Create a “user account policy” for Macon-Bibb. Include admins, staff, student Interns, and guests. This will allow for administrative server storage, local access to documentation, and remote access to management so students can learn and support Macon-Bibb and MGA initiatives.  • Explain which NTFS permissions will be given to each. • Explain why each permission was chosen. • What remote access protocols and process will you be using?

For the ZeuS malware, please write a short paragraph based on the given background and website info: ZeuS – Trojan ZeuS is a modular banking trojan that uses keystroke logging to compromise credentials when a victim visits certain banking websites. Since the release of the ZeuS source code in 2011, many other malware variants have adopted parts of its codebase, which means that incidents classified as ZeuS may actually be other malware using parts of the original ZeuS code. https://www.cisecurity.org/insights/blog/top-10-malware-december-2022   Zeus malware can give attackers full access to infected machines. While the original Zeus variant primarily utilized man-in-the-browser keyloggers to gain access to an infected computer’s banking credentials and other financial information, many forms of the Zeus virus can also be used to add CryptoLocker ransomware to an operating system or add infected computers to a botnet to perform distributed denial-of-service (DDoS) attacks. The Zeus…

What's the easiest approach to manage enterprise passwords?

To describe how a Java Enterprise Edition environment's security behaviour is detailed, explain how native authentication and authorization services are deployed step-by-step when a web client seeks access to protected resources on a web server. Please use the APA style guide as a guide.

Consider the access control types below and choose some examples. Example. Discretionary Access Control (DAC), Mandatory Access Control (MAC), Role-Based Access Control (RBAC), Attribute-Based Access Control (ABAC), Rule-Based Access Control, Risk-Adaptive Access Control (RAC), Identity-Based Access Control (IBAC), Organization-Based Access Control (OBAC),

What are the two ways for doing a DNS Cache Poisoning attack? What is the design behind a password harvesting attack? Why do you think these can work so well? How could you use the Wayback Machine to conduct Reconnaissance against a particular business?

Which access control strategy restricts a user's capacity to obtain information required to do their job?

Based upon your readings this week, explain what each of the following terms mean and how they can be prevented.  This will aid you in preparing for the quiz on this material.  Topics: Buffer Overflow Injections (SQL, HTML, Command, Code) Authentication Credential brute force Session hijacking Redirect Default credentials Weak credentials Kerberos exploits Authorization Parameter pollution Insecure direct object reference Cross-site scripting (XSS) Stored/persistent Reflected DOM Cross-site request forgery (CSRF/XSRF) Clickjacking Security misconfiguration Directory traversal Cookie manipulationLinks to an external site. File inclusion Local Remote Unsecure code practices Comments in source code Lack of error handling Overly verbose error handling Hard-coded credentials Race conditions Unauthorized use of functions/unprotected APIs Hidden elements (sensitive info in the DOM) Lack of code signing

A program called Isu gives access to role accounts. The user's access rights are checked, and the user is required to enter her password. If access rules allow the change and the user's password is correct, Isu allows the change. Given that Mary uses Isu from her account, why does isu require her to enter her password? Name the principles involved, and why they require this.