Assignment #2 1- Some people think the certificate authority for a PKI should be the government, but others think certificate authorities should be private entities, such as banks, corporations, or schools. What are the advantages and disadvantages of each approach? 2- An electronic mail system could be used to leak information. First, explain how the leakage could occur. Then, identify controls that could be applied to detect or prevent the leakage.

Assignment #2 1- Some people think the certificate authority for a PKI should be the government, but others think certificate authorities should be private entities, such as banks, corporations, or schools. What are the advantages and disadvantages of each approach? 2- An electronic mail system could be used to leak information. First, explain how the leakage could occur. Then, identify controls that could be applied to detect or prevent the leakage.

Management Of Information Security

6th Edition

ISBN:9781337405713

Author:WHITMAN, Michael.

Publisher:WHITMAN, Michael.

Chapter10: Planning For Contingencies

Section: Chapter Questions

Problem 1EDM

See similar textbooks

Similar questions

What happens if the security of the information is not enforced? Where are mistakes more likely?
First, argue for the best information security practice, whether a block cipher or stream cipher should be used to encrypt a video data file sent through the internet as part of a major, successful entertainment service. The entertainment company has a large market share, and ample resources. Secondly, argue for the most secure choice of which kind of cipher should be used for the authentication exchange between the user and the entertainment service web portal. The entertainment service is expensive to the customer, and users are wary of the misuse of their accounts. Consider the nature of the traffic and its pattern, and the nature of the keys to use.
g. Illicit Cryptomining Create a presentation to discuss a certain abuse assigned to you. The discussion/presentation must focus on the following: 1. Nature of the abuse (types, operation, tools, etc.) 2. Actual case/news 3. Causes of abuse (reasons for committing the crime) 4. Effect/damages 5. Ways to avoid
What are "the objectives of authentication"? Before choosing a system, consider its pros and cons.
With the use of authentication, can we achieve any of our objectives?We'll compare the advantages and disadvantages of different forms of authentication in this section.
Suppose Charlie had installed key logger software on all company computer systems and had made a copy of Peter's encryption key. Suppose that Charlie had this done without policy authority and without anyone's knowledge, including Peter's. Would the use of such a tool be an ethical violation on Charlie's part? Is it illegal? Suppose that Charlie had implemented the key logger with the knowledge and approval of senior company executives, and that every employee had signed a release that acknowledged the company can record all information entered on the company systems. Two days after Peter's call, Charlie calls back to give Peter his key: "We got lucky and cracked it early." Charlie says this to preserve Peter's illusion of privacy. Is such a "little white lie" an ethical action on Charlie's part?
For the scenario below, Determine how each of the CIA principles that were violated or not. Also, specify how three access controls that you believe are pertinent to this case might have reduced risk. The CEO of a healthcare service company brought her wok computer in a restaurant to eat with her friends and in meantime catch up with some work. She sat down at the back and started working in the computer. When her friends came, they did not see her. She noticed them so, she decided to go to them since she saw that the restaurant was not busy. When she came back to her table with her friends, she noticed that her work computer was missing. In panic, she looked everywhere, talked to the staff but still couldn’t find it. Her computer was password protected but the hard drive was not encrypted. Also, she has access to the company's database of 20,000 medical records containing patient data.
I'm curious, when you say "objectives of authentication," do you have any particular definitions in mind for what you're referring to? Analyze the advantages and disadvantages of the many different kinds of identification and authenticity by comparing and contrasting them.
What are the specific goals that we want to accomplish with this authentication procedure? Give an explanation of both the positives and negatives associated with each authentication technique that you've investigated.
Authentication is a process to verify an identity of someone. Authentication can be classified by something known, something possessed by physical characteristic or even a result from an involuntary action. For example, a password can be used as something known by the user to prove their identity. Give THREE (3) password selecting strategies that you can apply to your users in your system to help them in creating a good password.
To complete this assignment, you will need to do some research and produce a report that addresses the following issues regarding digital fingerprinting: You should concentrate on the following issues: What exactly is Digital Fingerprinting, and why is it employed in the first place? What is the operation of the fingerprinting algorithm? Explain how it works on a fundamental level. To achieve the intended result—either blocking, deleting, or authorizing the use of content—a series of actions must be taken. Fingerprinting, according to several cybersecurity experts, is abusive and exposes users' privacy concerns. Some browsers have included specific methods to prevent browser fingerprinting from occurring. Describe the safeguards used by any of the browsers to protect themselves against fingerprinting. List two common Fingerprinting Algorithms that are used nowadays.
How are authentication and authorization alike and how are they different. What is the relationship, if any, between the two?