Security Threats And Security

Submitted By kalyan-kalluri
Words: 1642
Pages: 7
Open Document
Contents
INTRODUCTION 2
THREAT PROFILE 2
Description 2
Vulnerabilities 2
Risk Assessment 3
Likelihood Estimation 3
Severity Estimation 3
Figure 1 4
Impact 5
Figure 2 5
Mitigation Strategies 5
Law 6
International Scope 6
CONCLUSION 7
REFERENCES 7

INTRODUCTION

The main theme of this assignment is about the security threats and security vulnerabilities. Countless to minor corporations are being attacked by hackers to steal data and to crash frameworks. Another bug came into lime light on the 7th of April 2014 named as "Heartbleed". On the 8th of April a Major corporation was hit by this bug stealing and draining a considerable measure of data. Hackers exploited the Heartbleed vulnerability to break into Community Health Systems (CHS) network, not as much as a day after the bug was brought into public's attention. From that point forward Heartbleed is considered as a genuine and disastrous threat.
THREAT PROFILE

Description:
Heartbleed is defects in OpenSSL, the open-source encryption standard utilized by the majority of destinations on the web that need to transmit data clients need to keep secure. It fundamentally issues you a "secure line" when you're sending an email or visiting on IM. This shortcoming permits stealing the information ensured, under ordinary conditions, by the SSL/TLS encryption used to secure the Internet. The Heartbleed bug permits anybody on the Internet to peruse the memory of the frameworks secured by the defenceless forms of the OpenSSL programming. This bargains the mystery keys used to distinguish the service providers and to scramble the traffic, the names and passwords of the clients and the actual content. This permits attackers to listen in on interchanges, steal data straightforwardly from the administrations and clients and to impersonate administrations and clients.
Vulnerabilities:
The Heartbleed bug permits anybody on the Internet to peruse the memory of the systems secured by the vulnerable versions of the OpenSSL programming. " Heartbleed" vulnerability in the OpenSSL cryptographic library was reported to the Internet community. Appropriately named as the Heartbleed bug, this vulnerability influences OpenSSL versions 1.0.1 through 1.0.1f. The Heartbleed bug is not a defect in the SSL or TLS protocols; rather, it is an imperfection in the OpenSSL execution of the TLS/DTLS heartbeat usefulness. The flaw is not related or presented by freely trusted authentications and is rather an issue with server software.The vulnerable versions has been out there for more than two years now and they have been quickly embraced by modern operating systems. A major contributing factor has been that TLS versions 1.1 and 1.2 came accessible with the first vulnerable OpenSSL variant (1.0.1) and security community has been pushing the TLS 1.2 because of prior assaults against TLS.
Risk Assessment:
Web servers can keep a great deal of information in their dynamic memory, including user names, passwords, and even the substance that user have transferred to an administration. Indeed, even credit card numbers could be hauled out of the data sitting in memory on the servers that power a few services. At the same time more regrettable even than that, the flaw has made it workable for hackers to steal encryption keys, the codes used to transform nonsense encoded data into discernable information. With encryption keys, hackers can capture encoded data moving to and from a site's servers and read it without making a secure association. This implies that unless the organizations running vulnerable servers change their keys, even future traffic will be vulnerable.
Likelihood Estimation:
The disclosure of Heartbleed, a flaw in a standout amongst the most broad encryption norms utilized online, has panicked webmasters and users alike. The bug has gone unnoticed for over two years and could have possibly given hackers access to a boundless exhibit of secure data – everything from passwords and login details to
Show More

Related Documents: Security Threats And Security

Guide: Marketing and Kellstadt Graduate School Essay

is preferred for all communication. Phone messages are not checked as frequent as emails. Place MKT555-240 as the first characters in the subject line of all emails to ensure I find your email in case it is caught by spam control) Course Objectives: 1. Develop an understanding of the fundamental concepts in Marketing. 2. Develop a functional understanding of both macro-marketing and micro-marketing environments. 3. Gain an understanding of products and services from a marketer’s and a consumer’s or…

Words 1925 - Pages 8

Strategic Analysis Red Bull Essay

Red Bull’s path to a better Blue (ocean) Austria vs. Netherlands Assignment: Strategic Analysis Red Bull Date: 22.10.2008 Class: L2BV - M-Strategy & Marketing 2/02 Lecturer: Gerbrand Rustenburg Ruud Kuijpers 1539334 Mark Mungroop 1540960 Stefan Andreas 1531650 Jason Lucas Luijckx 1538688 Executive summary A thorough analysis of energy drink producer Red Bull concludes that the company was set up to market just one product…

Words 4697 - Pages 19

Business organisation Essay

TEACHING NOTES Barclaycard Bernardo Bátiz-Lazo and Nurdilek Hacialioglu with contributions by Jarunee Wonglimpiyarat and Douglas Wood 1. INTRODUCTION The case study is concerned with how a long-standing market leader tries to maintain market share and develop its business in an industry undergoing significant change. Students are challenged to formulate, evaluate and compare a range of strategic options and to choose the best way forward for Barclaycard 2. POSITION OF THE CASE The…

Words 5287 - Pages 22

Essay on Leadership and Theory

Leadership Theory Assignment 7013BUSME- 201112- SEM2 Michelle Wood Contents Page Introduction 3 Trait Theory 3-4 Skill Theory 4 Style Theory 4-5 Situational Leadership Theory 5-6 Contingency Theory 6-7 Path Goal Leadership Theory 7-8 Leader Member Exchange Theory 8-9 Transformational and Transactional Leadership 9-10 Authentic Leadership 10-11 Conclusion 11-12 References and Bibliography 13-16…

Words 5656 - Pages 23

School To Prison Pipeline

maximum sentence of 20 years. The children were formally processed through the juvenile justice system before the case was dismissed months later. • In Denton County, Texas, a 13-year-old was asked to write a "scary" Halloween story for a class assignment. When the child wrote a story that talked about shooting up a school, he both received a passing grade by his teacher and was referred to the school principal's office. The school officials called the police, and the child spent six days in jail…

Words 7917 - Pages 32

Managing Information Technology (7th Edition) Essay

CONTENTS: CASE STUDIES CASE STUDY 1 Midsouth Chamber of Commerce (A): The Role of the Operating Manager in Information Systems CASE STUDY I-1 IMT Custom Machine Company, Inc.: Selection of an Information Technology Platform CASE STUDY I-2 VoIP2.biz, Inc.: Deciding on the Next Steps for a VoIP Supplier CASE STUDY I-3 The VoIP Adoption at Butler University CASE STUDY I-4 Supporting Mobile Health Clinics: The Children’s Health Fund of New York City CASE STUDY I-5…

Words 239873 - Pages 960