Assignment 8
.docx
keyboard_arrow_up
School
American Public University *
*We aren’t endorsed by this school
Course
ISSC452
Subject
Computer Science
Date
Feb 20, 2024
Type
docx
Pages
4
Uploaded by AmbassadorHummingbirdPerson531
Reflection on Class Discussions
Kyle Namen
American Public University
Cybersecurity ISSC452
Dr. Ron L. Booth
12/26/2023
2
During this class, we covered many interesting topics during the weekly discussions, but to me, week two was the most interesting. Learning about and discussing Intrusion Detection Systems (IDS) and how they play a crucial role in safeguarding computer networks by identifying and mitigating malicious activity was my favorite topic because it provided a peek behind the curtain of what the Information Technology departments or digital forensic analysts are using to fight against criminals. Among the various detection techniques, signature-based detection stands out as a well-established and direct method.
Malicious network activity, often referred to as malware, encompasses a wide range of harmful programs
or code, including trojans, viruses, and worms (
Corelight, n.d.)
. Signature-based detection serves as a foundational approach to swiftly identify such activity within network traffic.
A signature identifies a specific pattern. In the context of malware detection, signatures are extracted from indicators of compromise (IOCs) identified by security researchers or network defenders (
RiskXchange, 2023)
. These IOCs serve as the building blocks for creating threat signatures or IDS rules.
While signature-based detection remains a cornerstone of IDS, it should be complemented with other methods, such as anomaly detection, to address emerging threats. Anomaly-based detection is a powerful technique within IDS that focuses on identifying data points or patterns significantly deviating from expected norms.
As cyber threats continue to evolve, detecting anomalous activity becomes critical. Anomaly-based detection provides a proactive approach by flagging deviations from established patterns (
Daszczyszak, 2019)
.
An anomaly refers to any data point or behavior that significantly diverges from the norm. These deviations could indicate unusual events, errors, or even potential fraud. Anomaly detection aims to identify these outliers within network traffic or
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
- Access to all documents
- Unlimited textbook solutions
- 24/7 expert homework help
Related Questions
Respond to the following in a minimum of 175 words:
Discuss a cryptography attack scenario. Choose an attack and explain how it works. Be sure to choose one that hasn’t been mentioned by another classmate. What countermeasures would you apply? How do the countermeasures you would use compare to those your classmates recommended for the attacks they chose? What do those similarities or differences tell you about fighting these types of attacks?
arrow_forward
"The impact of hacking on life" - For the last several years cyber-attacks/hacking are in the news on a seemingly continuous basis. Some of the most recent/largest hacking events include the Solarwinds hack that was the conduit for the major breach of many US Federal agencies and the disturbing Equifax hack from 2017. Have these events and the subsequent reporting caused you to change any habits/behaviors? Please provide your thoughts on this along with why you have or have not made any changes as a result of these events.
Hint: Please don't use chat gpt
arrow_forward
This week, we learned about oversharing and how it can help an attacker gain access to important user credentials. As you’ll see throughout the semester, sharing certain information online can potentially lead to a lot of problems later.
NOVA Labs put together an interesting story.A Cyber Privacy Parable (3:27)Links to an external site.Minimize VideoWatch the video and read the prompt above, and then respond to the following questions:
Why do you feel that people should (or should not) be concerned about oversharing?
What types of information do you share on your social media accounts?
Let’s say that you saw a friend post the following message to her Twitter account:
As someone familiar with cybersecurity, do you see anything wrong with this post?
After seeing this posted online, what would you say (if anything) to your friend?
Please make sure that all of your answers are numbered and in full sentences!
arrow_forward
I need help with this please:
The work you've done for your clients at the flooring company has helped them realize they have not taken cybersecurity seriously enough. Now that they realize the threats from hackers are more serious than they thought, they want to learn more about how to detect intruders in their systems to try to prevent the problems from happening because of a hack.
Write a 2- to 3-page summary explaining how to prevent and detect intrusion in IT systems.
Describe how penetration tests provide insight on network vulnerabilities through testing network defenses, such as firewalls, honeypots, and IDS.
Explain how and why hackers circumvent firewalls.
Explain IDS evasion and countermeasures to IDS evasion techniques.
Describe the role of webserver hacking and detection in penetration testing.
Identify 3 web server architectures and provide an example of a vulnerability for each.
Identify tools and techniques used to detect intrusion web servers.
Thank you.
arrow_forward
What does the term 'phishing' signify to you?
arrow_forward
Is there a place for intrusion detection and prevention systems today?
arrow_forward
You are asked to do some research, and write a report that answers the following questions about Digital Fingerprinting:
You should tackle the following points:
What is Digital Fingerprinting and for what purposes is it used?
How does the fingerprinting algorithm work? Describe its principle of operation.
Certain steps are followed to reach the desired result- either block, delete or authorize usage of content.
Some cybersecurity experts say that fingerprinting is abusive and exposes the privacy issues of users. Certain solutions were done by some browsers for blocking browser fingerprinting. Describe the measures taken by any of the browsers as a fingerprint defense mechanism.
List two common Fingerprinting Algorithms.
Report Writing:
You should follow the following guidelines while writing your report:
Your report should be between 400 and 500 words in length.
Ensure that your report has an appropriate structure and writing style.
Your report…
arrow_forward
There are very few federal laws specifically for hacking, though most states have their own laws. The first law for hacking, the Computer Fraud and Abuse Act (CFFA) was passed in 1986 and is still the backbone of the hacking legislature. Currently, it is at issue in the United States Supreme Court; there is talk that the law is overly broad (one interpretation proclaims a federal crime for sharing passwords - for instance, Netflix).
ECPA
What does the acronym stand for? When was the law passed? What is the main takeaway of the law?
SCA
What does the acronym stand for? When was the law passed? What is the main takeaway of the law?
arrow_forward
Where have you seen vulnerabilities and exposures in cyberspace in the real world?
arrow_forward
Computer abuse is best defined as mcq
arrow_forward
Nearly a decade has passed sinuce the
National Academy of Engineers declared
Cyber Security a "grand challenge for the
next century." Every day there is news on
ways in which cyber security challenges
and responses are complicating every
aspect of our lives. Can the challenge be
solved? (40marks)
As a first step to solving any problem, one
must understand its nature. So, it is
important for all cyber security analysts to
keep on top of news stories in the field. In
this discussion forum we will do just that
with the hope that everyone will make it a
daily habit throughout their career.
Today, some cyber news has been flooded
out of the headlines by Hurricane Harvey,
but as noted in this article, cyber concerns
are front and center as students return to
school.
arrow_forward
Based on what you what heard on the media and your readings and multimedia about the SolarWinds attack please discuss the following:
What did the attack consist of?
How did it originated? What are your thoughts about what government officials are saying about attribution?
Could this type of attack have been avoided? How? If not what else can be done to prevent these attacks in the future?
Based on your reading, what do you think was Kevin Mitnick’s motivation? What was his favorite method for hacking?
Why do we need to understand the attacker’s kill chain process? Address each one in your response: Reconnaissance, Weaponization, Delivery, Exploitation, Installation, Command and Control, Actions on the target, and Impact.
How can the MITRE ATT&CK Matrix help you not only understand the kill chain used by hackers to compromise an organization but also how it will help you stop attacks? Describe how it will help you with your job as a defender.
arrow_forward
Do intrusion detection and prevention systems have a role in the internet security landscape of today?
arrow_forward
When did hacking start to get complicated and spread?
arrow_forward
I'm curious as to what what a "intrusion protection system" is.
arrow_forward
Hi I want to make a video presentation on this topic which should be 5 mins atleast, so need help below format:
Discussion: Misadventures of a Nation State Podcast
Discuss Darknet Diaries Episode 10. Why is this a video discussion instead of a written response? It is an important skill to master to be able to present and summarize the key concepts of a complex cybersecurity incident in a short time frame. Remember that unless you are talking to other cybersecurity professionals, probably no one thinks this stuff is as interesting as you do.
Instructions: The main purpose of the video discussion assignments is to get you to dig into the main four cybersecurity frameworks and references we use in the class. Use the context of the specific security incident to explore and explain some aspects of the NIST CSF, the CIS CSCs, ACSC Strategies to Mitigate Cyber Incidents, and the MITRE ATT&CK matrix.
Keep each discussion sub-topic focused and to approximately 1 minute for a TOTAL video…
arrow_forward
What do you mean by a Computer worm?
arrow_forward
SEE MORE QUESTIONS
Recommended textbooks for you
Database System Concepts
Computer Science
ISBN:9780078022159
Author:Abraham Silberschatz Professor, Henry F. Korth, S. Sudarshan
Publisher:McGraw-Hill Education
Starting Out with Python (4th Edition)
Computer Science
ISBN:9780134444321
Author:Tony Gaddis
Publisher:PEARSON
Digital Fundamentals (11th Edition)
Computer Science
ISBN:9780132737968
Author:Thomas L. Floyd
Publisher:PEARSON
C How to Program (8th Edition)
Computer Science
ISBN:9780133976892
Author:Paul J. Deitel, Harvey Deitel
Publisher:PEARSON
Database Systems: Design, Implementation, & Manag...
Computer Science
ISBN:9781337627900
Author:Carlos Coronel, Steven Morris
Publisher:Cengage Learning
Programmable Logic Controllers
Computer Science
ISBN:9780073373843
Author:Frank D. Petruzella
Publisher:McGraw-Hill Education
Related Questions
- Respond to the following in a minimum of 175 words: Discuss a cryptography attack scenario. Choose an attack and explain how it works. Be sure to choose one that hasn’t been mentioned by another classmate. What countermeasures would you apply? How do the countermeasures you would use compare to those your classmates recommended for the attacks they chose? What do those similarities or differences tell you about fighting these types of attacks?arrow_forward"The impact of hacking on life" - For the last several years cyber-attacks/hacking are in the news on a seemingly continuous basis. Some of the most recent/largest hacking events include the Solarwinds hack that was the conduit for the major breach of many US Federal agencies and the disturbing Equifax hack from 2017. Have these events and the subsequent reporting caused you to change any habits/behaviors? Please provide your thoughts on this along with why you have or have not made any changes as a result of these events. Hint: Please don't use chat gptarrow_forwardThis week, we learned about oversharing and how it can help an attacker gain access to important user credentials. As you’ll see throughout the semester, sharing certain information online can potentially lead to a lot of problems later. NOVA Labs put together an interesting story.A Cyber Privacy Parable (3:27)Links to an external site.Minimize VideoWatch the video and read the prompt above, and then respond to the following questions: Why do you feel that people should (or should not) be concerned about oversharing? What types of information do you share on your social media accounts? Let’s say that you saw a friend post the following message to her Twitter account: As someone familiar with cybersecurity, do you see anything wrong with this post? After seeing this posted online, what would you say (if anything) to your friend? Please make sure that all of your answers are numbered and in full sentences!arrow_forward
- I need help with this please: The work you've done for your clients at the flooring company has helped them realize they have not taken cybersecurity seriously enough. Now that they realize the threats from hackers are more serious than they thought, they want to learn more about how to detect intruders in their systems to try to prevent the problems from happening because of a hack. Write a 2- to 3-page summary explaining how to prevent and detect intrusion in IT systems. Describe how penetration tests provide insight on network vulnerabilities through testing network defenses, such as firewalls, honeypots, and IDS. Explain how and why hackers circumvent firewalls. Explain IDS evasion and countermeasures to IDS evasion techniques. Describe the role of webserver hacking and detection in penetration testing. Identify 3 web server architectures and provide an example of a vulnerability for each. Identify tools and techniques used to detect intrusion web servers. Thank you.arrow_forwardWhat does the term 'phishing' signify to you?arrow_forwardIs there a place for intrusion detection and prevention systems today?arrow_forward
- You are asked to do some research, and write a report that answers the following questions about Digital Fingerprinting: You should tackle the following points: What is Digital Fingerprinting and for what purposes is it used? How does the fingerprinting algorithm work? Describe its principle of operation. Certain steps are followed to reach the desired result- either block, delete or authorize usage of content. Some cybersecurity experts say that fingerprinting is abusive and exposes the privacy issues of users. Certain solutions were done by some browsers for blocking browser fingerprinting. Describe the measures taken by any of the browsers as a fingerprint defense mechanism. List two common Fingerprinting Algorithms. Report Writing: You should follow the following guidelines while writing your report: Your report should be between 400 and 500 words in length. Ensure that your report has an appropriate structure and writing style. Your report…arrow_forwardThere are very few federal laws specifically for hacking, though most states have their own laws. The first law for hacking, the Computer Fraud and Abuse Act (CFFA) was passed in 1986 and is still the backbone of the hacking legislature. Currently, it is at issue in the United States Supreme Court; there is talk that the law is overly broad (one interpretation proclaims a federal crime for sharing passwords - for instance, Netflix). ECPA What does the acronym stand for? When was the law passed? What is the main takeaway of the law? SCA What does the acronym stand for? When was the law passed? What is the main takeaway of the law?arrow_forwardWhere have you seen vulnerabilities and exposures in cyberspace in the real world?arrow_forward
- Computer abuse is best defined as mcqarrow_forwardNearly a decade has passed sinuce the National Academy of Engineers declared Cyber Security a "grand challenge for the next century." Every day there is news on ways in which cyber security challenges and responses are complicating every aspect of our lives. Can the challenge be solved? (40marks) As a first step to solving any problem, one must understand its nature. So, it is important for all cyber security analysts to keep on top of news stories in the field. In this discussion forum we will do just that with the hope that everyone will make it a daily habit throughout their career. Today, some cyber news has been flooded out of the headlines by Hurricane Harvey, but as noted in this article, cyber concerns are front and center as students return to school.arrow_forwardBased on what you what heard on the media and your readings and multimedia about the SolarWinds attack please discuss the following: What did the attack consist of? How did it originated? What are your thoughts about what government officials are saying about attribution? Could this type of attack have been avoided? How? If not what else can be done to prevent these attacks in the future? Based on your reading, what do you think was Kevin Mitnick’s motivation? What was his favorite method for hacking? Why do we need to understand the attacker’s kill chain process? Address each one in your response: Reconnaissance, Weaponization, Delivery, Exploitation, Installation, Command and Control, Actions on the target, and Impact. How can the MITRE ATT&CK Matrix help you not only understand the kill chain used by hackers to compromise an organization but also how it will help you stop attacks? Describe how it will help you with your job as a defender.arrow_forward
arrow_back_ios
SEE MORE QUESTIONS
arrow_forward_ios
Recommended textbooks for you
- Database System ConceptsComputer ScienceISBN:9780078022159Author:Abraham Silberschatz Professor, Henry F. Korth, S. SudarshanPublisher:McGraw-Hill EducationStarting Out with Python (4th Edition)Computer ScienceISBN:9780134444321Author:Tony GaddisPublisher:PEARSONDigital Fundamentals (11th Edition)Computer ScienceISBN:9780132737968Author:Thomas L. FloydPublisher:PEARSON
- C How to Program (8th Edition)Computer ScienceISBN:9780133976892Author:Paul J. Deitel, Harvey DeitelPublisher:PEARSONDatabase Systems: Design, Implementation, & Manag...Computer ScienceISBN:9781337627900Author:Carlos Coronel, Steven MorrisPublisher:Cengage LearningProgrammable Logic ControllersComputer ScienceISBN:9780073373843Author:Frank D. PetruzellaPublisher:McGraw-Hill Education
Database System Concepts
Computer Science
ISBN:9780078022159
Author:Abraham Silberschatz Professor, Henry F. Korth, S. Sudarshan
Publisher:McGraw-Hill Education
Starting Out with Python (4th Edition)
Computer Science
ISBN:9780134444321
Author:Tony Gaddis
Publisher:PEARSON
Digital Fundamentals (11th Edition)
Computer Science
ISBN:9780132737968
Author:Thomas L. Floyd
Publisher:PEARSON
C How to Program (8th Edition)
Computer Science
ISBN:9780133976892
Author:Paul J. Deitel, Harvey Deitel
Publisher:PEARSON
Database Systems: Design, Implementation, & Manag...
Computer Science
ISBN:9781337627900
Author:Carlos Coronel, Steven Morris
Publisher:Cengage Learning
Programmable Logic Controllers
Computer Science
ISBN:9780073373843
Author:Frank D. Petruzella
Publisher:McGraw-Hill Education