Principles of Information Security Chapter 2 Review Questions

Using proxy software Burp Suite it was discovered that the shopping site contained a hidden form field that could be manipulated.

Memory Resident Virus is one type, they usually fix themselves inside the computer memory. They get activated every

     On September 24, 2010, a laptop was stolen from an unlocked Urology office at the Henry Ford Health Systems hospital. The laptop did contain password protection software; however, it may not have been enough to permit access if the thief had advanced knowledge in computers. Additionally, the information stored on the laptop did not include social security or health insurance information, but instead held “patient names, medical record numbers, dates of birth, telephone numbers, e-mail addresses, and treatment and doctor visits” (Moscaritolo, 2010, p. 1). It is unknown how many records were contained on the laptop, but all records were related to prostate services that were provided during an eleven year span.

Malware consists of viruses which are programs that attach themselves to legitimate programs on a victim’s machine. Worms are standalone programs that do not attach themselves to other programs. Direct propagation words take advantage of vulnerabilities in software. Blended threats propagate both as viruses and worms however; they post themselves on websites for people to download unwillingly. The payrolls are being nine they merely pop up Ace message on the victims computer screen or do something unknowing but nonlethal damage. Trojan horses, hides itself by deleting a system file and taking on the system file name. Remote access Trojan gives the attacker remote control of your computer. These items mentioned above do not rename themselves they can cause great damage or be just a nuisance.

Management defines information security policies to describe how the organization wants to protect its information assets. After policies are outlined, standards are defined to set the mandatory rules that will be used to implement the policies. Some policies can have multiple guidelines, which are recommendations as to how the policies can be implemented. Finally, information security management, administrators, and engineers create procedures from the standards and guidelines that follow the policies.

data and risks will help a company to design strong policies, procedures and standards that will help to keep data secure.

Increased frequency and intensity of storms and weather extremes may increase safety and health risks for vulnerable populations including water ingress, mould and loss of housing for poorly housed and health risk to the homeless.

As technology grows and information has become a critical asset companies currently are devoted their resource and money to protect their data as important as their finance and human resource assets.

Viruses and worms are malicious programs that self-replicate on computers or through computer systems without the user being cognizant. Worms are a series programs that repeat themselves from system to system minus the use of a host fie. Worms use methods to infiltrate remote computers and launch replicas of themselves like email messages or coping files to an accessible disk. A computer virus is a

Faults are a precise interaction of hardware and software that can be fixed given enough time.

(1963) The Principles and Practice of Management, London: Longmans). So management is the process of dealing with or controlling things or people. The key word in this definition is process, when everyone thinks of Management they automatically picture the person behind the desk telling you what to do when its really quite the contrary, when you consider the pertinent parts 'how one processes a situation and manages an appropriate response in any given situation' This is non so important than that in the security industry.

The bottom-up approach lacks support from upper management. The top-down approach offers more upper management support with more funding plus clear planning.

1. How can a security framework assist in the design and implementation of a security infrastructure?

Answer: Information Security is the practice of defending (guiding) information by considering the CIA Triad Principles which are Confidentiality (Authorize access), Integrity (Accuracy and Completeness) and Availability.

Many types of computer virus has been spreading in computers since 1960. The first a computer virus discovered in 1970 and called The Creeper virus on Arpanet browser (anon, 2013)