Vulnerability Assesment Essay

3. Which application is used for Step #2 in the hacking process to perform a vulnerability assessment scan?

In this lab, you used Nmap commands within the Zenmap application to scan the virtual network

The security of the United States and living without being under a constant threat should be very important to all citizens and those who visit this country. The research revealed some interesting facts, it is impossible to secure every commercial building, airport, bridge, bypass, and government building. One element of the security is that terrorists will not have the ability to attack every place in the United States. However, everything is a possible target and terrorists want to do as damage as possible and cause the greatest amount of disruption in our way of life as possible.

The Federal Protective Service (FPS) created RAMP in response to terrorist events. The goal of RAMP was to provide FPS with the capability to assess risks at federal facilities based on threat, vulnerability, and consequence, and track countermeasures to mitigate those risks; and improve the agency’s ability to monitor and verify that its contract security guards are trained and certified to be deployed to federal facilities (Goldstein, 2011). RAMP’s current status is chaotic. It is behind schedule and over budget. RAMP is over budget because the original system requirements changed and additional resources had to be added to accommodate the new requirements. RAMP is behind schedule due to development and implementation

It is essential to understand America’s critical infrastructure and key resources (CIKR) and National Infrastructure Protection Program (NIPP) to ensure survivability of its critical assets, while maintaining security for America. “The plans are carried out in practice by an integrated network of Federal departments and agencies, State and local government agencies, private sector entities, and a growing number of regional consortia (DHS, 2009, p. I).” Several agencies work together to mitigate attacks on CIKR to protect public safety and security of the nation. A terrorist may stop at nothing to carry out an attack on CIKR. If an attack or natural disaster does transpire, each agency working together to restore the damage must be timely. Additionally, NIPP helps to identify hazards associated with the various sectors, and provides necessary security measures to harden resources (DHS,

The Quadrennial Homeland Security review suggest six strategic challenges that will drive the overall risk to the nation over the next five years. These six risks include: the terrorist threat; growing cyber threats; biological concerns; nuclear terrorism; transnational criminal organizations; and natural hazards (DHS, 2014). The terrorists threat is, arguably, the most publicized and popular of the six risks the DHS lists. The particular risk is unique in the fact that although it can be planned for and mitigated against by state and local governments, it is primarily a federal responsibility, or at least perceived so by most entities. The DHS itself was established due to the events of September 11th 2001 and it has since been a consistent

Threat can be divides into 4 various types. The first type is classic threat which is not only threat for OSN user but also threat for the user who plays the internet without the OSN user. The second type is modern threat which is the unique threat for their privacy and security of OSN user. The third threat is combination threat which is the combination of today’s threat, what things that attacker can do? , What thing that attacker often do. The fourth type is threat targeting for children which is the threat specify target for children who use social network.

Bellavita Christopher is the Director of Programs for the Naval Postgraduate School’s Center for Homeland Defense and Security. Also, from 1998 to 2002, he was the planning coordinator for the Utah Olympic Public Safety Command. The author focuses on the fact that homeland security faces a variety of threats. Many factors such as the economy, weapons of mass destruction and a lack of moral compass pose potential challenges to homeland security (Bellavita, 2009). The terrorist attacks such as the one in Mumbai, the economic meltdown, the disaster on the borders remain potential malefactors to the U. S. homeland. And to no surprise, the threats are gradually transforming into a more complex tactics. Bellavita takes aim towards a realistic assessment

Vulnerable eventually gotten from the Latin word vulnus ("wound"). "Vulnerable" initially signified "capable for being physically injured" or "having the ability to wound", yet since the late 1600s, it has additionally been utilized metaphorically to propose a lack of protection against non-physical assaults.

I enjoyed reading your discussion question this week as you evaluated different elements of a Homeland Security Assessment plan that could be utilized to assess threats to a local, state, or federal government related to Infrastructure. We have seen over the past few weeks that there is a vital requirement to ensure that our governmental body in the United States provides that all public areas are not only safe and secure but also in a time of emergency they can easily be converted to a secondary purpose. This reserve of interstruchers will ensure that the needs of the Homeland Security Plan have the buildings, highways, and supplies readily available to put all aspects of the risk management plan into place (Fisher, 2004).

Vulnerability identification- In this risk analysis step the association recognizes all the particular vulnerabilities that exist in its own human services data frameworks or systems. For the most part, vulnerabilities take the type of imperfections or shortcomings in framework methods or configuration. Programming bundles are accessible to help with distinguishing vulnerabilities, yet the association may likewise need to lead interviews, studies, and so forth. A few associations may utilize outside experts to help them distinguish the vulnerabilities in their information

The tragic events of September 11, 2001 highlighted the vulnerability to terrorist attacks. The importance of critical infrastructures to the government, people, and organization can be dependent on the vulnerability towards a national disasters, manmade hazards, and terrorist attack. Contemporary standard of what constitutes critical infrastructures has evolved as a wide array of threats has increased in modern times. Critical infrastructures represent aspects of the economy that makes the nation function as a whole and protecting America’s critical infrastructures and key assets presents an enormous challenge to the Department of Homeland Security.

After the 9/11 terrorist attacks against the United States, a series of risk management evaluations were created by the US Federal Government to assess the future risks the homeland was going to face. When the Department of Homeland Security (DHS) was officially created in 2002, more effective risk management assessments were re-designed to evaluate the past and present dangers, prevent them and respond successfully to more terrorist attacks. Since 2001 until 2007, a development of risk assessment has been divided in phases to be able to reach a better formula that would analyze the risk within the homeland security and provide the appropriate fund to homeland security enterprise.

Nearly every community has some sort of community risk, threat, and assessment plan that takes into account one of the six potential risks that are of concern to homeland security. Though each of these plans will likely differ from one another, many communities will have the same types of information in their plans. This essay will look at the Threat and Hazard Identification and Risk Assessment Guide (THIRA), the Community Risk Reduction Planning Guide, as well as FEMA’s National Preparedness plan. Any combination of these guides are a good starting point for every community in America. At top of every communities list as well as the nation is the protection of the critical infrastructure. Loss of infrastructure regardless of how big or small the community is could have very crippling effects on that community.

The reader will become familiarised with the term risk and it definitions from specifically the ISO 31000 standard of risk management and also the definition of risk from the criminology crime triangle. Which one of these two definitions that are the most suitable for usage within the security industry will be discussed and evaluated. How and why consequence is important when assessing risk priorities and determining where to allocate resources will be examined and answered.