Chapter 1, Problem 11.4EC

do you think that facebook or careless, uninformed users should be held respomsible for privacy issues related to using facebook? explain?

Which preventive, detective, and/or corrective controls would best mitigate the following threat, and why? (e)A company’s programming staff wrote custom code for the shopping cart feature on its website. The code contained a vulnerability that could be exploited when the customer typed in the ship-to address.

Which preventive, detective, and/or corrective controls would best mitigate the following threat, and why? (i)To facilitate working from home, an employee installed a modem on his office workstation. An attacker successfully penetrated the company’s system by dialing into that modem.

Do you think that Sony’s response to the attack was appropriate? Why or why not? What might Sony and the U.S. government done differently to discourage future such attacks on other U.S. organizations? Are there measures that organizations and the U.S. government can take together to prevent both real-world terrorist violence and cyberattacks? According to a recent report by Gartner, most business users will have access to some sort of self-service BI tool within the next few years; however, Gartner estimates that less than 10 percent of companies will have sufficient data governance practices in place to prevent data inconsistencies across the organization. Why do you think so many companies continue to invest in new analytics tools without implementing governance programs that ensure data consistency?

Which preventive, detective, and/or corrective controls would best mitigate the following threat, and why? (c) A criminal remotely accessed a sensitive database using the authentication credentials (user ID and strong password) of an IT manager. At the time the attack occurred, the IT manager was logged into the system at his workstation at company headquarters.

STUDY QUESTIONS   Why is human behavior considered one of the  biggest potential threats to operating system integrity? What are the issues that need to be considered before implementing keystroke monitoring? Describe the three ways on how an audit trail can be used to support security objectives. Explain how poorly designed audit trail logs can actually be dysfunctional. Why would a systems programmer create a back door if he or she has access to the program in his or her day-to-day tasks?   PROBLEMS   Problem 1:   Charles Hart, an accounts payable clerk, is an hourly employee. He never works a minute past 5 P.M. unless the overtime has been approved. Charles has recently found himself faced with some severe financial difficulties. He has been accessing the system from his home during the evening and setting up an embezzlement scheme. As his boss, what control technique(s) can be used to help detect this type of fraud?   Problem 2:   In 2002, Mr. Rollerball started Mighty Mouse,…

A DDos attacka. is more intensive than a Dos attack because it emanates from single source.b. may take the form of either a SYN flood or smurf attack.c. is so named because it affects many victims simultaneously, which are distributed across the Internet.d. turns the target victim’s computers into zombies that are unable to access the Internet.e. none of the above is correct.

Defamation is one of the most critical problems that most organization is facing. Suppose you are running a software house. You are new in the market and have too much competitors. What kind of challenges do you have in term of? Security Threats Defamation What measures you will take to overcome them?

As an added measure, a company has set up its network so that computers that currently log in through the central authentication system (CAS) can log in even if the network is unavailable (through a system of stored password information). This move would be most closely associated with which CIIA goals: Confidentiality and Integrity O Integrity and Availability Confidentiality and Accessibility O Confidentiality and Availability