Expert Answers

 Provide a response to the Essay Quiz #3 on page 694 from the textbook.   Write a 2-page paper and must provide a reference to the site where you found , in APA format. 

• From the devices and systems identified in the GFI Corporate Network Topology, conduct a thorough asset inventory, assign monetary values to each asset (quantitative), and assign a priority value for each asset (qualitative) that could be used to determine which assets are most critical for restoral in the event of a catastrophic event or attack.   • Evaluate the perimeter security, make a list of access points internal and external (remote), identify vulnerabilities and make suggestions for improvements to perimeter and network security.   • Evaluate the remote access infrastructure, identify vulnerabilities and suggest security improvements to mitigate risks to remote access.   • Address the COO’s concern over the mobility security and design a secure mobile computing (smart phones, tablets, laptops, etc.) in terms of authentication technologies and data protection.   • Identify wireless vulnerabilities and recommend what safeguards, authentication technologies,and network security to protect data should be implemented.   • Evaluate the authentication protocols and methodologies within the wired, wireless, mobility and remote access environments and suggest improvements to secure authentication forGFI.   • Evaluate the web system protocols and vulnerabilities within the Intranet server and suggest secure protocol improvements to improve security for web authentication.   • Design a cloud computing environment for the company with a secure means of data protection at rest, in motion and in process.   • Assess all known vulnerabilities on each asset in this environment and impacts if compromised.   • Using the asset inventory and the assigned values (monetary and priority) conduct a quantitative and qualitative risk assessment of the GFI network.   • Recommend risk mitigation procedures commensurate with the asset values from your asset inventory. Feel free to redesign the corporate infrastructure and use any combination of technologies to harden the authentication processes and network securitymeasures.   • Provide an Executive Summary.   • You are welcome to make assumptions for any unknown facts as long as you support your assumptions.   • The Title Page, Table of Contents and References page(s) don’t count in your 15 page minimum!!!

computer literacy online course 

Background: As noted by Turban (2015), the term agent is derived from the concept of agency, referring to employing someone to act on one's behalf. A human agent represents a person and interacts with others to accomplish a predetermined task. The concept of agents goes surprisingly far back more than 60 years ago.      Reference: Sharda, R., Delen, Dursun, Turban, E., Aronson, J. E., Liang, T-P., & King, D. (2015). Business Intelligence and Analytics: Systems for Decision Support. 10th Edition. By PEARSON Education. Inc. ISBN-13: 978-0-13-305090-5 Assignment: Go to pages 461 to 464 and familiarize yourself with the topic tagged Agent-Based Modeling and summarize and describe the characteristics of an agent-based simulation model, also list the various factors that were fed into the agent-based simulation model which was described in the case. You are also required to talk briefly on the benefits of using agent-based simulation models and mention other situations where agent-based simulation could be employed apart from using it to prevent disease. Your research paper should be at least 3 pages (800 words), double-spaced, have at least 4 APA references, and typed in an easy-to-read font in MS Word (other word processors are fine to use but save it in MS Word format). Your cover page should contain the following: Title, Student’s name, University’s name, Course name, Course number, Professor’s name, and Date.

Advanced persistent threats (APTs) have been thrust into the spotlight due to their advanced tactics, techniques, procedures, and tools. These APTs are resourced unlike other types of cyber threat actors. Your chief technology officer (CTO) has formed teams to each develop a detailed analysis and presentation of a specific APT, which she will assign to the team. .   Your  report should use The Cybersecurity Threat Landscape Team Assignment Resources to cover the following five areas: Part 1: Threat Landscape Analysis Provide a      detailed analysis of the threat landscape today. What has changed in the past few years? Describe common tactics, techniques, and procedures to include threat actor types. What are the exploit vectors and vulnerabilities threat actors are predicted to take advantage of? Part 2: APT Analysis Provide detailed analysis and description of the APT your group was assigned.      Describe the specific tactics used to gain access to the target(s). Describe the tools used. Describe what the objective of the APT was/is. Was it successful? Part 3: Cybersecurity Tools, Tactics, and Procedures Describe current hardware- and software-based cybersecurity tools, tactics, and procedures. Consider the hardware and software solutions deployed today in the context of defense-in-depth. Elaborate on why these devices are not successful against the APTs. Part 4: Machine Learning and Data Analytics Describe the concepts of machine learning and data analytics and how applying them to cybersecurity will evolve the field. Are there companies providing innovative defensive cybersecurity measures based on these technologies? If so, what are they? Would you recommend any of these to the CTO? Part 5: Using Machine Learning and Data Analytics to Prevent APT Describe how machine learning and data analytics could have detected and/or prevented the APT you analyzed had the victim organization deployed these technologies at the time of the event. Be specific. Part 6: Ethics in Cybersecurity.  Ethical issues are at the core of what we do as cybersecurity professionals. Think of the example of a cyber defender working in a hospital. They are charged with securing the network, medical devices, and protecting sensitive personal health information from unauthorized disclosure. They are not only protecting patient privacy but their health and perhaps even their lives. Confidentiality, Integrity, Availability - the C-I-A triad - and many other cybersecurity practices are increasingly at play in protecting citizens in all walks of life and in all sectors. Thus, acting in an ethical manner is one of the hallmarks of cybersecurity professionals. Do you think the vulnerability(ies) exploited by the APT constitutes an ethical failure by the defender? Why or why not?  For the      APT scenario your group studied, were there identifiable harms to privacy or property? How are these harms linked to C-I-A? If not, what ethically significant harms could result from the scenario your group researched?  For the      APT scenario, your group studied when the targeted organization identified in the breach were they transparent in their disclosure? Do you feel the organization acted ethically?  Use additional sources of information but also describe the concept in layman's terms. Use visuals where appropriate. While quality is valued over quantity, it is expected that a quality paper will result in a minimum length of 10–15 pages.

need it done in 4 hours 

Lab #3  Our third lab builds on the "unacceptable site" detection we worked on in Lab #2. In this exercise, we will attempt to accomplish the same goal using the new reputation preprocessor in Snort. The documentation on the reputation preprocessor and the available configuration options are in section 2.2.20 (starting on p. 122) of the Snort Manual, which is posted under General Information under Content for your reference. The basic function of the reputation preprocessor is similar in many ways to basic firewall operation: the preprocessor evaluates source and destination IP addresses in network packets to see if they appear on either a "whitelist" of approved/acceptable addresses or a "black list" of prohibited addresses. Packets containing IP addresses on the blacklist are dropped. The overall intent for this assignment is to block access to the "bad" site you selected for Lab#2 (or a different site chosen for this assignment) by adding the site to a blacklist and enabling the reputation preprocessor in snort.conf. Please note: If you are using the Virtual Lab, the reputation preprocessor is already configured properly, and the supporting whitelist and blacklist files are stored in /etc/snort/rules. All you need to do is identify the IP address(es) to use and add them to the black.List file. To complete this assignment successfully using Snort on Windows, you may need to first edit the "snort.conf" file as follows if you did not already configure these items when you first installed Snort: At the end of Step #1, either set the path to the reputation preprocessor file location or comment out these two lines (you can declare the blacklist file directly in the preprocessor configuration settings if you don't want to use a variable reference). At the end of Step #5, configure the reputation preprocessor. The default configuration should work fine for most students, as long as the file paths and names are accurate for the local installation. Look at the first configuration example on page 120 of the Snort Manual as a guide, which simply includes the preprocessor declaration and the specification of the blacklist and whitelist files. You can run the preprocessor with either or both of these files, so for our purposes, you might just specify a blacklist file. Where the configuration designates a file (such as "black.list" or "white.list"), the file must exist in the location specified, or Snort will generate an error at start-up. Save the "snort.conf" file. Now, create a blacklist file and put it in the proper directory (such as /etc/snort/rules on Linux or C:\Snort\etc\rules on Windows). A blacklist file is just a plain text file with one IP address (or address range, using CIDR notation) per line. The blacklist file name and file location should match what you specified in the preprocessor configuration in snort.conf. Then startup Snort as you would normally, open a browser, and visit the site corresponding to the IP address(es) in the blacklist file.   Vitual lab link https://umucvda.aeronomy.net/portal/webclient/index.html#/   For this assignment, compose a short write-up for submission to your Assignments folder that includes the following: The "unacceptable" site you selected in Lab #2 (you can pick a new one for this assignment if you prefer). The IP address (individual, multiple, or range) associated with that site. If you don't know the IP address, you can either open a command shell and ping the site (e.g. "ping www.facebook.com"), which will return the primary IP address on screen, or you can look up the site on Netcraft.com to find one or more IP addresses used by the site. The contents of the blacklist file the reputation preprocessor references. A brief summary comparing the rule-based and preprocessor-based approaches used in Labs #2 and #3, with an emphasis on identifying any strengths or weaknesses associated with each approach. If you can get Snort to run successfully with the reputation preprocessor active, include the output produced (a copy of the ASCII log file is sufficient).   Not sure if this helps:   o to the rules folder where you downloaded the VRT certified rules during your Snort install (by default on Windows, this will be C:\Snort\rules). If you have not yet installed these rules, please do so. If you have any trouble downloading the current VRT rules release package, you can retrieve them from http://polaris.umuc.edu/~sgantz/files/snortrules-2982.tar.gz on my UMUC Polaris server. In the compressed (zipped) package, you are looking for the files that end in ".rules" extensions. Pick one of the named rules files, open it, and choose a rule. If this is your first exposure to Snort rule syntax, please note that the rules are the sometimes-cryptic looking items starting with the word "alert". Copy the rule you pick into your response and describe what the rule means in your own words.

  Task based on the Virtucon/Globex scenario, You are required to develop a charter for the Project including: Include the Project description and overview you developed as part of Assessment 2. Part One: MOV - Measurable Organisational Value (This is the goal of the project and is utilised to define the value that your team project will bring to your client) •Identify the desired area of impact - Rank the following areas in terms of importance: Strategy / Customer / Financial / Operational / Social •With reference to your project, identify one or two of the following types of value: Better - is improving quality important to your client? Faster - does your client want to increase efficiency? Cheaper - is cutting costs important? Do more - does your client want to continue its growth? •Develop an appropriate metric - this sets the target and expectation of all the stakeholders. It is important to determine a quantitative target that needs to be expressed as a metric in terms of an increase or decrease of money. •Determine the timeframe for achieving the MOV - ask yourselves, when do we want to achieve this target metric? •SUMMARISE THE MOV IN A CLEAR CONCISE STATEMENT OR TABLE (Note: the MOV should inform everyone what the project will achieve, not how it will be achieved. It should also focus on the organisation, not on the technology that will be used to build or support the information system). Part Two: Define Scope and produce a Scope Management Plan Define the scope of the project and detail how the scope will be managed. Provide a list of Resources Identify and detail the resources for the project using MS Project where appropriate, including: People (and their roles), plus any extra personnel that is required for the project. Technology - any hardware, network and software needs to support the team and your client. Facilities - where will most of the teamwork be situated? Other - for example, travel, training etc. Part Three:  Using MS Project, develop a schedule using a high level Work Breakdown Structure (WBS). It should include: Milestones for each phase and deliverable This will tell everyone associated with the project that the phase or deliverable was completed satisfactorily. Activities / Tasks Define a set of activities / tasks that must be completed to produce each deliverable. Resource Assignments Assign people and resources to each individual activities. Estimates for Each Activity / Task Develop a time estimate for each task or activity to be completed. Project Budget Develop a budget using the time and resources estimated for each task or activity A summary of the WBS should be clearly provided in the report. Your MS Project (or Project Libre) file must also be submitted for marking. Part Four:  Project Risk Analysis and Plan Document any assumptions you have made about the project Using the Risk Identification Framework outlined in your text as a basis, identify five risks to the project – one for each of the five phases of the methodology. Analyse these risks, assign a risk to an appropriate member, and describe a strategy for the management of each specific risk. Part Five:  Quality Management Plan. It should include: A short statement that reflects your team’s philosophy or objective for ensuring that you deliver a quality system to your client. Develop and describe the following that your project team could implement to ensure quality; A set of verification activities A set of validation activities Part Six:  Closure and Evaluation Researching for the closure checklist and project evaluation a. To prepare for this task, you will be required to provide an annotated bibliography. (550 words) Write an Annotated Bibliography for three (3) relevant texts or readings around project evaluation. The Annotated Bibliography is a critical examination of the most relevant, recent and scholarly research on the topic area that is not just a summary of the articles you have read. You will submit this as an appendix to your project evaluation documentation. Ensure that the AB submitted by you is your own work and has not been submitted elsewhere and comply with the University's requirements for academic integrity. Use the following resource to guide you around the research tools: b. Develop a closure checklist that the project team will use to ensure that the project has been closed properly. c. Develop a project evaluation –outline and discuss how your project’s MOV will be evaluated. Rationale This assessment task will assess the following learning outcome/s: be able to research and critically evaluate how a practising IT project manager applies IT project management techniques, project management skills, methods and software tools in the IT industry. be able to understand and apply appropriate communication practices within a project management context. be able to research and apply established IT project management principles, skills and techniques to a case study.

Assignment 1: Identify and define at least three Cloud Deployment Models. What are their characteristics? What are the pros and cons? Mandatory – Refer to the attached textbook content and use it for completing assignment. The textbook content should be visible in the assignment. Requirement: Two page minimum (cover sheet does not count). Minimum 550 words. Double Spaced and APA Format No plagiarized content please! Attach a plagiarized report. Check for spelling mistakes! $8 max. Please bid if you agree.    Assignment 2: There are three common Cloud Service Models. Define one and identify at least three cons and three pros for that particular Cloud Service Model. Mandatory – Refer to the attached textbook content and use it for completing assignment. The textbook content should be visible in the assignment. Requirement: Minimum 350-400 words. Cover sheet does not count. Double Spaced and APA Format No plagiarized content please! Attach a plagiarized report. Check for spelling mistakes! $5 max. Please bid if you agree. Reading material in the textbook:   Jamsa - Chapter 1 Erl – Section 3.1 Jamsa – Chapter 2 Erl – Sections 4.1 and 4.2 Jamsa, K. A. (2013). Cloud computing: SaaS, PaaS, IaaS, virtualization, business models, mobile, security and more. Burlington, MA: Jones & Bartlett Learning. Erl, T., Mahmood, Z., & Puttini, R. (2014). Cloud computing: concepts, technology, & architecture. Upper Saddle River, NJ: Prentice Hall.

CSM Questions