Essay On Ransomware Attack

Ransomware is a malicious computer program that encrypts your computers contents and requires a key to unlock the encryption. You are instructed to wire bitcoins (anonymous internet

data and risks will help a company to design strong policies, procedures and standards that will help to keep data secure.

The administration of data security depends on three unique ranges of responsibility. These are most certainly not regularly connected or facilitated as their management is set in various authoritative structures which may not converse with each other.

Data security is the responsibility of the information system team. Three responsibilities of this team are making sure the data is accurate, protecting the data from unauthorized users, and correcting the data if it is damaged. This includes protecting the system by firewalls, gouging phishing, and protecting data from a hardware or software loss.

Due to the lack in data security elements, the following recommendations are suggested: strategy and risk assessment. Overall data security begins with the identification of risks and the strategy on the solution to those risks. This can be accomplished through a Strength Opportunities, and Threats (SWOT) analysis. Strengths and weaknesses are derived from internal factors, such as employees, while opportunities and threats are derived from external factors, such as hackers (Value Based Management, 2011).

Before I plan for security, I will ensure that the suitable officials are assigned to security responsibilities, continue reviewing the security system controls in their information systems, and authorize the system processing before the operations. These management responsibilities are believed to have responsible agency officials that understand the risks and other factors that could affect the mission. Additionally, these officials must also understand the current status position of their security program and the security controls that protect their information and the information systems that makes investments that mitigate the risk to an acceptable level. The objective is to conduct a day-to-day operation and to accomplish missions with adequate security, including the increase of harm resulting from unauthorized access, modification, disruption, usage, or disclosure of information. The key element of FISMA Implementation Project, NIST developed a Risk Management Framework which will bring all of the FISMA related guidance and security standards to promote developmental comprehension and balance information security programs by different agencies.

The threat is incredibly serious—and growing. Our nation’s critical infrastructure, including both private and public sector networks, are targeted by adversaries. American companies are targeted for trade secrets and other sensitive data, and universities for their cutting-edge research and development. Citizens from anywhere across the globe are targeted by fraudsters and identity thieves, and children are targeted by online predators. Just as the FBI transformed itself to better address the terrorist threat after the 9/11 attacks, this means enhancing the Cyber Division’s investigative capacity to have strong sharp focus on intrusions into government and private computer like network to.hospitals, school districts, state and local governments, law enforcement agencies like the Federal Bureau of Investigation, Central Intelligence Agency, Drug Enforcement Administration, National Security Agency, Naval Criminal investigative Service and Department Of Defense, small businesses, large businesses these are just many who have been impacted by ransomware, a threat type of malware that encrypts, or locks, valuable digital files and

For unit 9, the class would reach chapter 15. First I would like to start by saying I had a lot of appreciation for chapter 15. It’s completely different from all of the other chapters and gives some extremely good insight to actually practicing security on your own terms, setting up your own practice area at home, as well as what may or may not be expectable for trial and error at your intended place of employment. Chapter 9 is based around an administrator’s perspective. It’s a great overview of topics such as solution ideals, guidelines, outlines, and best practices. It’s a chapter that will keep me reading it again and again through different points in my career I’m sure.

The Technical safeguard provisions consist of five broad categories Access Controls, Audit Controls: Integrity Controls, Person or Entity Authentication and Transmission Security (Sayles, 2013). All of these safeguards are purposed to protect and secure sensitive data.

As an information security professional my goal is to ease fears of the unknown and provide assurance that confidentiality, integrity, and availability lessens risks that counter continuity. With insight and confidence I will serve as a guide for the speediest acceptable recovery from disasters when they occur. This is my purpose for pursuing the Master of Science in Information Assurance at Davenport University. As is evident with the College of Technology Faculty, my mission is one of achieving expertise and continually questing for knowledge in the complex and evolving world that is informatics security.

Cyber Crime is described as criminal activity committed via use of electronic communications with respect to cyber fraud or identity theft through phishing and spoofing. There are many other forms of cyber-crime also such as harassment, pornography etc. via use of information technology.

Computer viruses are minute program which is “embedded inside an application or within a data file which can copy itself into another program“(Adams et al, 2008 ) for the sole determination of meddling with normal computer operations. The consequences may range from corruption and deletion of data; propagation of virus on to network and deployment through attachments through emails in order to further creating havoc to all associated computing devices.

Recovering from a ransomware attack isn't easy, yet it can be done. However, companies who fall victim to ransomware may find that the recovery process is the least of their concerns. They could be facing not only lawsuits, but also costly fines. This is why prevention is so critical.

Information security professional’s job is to deploy the right safeguards, evaluating risks against critical assets and to mitigate those threats and vulnerabilities. Management can ensure their company’s assets, such as data, remain intact by finding the latest technology and implementing the right policies. Risk management focuses on analyzing risk and mitigating actions to reduce that risk. Successful implementation of security safeguards depends on the knowledge and experience of information security staff. This paper addresses the methods and fundamentals on how to systematically conduct risk assessments on the security risks of information systems.

Variants of ransomware now allow victims to “pay” by spreading the malware to their friends and family. Another variant, Spora, allows tiered payments that unlock “some” or “all” of a victim’s encrypted files or grant “immunity” from the virus that infected them. Expect that to continue in 2017 with an emphasis on alternative payment modes (always the trickiest part of the ransomware scheme). (Roberts, 2017)