Subject: Software Engineering You are designing an intrusion detection system (IDS) to prevent theft at a bank occupying a 60-floor downtown Chicago building. IDS interfaces with motion sensors located both inside and outside of the building as its only means of sensing intrusion. IDS must satisfy the following: Ensurethat a police officer arrives at the location of any intrusion quickly; Makeany intruder run away quickly; Ensure that a maintenance worker arrives at the location of any failed sensor quickly. Questions: Specify a minimal set of signals to support the C-C-I and H-C-I of IDS and its partners. Use pseudo-code to show the operation of the system.

Subject: Software Engineering You are designing an intrusion detection system (IDS) to prevent theft at a bank occupying a 60-floor downtown Chicago building. IDS interfaces with motion sensors located both inside and outside of the building as its only means of sensing intrusion. IDS must satisfy the following: Ensurethat a police officer arrives at the location of any intrusion quickly; Makeany intruder run away quickly; Ensure that a maintenance worker arrives at the location of any failed sensor quickly. Questions: Specify a minimal set of signals to support the C-C-I and H-C-I of IDS and its partners. Use pseudo-code to show the operation of the system.

Principles of Information Security (MindTap Course List)

6th Edition

ISBN:9781337102063

Author:Michael E. Whitman, Herbert J. Mattord

Publisher:Michael E. Whitman, Herbert J. Mattord

Chapter9: Physical Security

Section: Chapter Questions

Problem 4E

See similar textbooks

Similar questions

Subject: Software Engineering You are designing an intrusion detection system (IDS) to prevent theft at a bank occupying a 60-floor downtown Chicago building. IDS interfaces with motion sensors located both inside and outside of the building as its only means of sensing intrusion. IDS must satisfy the following: Ensurethat a police officer arrives at the location of any intrusion quickly; Makeany intruder run away quickly; Ensure that a maintenance worker arrives at the location of any failed sensor quickly. Questions: Specify a minimal set of signals to support the C-C-I and H-C-I of IDS and its partners. Use pseudo-code to show the operation of the system. Note: If you are writing a question by hand, the font should be clear
a. Intrusion detection is based on the assumption that the behavior of the intruder differs from that of a legitimate user in ways that can be quantified. Of course, we cannot expect that there will be a crisp, exact distinction between an attack by an intruder and the normal use of resources by an authorized user. This poses a challenge to the use of IDS. Briefly discus the challenges and propose a cure. b. Blockchain is a breakthrough technology that is expected to alter most industries in the coming years and it particularly touted so because of confidentiality, authentication and integrity that it offers which makes it independent, transparent and secure. Experts says that these important principles of security are achievable because blockchains employs hash functions and public key encryption. Briefly discuss how these cryptographic techniques offer confidentiality, authentication and integrity that gives blockchain its security.
Subject: Software Engineering An ATM’s PIN entry screen has been designed to display a warning message if the user pushes the submit button before entering a digit in each of four required fields. This is an example of: a)H-C-I. b)Anattempt to increase SA. c)Defensivedesign. d)Securityengineering. e)All ofthe above. What does the Lexington Airport Crash case tell us about Team SA: a)TeamSA requires an unambiguous definition of who is on which team. b)TeamSA is impacted by both H-H-I and H-C-I. c)TeamSA is highest early in the day. d)TeamSA involves runtime binding. e)Noneof the above.
A surveillance system will be installed at the entrance of an office. The surveillancesystem is equipped with three (3) cameras and an alarm to secure the office. Thespecifications of the system are as follows:• Camera A will be asserted HIGH when an unauthorized car plate number isdetected• Camera B will be asserted HIGH when an unauthorized person is detected• Camera C will be asserted HIGH when a suspicious movement is detectedAlarm will be activated when any of the following conditions occurs:• Camera A detects an authorized car plate number and Camera B detects anunauthorized person• Camera C detects a suspicious movementBy showing all necessary steps, construct the logic circuit for the surveillance systemusing suitable logic gates.
Assume a scenario where the hackers gained access to information through malware on Point-of-Sale (POS) systems of more than million credit and debit card. The firewall had captured the first malware code and an alert was issued which was ignored. The hackers started downloading the collected data. The cyber criminals have hacked the system to gain credit and debit card information The organization admitted that they ignored many alerts from their network security devices because of alert overload. If you are the organization’s Chief Technical Officer (CTO), what would you do to reduce the problem of alert overload?
Computer Science Describe how to investigate an intrusion incident such as a redirect attack on a Windows laptop, with malware upload, what would you likely find going through the laptop and network information (hint: going through pcap files, system logs, security logs, and registry hive (ntuser.dat, etc...), and the file looking for artifacts)? In your opinion, how would you likely validate findings (artifacts), to confirm their accuracy and significance, found on the system and network?
For instance, personal firewalls and network firewalls, both of which are now offered for sale on the market, might be used to safeguard the network in your house. This is but one illustration of the several security methods that may be used.
An example of a host-based intrusion detection system is the tripwire software. This programme scans the system's files and directories and alerts the administrator of any changes. For each file examined, it uses a secure database of cryptographic checksums and compares them as they are scanned. It must be configured with an authorised change list and a list of files and directories to examine. It can enable new entries to be added to log files, but it cannot change existing ones. What are the advantages and disadvantages of using such a tool? Think about the decision of which files should be verified and which should only be inspected seldom. Take into account the time spent setting up the application and keeping track of the outcomes.
Scenario 3In an attempt to deter speeders, the East Dakota State Police (EDSP) installs video cameras on all of its freeway overpasses. The cameras are connected to computers that can reliably detect cars traveling more than five miles per hour above the speed limit. These computers have sophisticated image recognition software that enables them to read license plate numbers and capture highresolution pictures of vehicle drivers. If the picture of the driver matches the driver’s license photo of one of the registered owners of the car, the system issues a speeding ticket to the driver, complete with photo evidence. Six months after the system is put into operation, the number of people speeding on East Dakota freeways is reduced by 90 percent. The FBI asks the EDSP for real-time access to the information collected by the video cameras. The EDSP complies with this request. Three months later, the FBI uses this information to arrest five members of a terrorist organization. Questions 1.…
The organisation has recently introduced a novel security protocol mandating all personnel to authenticate their access to personal computers via a biometric fingerprint scanner, in lieu of conventional username and password credentials. As a result of the recent trimming of your fingerprint, your computer is currently unable to locate and utilise it for identification purposes. Consequent to this issue, your access to the computer that was being utilised by you will be terminated. What are the subsequent stages?
Computer Science Find pen-testing technical mistakes in this scenario? Company XYZ recently conduct a security audit by the internal auditor, after finishing the security audit, the company decided to use one of its staff to test an external pen testing and the company provided him all information regarding their network vulnerabilities, He chose Black box testing methodology but the company has a very tight budget and also allowing very short time to run the test. IT staff decided to start pen-testing at the very early stage without the company’s permission and shut all unused ports in the company. After that, he decided to test an application tester in the live network to find all vulnerabilities. He used dynamic testing to monitor system memory.
Assume a scenario where the hackers gained access to information through malware on Point-of-Sale (POS) systems of more than million credit and debit card. The firewall had captured the first malware code and an alert was issued which was ignored. The hackers started downloading the collected data. The cyber criminals have hacked the system to gain credit and debit card information The stolen credentials alone are not enough to access the company’s POS devices. What other means can the hackers acquire to allow them to navigate the company’s network and deploy the malware.