Divya-OWASP Tools, Vulnerability Management

 For this assignment, download the GSA virtual appliance vulnerability assessment tool by clicking the link.   Install the GSA virtual appliance in your VirtualBox environment. Next review the video below about conducting a vulnerability scan using GSA/openvas.  Conduct a scan against the Linux Lamp Server virtual machine you created doing week 3.  Download the report in a PDF and submit.  Provide a summary about how this assignment represents securing the cloud.    

Clash of titan methodologies

  1. Select one of the three scenarios studied for assignment 7.1. 
  2. How would the situation and conclusions change if that scenario were approach from one of the two other methodological approaches than it was.

450 words with intext references and 3 main references

Situation: participating honestly in a conversation in a difficult art succeeding is the sign of a skilful creator of actors knowledge

Methodology approach: Actor’s or System’s approach

Business intelligence Discussion Questions

Question 1

Why are the original/raw data not readily usable by analytics tasks? What are the main data preprocessing steps? List and explain their importance in analytics.

Question 2

 What are the privacy issues with data mining? Do you think they are substantiated?

-each question with at least 500 words and 2 references in apa format.

Practical connection.1

 Course Description

DSRT 734 − Inferential Statistics in Decision-making (3 hours) This course focuses on the descriptive and inferential statistics commonly used in organizational administration. Course activities include the application of statistical methods to research design, as well as an investigation of how these methods can contribute to school improvement. Specific concepts include measures of central tendency and variability, probability theory, estimation and significance, and correlation and regression.

Course Objectives

Upon completion of this course:

Students will describe the essential characteristics of quantitative research.Students will apply inferential statistical tests on problems requiring parametric and non-parametric analyses.Students will identify potential research designs for various problems.Students will analyze statistical information in the professional literature on a topic related to their own research project. 

Residency Project

  

•Find a company that has suffered a security breach in 2019. Provide background information on the company such as the type of business, their services, public or private, locations, etc. The reader should have a good understanding of the company after reading the bio. Next, provide information on the security breach; the Who, What, When, Where, Why, and How. 

•Create an Incident Response Plan (IRP) for the company. You can use the breach as a foundation if desired. The IRP should be a professionally looking document that is included as an attachment.

•Create a Disaster Recovery Plan (DRP) for the company. Again, you can use the previous breach as a foundation if desired. The DRP should be a professionally looking document that is included as an attachment.

wk 7 fin

 minimum 200 words

Will blockchain transform capital markets? Yes or no? Explain your reasoning

Corporate IT Security Audit Compliance

 

  • Read the Case Study:
     (this case study is attached) 
  • Write a summary analysis and what is your opinion of the discussion? What is the high point that convinces you that Corporate governance compliance does make a difference in the operating performance?

Cyber security questions

1. Calculate the timing of password-guessing attacks:

(a) If passwords are three uppercase alphabetic characters long, how much time would it take to determine a particular password, assuming that testing an individual password requires 5 seconds? How much time if testing requires 0.001 seconds?

(b) Argue for a particular amount of time as the starting point for “secure.” That is, suppose an attacker plans to use a brute-force attack to determine a password. For what value of x (the total amount of time to try as many passwords as necessary) would the attacker find this attack prohibitively long?

(c) If the cutoff between “insecure” and “secure” were x amount of time, how long would a secure password have to be? State and justify your assumptions regarding the character set from which the password is selected and the amount of time required to test a single password.

  2. Describe each of the following four kinds of access control mechanisms in terms of (a) ease of determining authorized access during execution, (b) ease of adding access for a new subject, (c) ease of deleting access by a subject, and (d) ease of creating a new object to which all subjects by default have access.

• per-subject access control list (that is, one list for each subject tells all the objects to which that subject has access)

• per-object access control list (that is, one list for each object tells all the subjects who have access to that object)

• access control matrix

• capability

3. Design a protocol by which two mutually suspicious parties can authenticate each other. Your protocol should be usable the first time these parties try to authenticate each other.

4. List three reasons people might be reluctant to use biometrics for authentication. Can you think of ways to counter those objections?

  5. If you forget your password for a website and you click [Forgot my password], sometimes the company sends you a new password by email but sometimes it sends you your old password by email. Compare these two cases in terms of vulnerability of the website owner.

  6. Defeating authentication follows the method–opportunity–motive paradigm described in Chapter 1. Discuss how these three factors apply to an attack on authentication.

  7. Suggest a source of some very long unpredictable numbers. Your source must be something that both the sender and receiver can readily access but that is not obvious to outsiders and not transmitted directly from sender to receiver.

  8. Humans are said to be the weakest link in any security system. Give an example for each of the following:

(a) a situation in which human failure could lead to a compromise of encrypted data

(b) a situation in which human failure could lead to a compromise of identification and authentication

(c) a situation in which human failure could lead to a compromise of access control.

 9. Explain why hash collisions occur. That is, why must there always be two different plaintexts that have the same hash value? 

10. What property of a hash function means that collisions are not a security problem? That is, why can an attacker not capitalize on collisions and change the underlying plaintext to another form whose value collides with the hash value of the original plaintext?