Find a sandbox used by a computing system and examine its security settings and/or any existing restrictions on access control. Think about why such security settings and/or access control policies are needed and how they are enforced. Search for any published vulnerabilities that can compromise the security settings. For the report, describe what sandbox you choose and what you learned about it briefly. Hint: Examples include mobile apps, Docker containers, virtual machines, virtual servers (e.g., a virtual server hosted by a web hosting company), and elements in a web page.

Find a sandbox used by a computing system and examine its security settings and/or any existing restrictions on access control. Think about why such security settings and/or access control policies are needed and how they are enforced. Search for any published vulnerabilities that can compromise the security settings. For the report, describe what sandbox you choose and what you learned about it briefly. Hint: Examples include mobile apps, Docker containers, virtual machines, virtual servers (e.g., a virtual server hosted by a web hosting company), and elements in a web page.

Management Of Information Security

6th Edition

ISBN:9781337405713

Author:WHITMAN, Michael.

Publisher:WHITMAN, Michael.

Chapter12: Protection Mechanisms

Section: Chapter Questions

Problem 1RQ

See similar textbooks

Similar questions

Can you Define in 1500 words, the access control as well as the means and components of security.?
In what ways does the security of your computer have the potential to be compromised? Is there anything that can be done to lessen the impact of these dangers in any way? Provide an overview of the possibilities in a condensed form. What are the signs that your computer has been infected with a virus?
The challenge response authentication system (CRAS) is a system that utilises a question and its corresponding answer to authenticate users. This system is designed to verify the identity of users by posing a challenge question and requiring the user to provide the correct response. What is the comparative level of security offered by this authentication method in contrast to a password-based approach?
Computer hacking is the act of identifying and exploiting system and network vulnerabilities in order to obtain unauthorized access to those systems. Hacking costs companies and consumers trillions of dollars every year. But not all hacking is malicious. White hat hackers may work in cyber security or as software engineers and testers seeking out vulnerabilities inorder to fix them. Based on the description given above, ELABORATE you answer from the questions below:As a computer user, what sorts of anomalies would you look for to identify a compromised system? As a computer user, what should you do once you identify that your computer device has been compromised? As a computer user, how would you strengthen user authentication?
Computer hacking is the act of identifying and exploiting system and network vulnerabilities in order to obtain unauthorized access to those systems. Hacking costs companies and consumers trillions of dollars every year. But not all hacking is malicious. White hat hackers may work in cyber security or as software engineers and testers seeking out vulnerabilities inorder to fix them. Based on the description given above, ELABORATE you answer from the questions below:As a computer user, what sorts of anomalies would you look for to identify a compromised system? As a computer user, what should you do once you identify that your computer device has been compromised? As a computer user, how would you strengthen user authentication? - ELABORATE THE ANSWERS.
Explain a situation where one of the four access control strategies may be used. Why would you choose one choice over the rest?
The challenge-response authentication mechanism is a security protocol that verifies the identity of a user attempting to access a system or service. This mechanism involves a challenge, which is a request for the user to provide a response that proves their identity. The response is typically a password or other form of authentication credential. The challenge-response mechanism is designed to prevent unauthorised access to sensitive information or resources by ensuring that only authorised users are granted access. The specific features of this approach that confer enhanced security compared to a conventional password-based methodology are not readily apparent.
Please provide an example to illustrate why one of these four methods of access control could be beneficial. Why did you choose this option instead of the ones available to you?
a) As a computer user, what sorts of anomalies would you look for to identify a compromised system? b) As a computer user, what should you do once you identify that your computer device has been compromised? c) As a computer user, how would you strengthen user authentication?
Answer the following questions. Describe various issues or challenges for password-based user authentication. Also, explain the defiance mechanism for each of these challenges/attacks. Explain the mechanism of hash-based password and how this mechanism can be attacked. Also, describe the means to resolve these attacks. Compare different token-based user authentication mechanisms with their advantages and disadvantages. Describe various types of malicious software (malware) attacks and suggest countermeasures to each of these malware attacks. Explain the functioning of Host-Based Scanners and Signature-Based Anti-Virus software. Explain their advantages and limitations.
Determine the many types of access control methods. Investigate the differences between the numerous settings options provided by each.
Separating files of one user from another = is user’s permissions Making data secure and hard to read by unauthorised users = is Encryption Detecting malicious files received from the Internet = is Anti-Virus Blocking unwanted traffic trying to access a network = is Firewall List the names, purposes and characteristics of a range of security techniques. You have now talked more about the purpose. However, you still need to talk about the more technical details of each security technique that you have identified (standard and admin accounts, BitLocker encryption, anti-virus, firewall). Justify the use of a range of security techniques in typical situations. It may help to consider what would happen without the security mechanisms and go from there.