Security Incident Report Essay

Submitted By Sabian-Toussaint
Words: 1948
Pages: 8
Open Document
Initially, the Java platform was designed to provide a platform on which non-operating system specific programming code could be executed. This code, called Java-applets, would run in a safe environment in which potentially untrusted code downloaded from the Internet could be executed without harm. As the platform has grown, it has evolved and its architecture now supports many security features such as a variety of application programming interfaces (APIs), tools, and implementations of commonly used security algorithms, mechanisms, and protocols. Developers now have a comprehensive security framework for writing applications and the user and administrators of these applications have the tools to securely manage them.
Cryptographic and public key infrastructure (PKI) interfaces provide the underlying basis for developing secure applications. Interfaces for performing authentication and access control enable applications to guard against unauthorized access to protected resources. In addition, many third-party providers have developed additional security services to enhance the platform and extend security beyond the base set of tools.
Java employs access controls to protect sensitive resources, such as local files and application code. The basic control in Java is the Security Manager class and it must be installed into the Java runtime in order to employ the necessary security features. By default, when Java is run via Web Start, the application is loaded and ran to initiate the security features it employs. However, when Java is run by either command-line or programmatically, the module must be invoked by a command-line command or loaded and executed by the calling program. The Security Manager module than provides the following benefits: where code is loaded from, who signed the code (if anyone), and default permissions granted to the code. The default permissions automatically granted to downloaded code include the ability to make network connections back to the host from which it originated. The default permissions automatically granted to code loaded from the local file system include the ability to read files from the directory it came from, and also from subdirectories of that directory. These, along with other protocols and permissions, make up some of the security features of Java.
Like any application or security system, Java is not perfect. Java has its own vulnerabilities and the following outlines one such incident.
Evaluation of Incident
Java has been a very hot topic for security managers this year due to a steady stream of 0-day Java vulnerabilities that have been disclosed, with many of them being exploited in the wild. However, the challenges of Java-based threats go deeper than your average 0-day vulnerability, and these challenges will likely affect your approach to how you control them. Oracle released a critical Java update that fixes more than 50 security vulnerabilities, based on the repeated warnings from the U.S. Department of Homeland Security; all employees were required to update Java as soon as possible. Oracle issued an update to its latest Java software that plugs more than 50 security vulnerabilities, including one particularly nasty flaw that was being actively exploited. The patch, Java 7 Update 13- critical updates were issued in consecutive odd numbers- was due to release on February 19, 2013 but was pushed ahead by two week.
Solution
Java SE is a component of so many popular software packages that any vulnerability in Java exposes an unlimited number of business and personal users to the potential of significant loss. There are two primary issues that needed to be addressed by Oracle. According to Security Alert CVE-2013-0809, “An arbitrary memory read and write vulnerability in the Java JVM process could allow an attacker to execute arbitrary code.” As an example, a hacker could use a social network to lure a user to a site and then load a program to their
Show More

Related Documents: Security Incident Report Essay

Security Incident Report Example

ensured the lanes were free of obstructions and improperly parked vehicles. I walked randomly through the foot paths inspecting the units for any signs of burglary. While in the area I listened for any sounds of a dispute or noise disturbance. No security issues were discovered at the time of this patrol. -------------------------------------------------------------------------- I entered the property and completed an inspection. During my inspection I first checked the leasing office for any signs…

Words 429 - Pages 2

Hacking Forensic Investigator

percent to become the qualified professional of forensic investigator for the computer hacking. 312-49, Computer Hacking Forensic Investigator exam comprises of forty three domains that includes Computer Forensics in Today's World, Computer Forensics Incident Handling, Computer Digital Media Devices, Windows Linux Macintosh Boot Process, Windows Forensics I, Windows Forensics II, Linux Forensics, Mac Forensics, Data Acquisition and Duplication15.Recovering Deleted Files and Deleted Partitions, Forensics…

Words 511 - Pages 3

Mid: Information Security Incident Essay

published incident response plan for an academic institution. Identify the areas that might differ from those of a for-profit institution. This is incident response plan for Minnesota State Colleges and Universities Top of Form Bottom of Form Guideline 5.23.1.4 Information Security Incident Response Part 1. Purpose: This guideline establishes the minimum requirements for Information Security Incident Response within Minnesota State Colleges and Universities (System). Information Security Incident Response…

Words 3045 - Pages 13

HIPAA Breach Notification Report

INTRODUCTION: Calamity and security occurrences debilitate the capacity of associations to do its mission and operational capacities arranging and arrangement permits associations to keep on serving its group. The security and privacy of patient wellbeing data is a principal obligation of social insurance associations. (Wilson,2006). Patients believe their individual and private wellbeing data to health awareness associations with the desire of insurance and privacy. Human services…

Words 947 - Pages 4

Elevator Use Essay

Procedure Once an employee has been injured on the job, the following steps must be taken: • Employee must immediately inform their supervisor about the injury and report to the nearest nurse. • The nurse will check on the employee’s welfare and determine the severity of the injury. The nurse will provide you with an incident packet. • If medical treatment is necessary, the employee will be sent to one of the providers listed: YISD Wellness Health Clinic Dr. Manoucherhr…

Words 1910 - Pages 8

Essay on Child Care

• Report health and safety issues to the appropriate people and complete health, safety and security records according to legal and organisational requirements. • Minimise risk • Identify and work with others to minimise potential risks in the place where I am working. • Ensure that my own health and hygiene does not pose a threat to others. • Ensure that the appropriate people know where I am at all times. • Check for hazards and health, safety and security risks while…

Words 2928 - Pages 12

UNB Security

UNB Security is tasked with the safety and protection of students at the University of New Brunswick. Included in the security team’s responsibilities is to respond to incidents on campus, relating to harassment, discrimination, assault, sexual assault, and improper conduct. This team’s role is intervention and prevention of incidents, as well as investigation and prosecuting those who commit violations to UNB’s rules and policies. The current rules and standards for dealing with issues brought before…

Words 1310 - Pages 6

Chapter 5 Essay

Chapter 8 1. Define and discuss the role of the director of security in maintaining hotel security. The director of security reports to the general manager and is responsible for maintaining the hotel’s security policies and procedures. The director of security also works in coordination with the general manager as well as heads of other departments in the hotel. Sometime the director of security has an assistant director and security officers at his/her disposable to help support his/her goal of…

Words 1003 - Pages 5

Industrial Security Plan Essay

Industrial Security Plan Industrial Security Plan Roles and Responsibilities of Industrial Safety and Security Officers Safety and security in the industrial setting are elements that are required for the safety of the plant, its staff, and the public in the surrounding area. As a constantly evolving process, the use of safety and security officers is also paramount in the enforcement of policies and procedures to decrease or eliminate injury or loss. Safety and security personnel are…

Words 1732 - Pages 7

Nt1330 Unit 9 Final Paper

1. Security assignments should be considered at the beginning of a development project because, it has been proven that earlier you identify the security requirements the more efficient and cost effective they will be. 2. The system owner and the office of information security are responsible for defining system security requirements. 3. Security should be evaluated in the initiation phase of the SDLC. 10.2 1. Input validation is the process of confirming all the input to an application…

Words 408 - Pages 2