Nt1310 Unit 3 Assignment 1

Words: 866

Pages: 4

Open Document

Workstation
USB
This is a common attack used by attacker who has physical access to the workstation. The attacker would use what is called a USB Dumper to transfer malicious software from a flash drive to the victim’s computer. The source of this is malicious agent and this is an internal threat because the employees are allowed to download and add software to the systems. Therefore, it is easy for them to use a USB Dumper to infect the system with malware. The likelihood is medium for this to happen, because the workstations are used by investigators. However bad people work as investigators too and they can be even more dangerous. If this should happen the severity of impact would very high as the malware could potentially wipe out our system. In the scenario the pop up could be from an adware virus that was installed via a USB Dumper (OWASP Top 10, 2015). To prevent this from happening we must implement controls that will teach the associates best practices. The first control will be to educate the employees and give them real world training with the use of inoculation training. The second control will be to implement a policy have all OS patches and other software updated when they become available. Another control is to implement a policy that all the USB ports on …show more content…
This is an insecure way of getting resources and could end up making the computer vulnerable, since the software is coming from an unknown person’s computer. This is a threat in the scenario because untrained investigators routinely download and install software and plug-ins. Many of the software could be coming from peer-to-peer sites. This means that the software could have been manipulated and wrapped with virus. This is highly likely to occur since peer-to-peer software are readily available on the internet. If this should happen the impact would be devastating (OWASP Top 10,

Nt1310 Unit 3 Assignment 1

ManageEngine Desktop Central is prone to a security-bypass vulnerability related to the password-reset feature. An attacker can exploit this to reset the application’s administrator password and gain administrative privileges. On 27 March 2015, a proof of concept (PoC) exploit code was released on multiple websites such as Seclist.org and PacketStormSecurity.com. Open source research did not reveal any instances of this vulnerability in the wild. However, this does not mean that malicious actors…

Words 524 - Pages 3

Nt1310 Unit 3 Assignment 1

Brainstorming Problem - Charger- Kinetically Powered Charger - already made - need 6 hours of walking for 30 min of charge. (not efficient) ( I would have to create a better version ) Problem - cups don't fit into car cup holders - Adjustable Sized Car Cup Holder - MANY already made Problem - texting and driving - device that won’t start the car unless the phone is plugged in - auto shuts down the phone and charges it. Problem - No home music stand - desktop music stand - already made Problem -…

Words 969 - Pages 4

Nt1310 Unit 3 Assignment 1

(SOMEONE) and found the following pointers: 1. SOMEONE infrastructure allows users to join any device to their office 365 account without using multifactor confirmation. When this serves as a good time saving feature – in the case of compromised account, attacker would have easy access to register rouge devices. 2. Microsoft Office 365 is having built-in capability to enforce multifactor verification for password reset process. This feature is not utilised. 3. The password configuration…

Words 1308 - Pages 6

Nt1310 Unit 3 Assignment 1

(2019). 3. What is the difference between a'smart' and a'smart'? Additional random value: Add a random value unique to each user that is combined with their password before hashing. This adds an additional layer of security, making it more difficult for attackers…

Words 771 - Pages 4

Nt1310 Unit 3 Assignment 1

From my reference materials from Cisco and previous work history, I firmly believe that the #1 issue surrounding the deployment of a wireless network is wireless security. Specifically, passive monitoring, unauthorized access, and DoS attacks. Passive Monitoring – wireless networks are intentionally designed to propagate data throughout buildings and areas, almost always resulting in the radio signals traveling beyond the limits of the area. By default, wireless devices are configured for maximum…

Words 622 - Pages 3

Nt1310 Unit 3 Assignment 1

Youtube was created In 2005 so users could upload, share and view videos. The site quickly gained popularity and was purchased by Google in 2006 for 1.65 billion dollars. As Youtube grew its impact became more significant. The platform allowed anyone to create content no matter your prior popularity. Content creators could find their audience and grow. Some of Youtube's competitors consist of; Vimeo, Daily Motion, and Wistia just to name a few. Youtube obviously isn't the only video sharing site…

Words 565 - Pages 3

Nt1310 Unit 3 Assignment 1

three layers to be specific: 1. Presentation Tier 2. Business Tier 3. Data Access Tier 1. Presentation Tier: This converts and displays data into a human-readable frame. This tier is for the most part in charge of the UI of the application which manages the perception of data to the user. 2. Business Tier: It is mainly in charge of data trade between the UI and the database of the project. The business logic for the Ticket Purchase system would be available here. 3. Data Access Tier: This mainly…

Words 1412 - Pages 6

Nt1310 Unit 3 Assignment 1

DATA NETWORKS ASSIGNMENT 3 ANSWER 1 a) Figure 1 implies that Go Back-N is used because the given figure shows a cumulative acknowledgement which is a property of the Go Back-N protocol. Selective Repeat gives individual acknowledgements as the window shifts. b) Since individual acknowledgements are shown in figure 2, it is Selective Repeat protocol being used in this figure. c) Figure 2 depicts Selective repeat in which the sender window moves forward as it receives acknowledgement for the smallest…

Words 1207 - Pages 5

Nt1310 Unit 3 Assignment 1

3.1. Duration of Study Pending eIRB approval the estimated duration of this study is 2-years, in order to accrue up to 500 participants. This will begin after approval date and continue for two years after that. The expected duration to complete the online survey itself is approximately 30 minutes. This includes the time required for online consent. Once students submit their survey, they will have completed their participation in the study. 3.2 Study Sites Each study participant will complete…

Words 1223 - Pages 5

Nt1310 Unit 3 Assignment 1

1. What is the difference between a. and a. 1. What is the difference between a. and a. Choose a pair of two-digit numbers and find their greatest common divisor. Show the steps to the. For this example: 72 and 84. We'll find their greatest common divisor (GCD) using the Euclidean algorithm, which involves iteratively applying the division algorithm. Step 1: Divide the larger number by the smaller number and find the remainder. 84/72= 1 R 12 Step 2: Replace the larger number with the smaller number…

Words 818 - Pages 4