Acme Bank has decided that it\'s time to renew their practices. In the past they

Question

Acme Bank has decided that it's time to renew their practices. In the past they have stored and maintained all their data in-house but they are going to open a request for proposals for outside firms to do the job for them. The data management tasks include both their (internal) administrative assets, i.e HR, as well as their (outfacing) customers' databases, i.e. accounts and transactions. You are the contractor that will put together that proposal. Basing it off of the CIA triangle, identify three possible threats including a profile of the attacker and an attack tree for each. Propose at least three possible solutions to the attacks, threats or vulnerabilities identified. Include references to cryptography - private and public key, hashing, firewalls, vpns, physical security, and policy either to assert the need to include or exclude that element. 10 - CIA discussion (this can be interspersed or separated but it must address the specific needs and solutions provided for your client) 10 points each threat with description and rationale - 30 10 points each solution with description and rationale - 30 10 points each attack tree and attacker profile 30

Explanation / Answer

Solution to threats in cryptography are:

1) DOS(Denial of Service) error: It can be solved by timely upgrading of security patches on your host's operating system.

2) unauthorized access: enforce strong authentication strategies, keeping username and password secret from unreliable sources, and by not providing unnecessary access to any user even employee.

3) IP Spoofing: SSL certificates should be used to reduce risk at greater extent.

Related Questions

Navigate

• Browse (All)
• Browse A
• Subjects

---

---

Integrity-first tutoring: explanations and feedback only — we do not complete graded work. Learn more.