I would also suggest possible practicing using the checklists. Detection – Detection of a security breach can be done through the use of IPS and IDS. Also utilizing tools that monitors all the network traffic and checking the security logs to spot any possible anomalies which could possible point to a security breach. Containment – Once a security breach...
Words: 500 - Pages: 2
...Unit 2 Discussion 1: Identifying Layers of Access Control in Linux Learning Objectives and Outcomes * You will be able to identify various layers of access control in a Linux server environment. * You will make security recommendations using different layers of access control. Assignment Requirements Really Cheap Used Computers, Inc. is an online seller of old school computers. The organization’s e-commerce Web site runs on a Linux server. The server is located at the organization’s local office in Boston, Massachusetts. The company has experienced tremendous growth and has hired you as the new security analyst. You access the server and find that there are virtually no layers of security other than the passwords set for user accounts. Discuss at least three layers of access control that can be put in place on this server to create a more secure environment. Rationalize whether the given scenario represents discretionary access control (DAC) or mandatory access control (MAC). Participate in this discussion by engaging in a meaningful debate regarding your choices of the three layers of access control in Linux. You must defend your choices with a valid rationale. Summarize your thoughts in a Word document and submit it to your instructor. Required Resources None Submission Requirements * Format: Microsoft Word * Font: Arial, Size 12, Double-Space * Citation Style: Chicago Manual of Style * Length: 1–2 pages * Due By:Unit 2 Assessment Checklist ...
Words: 568 - Pages: 3
...Unit 8 Discussion 1: Using Community and Vendor Support for Managing Software The pros and cons of Linux support provided by the open-source versus by vendors should be looked at with the strengths of each, while assessing your own needs. To evaluate an open-source community here are a few things to consider: * How large is the community? It is important to look at the number of developers and contributors to the code base, as well as user groups and events based around the specified needs, and are there training resources available? * How frequently are new releases put out? Success comes from momentum and innovation, so look for communities that can put out important and well planned releases often. * How advanced is this community? Look to partner with a community that has intelligent, motivated and innovative plans that are the same as you would. You want to make sure that the community is full of cutting-edge technologists challenging each other for mutual technical respect. * How well does the community support its users? Open-source communities are supported primarily by a core community of developers and users through online messaging, making the helpfulness and responsiveness of that community a key concern. There are reasons many organizations pay for vendor-provided software and support, including: * Ease of getting started – Organizations that don’t already have experience with open-source projects often find commercial vendors a less-daunting...
Words: 635 - Pages: 3
...TO: Professor Tanae Williams FROM: Raymond Lee DATE: May 1, 2012 SUBJECT: Financial Statement Analysis - Discussion I would imagine that the stakeholders in this case are Jack McClintock; President of McClintock Industries, Jeremy Phelps; Public Relations Director, Myself; Controller of McClintock Industries, and all of the stockholders of McClintock Industries, and any potential investors in McClintock Industries. President McClintock’s actions are unethical; the choice to only report the positive facts instead of the full truth is just as bad as covering up. For instance, no mention is made that the debt to total assets ratio has increased from 35% to 55%, that inventories are up 89%, and that while the current ratio improved, the acid-test ratio fell from 1:1 to 0.5:1 Weygandt, J., Kimmel, P., & Kieso, D. ,2011). So by only reporting what he chooses, President McClintock has left himself open for scrutiny in the future. As the Controller it is my responsibility to speak to President McClintock and let him know that although the report is correct, the presentation is wrong; plus I feel it is unethical to report only the positives without showing the negatives. As for Jeremy Phelps; he does have a responsibility to report what is given to him, but he has to know that he is still responsible for delivering the message and has to believe in it for it to be a sell to future investors. References Weygandt, J., Kimmel...
Words: 256 - Pages: 2
...Alex Arovits 2/17/2015 When looking at Bureaucratic systems, there are four major steps that take place. Those major steps are: setting performance standards, measuring performance, comparing performance against the standards and determining deviations, and taking action to correct problems and reinforce successes (Bateman 328). In the Sandwich Blitz business, there is a very good example of how these four steps need to be taken into action. In the Sandwich Blitz organization a problem arose that an employee was writing down hours that were not actually worked. If we go through the four steps of a bureaucratic system setting performance standards would allow for these problems to not arise. If Dalman and Lei set performance standards, an employee would know lying would not be accepted. Setting a performance standard could be as simple as stating an employee must only write hours down that are worked. The second step blends in with the first. If a rule or expectation is written down, measuring performance is making sure the employees are sticking to these expectations and rules. This runs into the third step, if this rule is broken it could then state that if a person is not to do this my may be punished in a certain way. Lastly, the fourth step blends in all previous three steps and allows for correct punishment to be taken into place and make sure all employees know breaking the rules is unacceptable. If Dalman and Lei were to implement these steps into their business...
Words: 306 - Pages: 2
...Ok, for the sake of this Discussion Board our Team have composed a Defense Strategy for Westboro Church Members. Since we are slightly using the Snyder v. Phelphs case as a foundation to show that the Westboro Members were within their First Amendment rights when picketing a funeral, being creative seemed like a good idea. As far as being creative we changed the names to match our names. When first thinking of what kind of questions to ask the question too truly to consider are the issues at hand. The first issue being considered is looking at the protest without the conduct of the Westboro Church Members is protected under the First Amendment. This means to ensure the protest happened on public property, is of public issue, and was of peaceful assembly. The following questions and possible answers would support the defense that the members were within their First Amendment right. Could you recall for me what happened on August 22, 2010? Client1: Sure, August 22, 2010 was the day some of my family and church members picketed a funeral of some soldier. It was pretty much like any other day for us. How exactly did your group conduct your protest? Client1: Well, it wasn't fancy or anything but we were across the street from the church and graveyard with our signs. It was a darn shame that some cars were blocking us. Could you restate the exact location you were standing? Client 1: The exact location had to have been at least 1,000 ft. BECAUSE we weren't close...
Words: 887 - Pages: 4
...• Explain why the demand for the good or service provided by a firm is elastic or inelastic. How does the elastic or inelastic demand influence pricing decisions by the firm to maximize profit? What are the impacts of elastic demand and inelastic demand on total revenue? McConnell, Brue & Flynn (2014), talk about the demand law, in which consumers will tend to buy the product with the cheaper price. So to understand the response of consumer to a price change, we need to measure its price elasticity of demand. Price elasticity helps a firm or business to understand how changes in price of a product will impact the total sales of the product. This allows us to determine the prices of different products that will yield maximum profit. Elastic Demand: if the percentage change in price of a product causes a larger percentage change in the quantity demanded. The types of services in this category are normally that of luxury, where customers can live without buying them, should a price increase occur. Inelastic Demand: Is the opposite, were a change in price causes a lesser percentage change in demand. The types of services or products that would normally fall under this category would be those of necessity. So regardless if a price hike, the consumer will still buy the service or product. Maximizing profit: For a company to maximize profits, it must either sell more or increase prices. So if a company increase the price of a product and yielded a less demand in quantity, then...
Words: 490 - Pages: 2
...2/17/2015 When looking at Bureaucratic systems, there are four major steps that take place. Those major steps are: setting performance standards, measuring performance, comparing performance against the standards and determining deviations, and taking action to correct problems and reinforce successes (Bateman 328). In the Sandwich Blitz business, there is a very good example of how these four steps need to be taken into action. In the Sandwich Blitz organization a problem arose that an employee was writing down hours that were not actually worked. If we go through the four steps of a bureaucratic system setting performance standards would allow for these problems to not arise. If Dalman and Lei set performance standards, an employee would know lying would not be accepted. Setting a performance standard could be as simple as stating an employee must only write hours down that are worked. The second step blends in with the first. If a rule or expectation is written down, measuring performance is making sure the employees are sticking to these expectations and rules. This runs into the third step, if this rule is broken it could then state that if a person is not to do this my may be punished in a certain way. Lastly, the fourth step blends in all previous three steps and allows for correct punishment to be taken into place and make sure all employees know breaking the rules is unacceptable. If Dalman and Lei were to implement these steps into their business, it would...
Words: 304 - Pages: 2
...Discussion Board Unit 3 Busn105/130 Discussion Board Unit 3 1. Competitive Environment is an environment in which businesses compete with one another. 2. Economic Environment is actions of the economy like taxes, recession, and currency rates that affects the economy and everyone in it. 3. Political Environment is the political factors and the government when conducting the risk of business in a foreign country. 4. Technological Environment is a term that refers to adapting to the environment, controlling it or even changing it. 5. Socio-Cultural Environment is a group of factors that determine how individuals and organizations should work together. 6. Demographic Variables means dividing the market into specific groups, using a segmented method. Ex: age, gender, income, religion or race etc. 7. Natural Environment is the federal and state regulations that protect the natural environment that businesses need to consider when working outdoors. Advantages and Disadvantages 1. The competitive environment has many advantages and disadvantages. The more competition hurts the sales and the other companies take some of the market shares. Competitors take away investors and investors do not like to invest in the same companies. Some companies question your products and can damage your reputation. Competition can also be a great motivation for creativity and innovation. Marketing can also increase your sales. 2. The natural environment...
Words: 298 - Pages: 2
...Discussion Board Unit 5 Busn105/1304A Discussion Board Unit 5 Describe the challenges that most businesses face as a result of continually changing technology. What is a management’s role in addressing these challenges? Businesses have a lot of challenges keeping up with the newest technologies. Every day there are newer devices that are better and faster. Take the cell phone for instance, the newer cell phones like the blackberry or Nokia Windows are now able to conduct business and are able to send in reports. Technology has come a long way from desk top to laptop to ipads and now cell phones. Even the internet has come so far from dial up. Now you have wireless. Restaurants and hotels allow you to hook up to their internet. It’s a challenge for businesses to keep up. A lot of research goes into what would be better for businesses. Managers need to make sure that the new technology is going to be useful. They need to know that the transitions are not going to affect the business but make it better than it was. It’s definitely a huge job in keeping up with the changing technology and it’s a constant change and very costly too. The managers need to make sure that all personal is also learning the newest technology. Keeping up with changing technology affects everyone in the business. What types of information technology would increase production? Using programmed machines would increase production. Also, using computers and the internet...
Words: 411 - Pages: 2
...Discussion Board Unit 5 Comp101/1401B Introduction to Computers A. Questions for weekly discussions and conversations. 1. What are some of the main applications for Object Linking and Embedding (OLE)? OLE 1.0 was released in 1990 by Microsoft; it was the evolved from the Dynamic Data Exchange. A couple of the main applications for Object Linking and Embedding are Microsoft Document and Microsoft Excel. The reason for linking and embedding is maintaining active links between two documents or embedding one type of document within another document. Object Linking is a linked component that stores the path to the original data which is often in a separate fie. Embedding is using the Paste command in a container application that can create an embedded component or an embedded item. 2. Under what circumstances might you use OLE to embed an Excel spreadsheet in a Word document? Why might OLE be better than “copy and Paste”? You might use OLE to embed an Excel spreadsheet in a Word document when you want to work within the original document. It makes it easier to be able to work with. OLE is better than copy and paste because of OLE; you can create a chart in Excel, copy it, and paste the copy into a document in Word. But you can also go beyond the copy-and-paste operation. You can link the copied chart back to its original file in Excel (the source file). Then, if you make changes to the original file, the changes are automatically made to the copied...
Words: 445 - Pages: 2
...Discussion Board Unit 4 Busn105/1304 Discussion Board Unit 4 Two Challenges that Companies Face in Ethics One of the challenges is the company’s employees. Employees sometimes don’t follow the company’s policies. This issue can be a problem in so many ways. If employees are not following the rules it can reflect on the companies’ credibility. Bad credibility can cause sale loss and the company can lose their credentials. Another issue is the companies themselves. Changes within the company and communication with the employees can interfere. If Companies don’t have all the information and they pass it to the employees it can cause an impact on the ability of the employees to do their jobs. It is very important to make the proper changes so that there aren’t conflicts within the company. Two Challenges in the Area of Social Responsibility Resource investments can be an obstacle for business owners. Convincing investors or shareholders the company is worth investing in. Companies have to educate the shareholders and explain why they would benefit from investing. Another challenge is being successful in programs within the company. Programs that flop can cause company crisis and can result in damaging the company’s reputation. What is Management’s Responsibility in Addressing These Issues? Management has the responsibility to deal with these issues in a professional manner. Researching every aspect of the issues and deciding what would be more beneficial...
Words: 320 - Pages: 2
...Discussion Board Unit 1 COMP101/1401B Introduction to Computers Discussion Board Unit 1 A. Questions for weekly discussions and conclusions 1. Which features or functions of MS Word do you find particularly useful as a college student, and why? I’m still learning how to use MS Word 2010. I have mainly used MS Document to write outlines and research papers. When I have typed up outlines, it seems to be pretty easy. It automatically gives the options between bullets, numbering or multilevel listing. I’m sure with this class I will be able to learn this program successfully. 2. Which features or functions of MS Word do you think you will use most often as a professional in your chosen discipline after graduation? I’m not sure exactly but I’m sure that I will use the tools that I will learn. As of right now I use MS Word to make flyers for advertising my business. 3. How can Word help you with producing correct APA documents? Do you think Word’s APA features are useful? Why or why not? Word has helped in many ways. The autocorrect feature is great when I misspell words or misuse sentence endings. It also lets me know if the sentence I typed is fragmented. Word is good for writing different types of papers I need. I just realized that I’m not sure if I have the right setup for APA. I have to double click to double space sentences and I have to manually indent paragraphs. Is there a way to setup MS Word for APA? B. What kind of...
Words: 417 - Pages: 2
