Suppose you are managing your company’s network security. For each suspicious user activity, you need to decide whether or not to assign a human expert to check if it is malicious. Suppose that a human expert, once being assigned, can stop a malicious activity. The cost of assigning a human expert to check a suspicious activity is $1. The net benefit of stopping a malicious activity after factoring in the cost of assigning the human expert is $5. The cost of not stopping a malicious activity is $50. A non-malicious activity will not cause any loss to the company. a. Write down the decision weights in the following table. Specifically, please write down the value of a, b, c, d. Note that for the actual class, 1 means malicious and 0 means not malicious. (Short-answer) b. Continue from the previous question. What is the decision cut-off value you should use to decide whether to assign a human expert? Show calculation. Then write down the decision rule as well.

Suppose you are managing your company’s network security. For each suspicious user activity, you need to decide whether or not to assign a human expert to check if it is malicious. Suppose that a human expert, once being assigned, can stop a malicious activity. The cost of assigning a human expert to check a suspicious activity is $1. The net benefit of stopping a malicious activity after factoring in the cost of assigning the human expert is $5. The cost of not stopping a malicious activity is $50. A non-malicious activity will not cause any loss to the company. a. Write down the decision weights in the following table. Specifically, please write down the value of a, b, c, d. Note that for the actual class, 1 means malicious and 0 means not malicious. (Short-answer) b. Continue from the previous question. What is the decision cut-off value you should use to decide whether to assign a human expert? Show calculation. Then write down the decision rule as well.

Management Of Information Security

6th Edition

ISBN:9781337405713

Author:WHITMAN, Michael.

Publisher:WHITMAN, Michael.

Chapter2: Compliance: Law And Ethics

Section: Chapter Questions

Problem 1EDM

See similar textbooks

Similar questions

Consider yourself the Authentication Manager of an IT organization, and you see that things were done haphazardly in the past. Users may select from a set of 62 characters (lower/upper case alphabets and 10 numbers) for the password setup, and a password length of ten characters was specified. Consider a strong adversary that can guess 10,000 passwords in a single second. Calculate the likelihood that a password in your company will be properly guessed by an attacker in a one-year period for password lengths of 12, 14, and 16. Users may still select just 62 characters.
Suppose that the IDS system examines each file that is downloaded. This IDS has a false alarm probability of 0.001. Suppose that on average, an employee downloads a file once an hour. If each alarm takes the IT team 2 hours to fully investigate, how bug does the IT team need to be for a 2000 employee company?
The following diagram describes a secure communication between a sender and a receiver; answer the following questions based on the diagram. ----------- a. Who is the owner of the keys involved in this scheme? b. What are the security objectives (CIA) fulfilled by the above scheme, justify your choices? c. If the receiver wants to respond to the sender, what key should he use to send a ciphertext response? d. Does the sender give proof of evidence of his identity to the receiver using this scheme? e. In case, in the above give scheme, if the secret key is used for encryption and the public key for decryption, what will be the security objective?
Suppose that Alice has a private key used for decryption. If she loses it thenshe no longer wishes to receive messages encrypted with the correspondingpublic key as she cannot decrypt them. Even worse, if her private key iscompromised, the adversary can decrypt messages sent to her. Suggest ONE(1) immediate action that must be taken to protect Alice in both cases.
In the following scenario, we will compare the security services that are given by digital signatures (DS) and message authentication codes (MAC). We assume that James can read all messages send from Chan to Badrul and the other way around, too. James has no knowledge of any keys but the public one in the case of DS. State whether and how (i) DS and (ii) MAC protect against each attack. The value auth(x) is calculated with DS and MAC’s algorithm, correspondingly. i) (Message integrity) Chan sends a message x = “Transfer RM200 to Darren” in the clear and also sends auth(x) to Badrul. James intercepts the message and replaces “Darren” with “James”. Will Bob detect this?. ii) (Replay) Chan sends a message x = “Transfer RM200 to James” in the clear and also sends auth(x) to Badrul. James observes the message and signature and sends them 100 times to Badrul. Will Badrul detect this? iii) (Sender Authentication with the cheating third party) James claims that he sent some…
Do you have three protocols that are vulnerable to assault since the network is so critical to the organization's users?
At first, all lights on William's gadget are wound down. Toward the start of another emphasis the gadget arbitrarily, with a uniform dissemination, picks a light that is wound down and turns it on, let William know which digital money he ought to put resources into. After this cycle on the off chance that any k back to back lights contain more than one turned on light, the gadget gets done with working. William doesn't care for vulnerability, so he needs you to ascertain the normal worth of the number of lights that are turned on in the gadget after it gets done with working. Input Each test contains various experiments. The primary line contains the number of experiments t (1≤t≤10). Depiction of the experiments follows. The main line for each experiment contains two integers n and k (2≤k≤n≤105), which are the complete number of lights and the length of subsegment of lights that are being checked, separately. Output For each experiment print the appropriate response,…
Let 1 = (Gen1;Enc1;Dec1) and 2 = (Gen2;Enc2;Dec2) be two encryption schemes for which it is knownthat only one is CPA-secure. The problem is that you don't know which one is CPA-secure and which onemay not be. Show how can we identify if 1 or 2 is CPA secure.
A hypothetical scenario where the management of login credentials is necessary could be a large corporation that has multiple departments and employees with varying levels of access to sensitive information. In order to maintain security and prevent unauthorised access, the company would need to implement a system for managing login credentials. This would involve assigning unique usernames and passwords to each employee, as well as establishing protocols for resetting passwords and revoking access when necessary. Additionally, the company may choose to implement two-factor authentication or other security measures to further protect sensitive data. Identify and analyse the different authentication techniques that are currently accessible. Is the utilisation of a password mandatory in all instances?
How do you feel about the parallels between network sniffing and wiretapping?Just why do we consider them to be silent threats?
Paul needs to read and write some documents. In the following, assume the system security policy is described completely by the Bell-LaPadula model. Note that the situation described may be impossible, in which case say so and show why. Please give the least clearance that Paul can have if he wishes to read a document with classification (SECRET, {NUC, EUR}) and a document with classification (CONFIDENTIAL, {ASI}). Please give the greatest clearance that Paul can have if he wishes to write to a document with classification (TOP SECRET, {EUR}) and a document with classification (SECRET, {EUR, NUC}). Please give the greatest clearance that Paul must have if he wishes to read a document with classification (SECRET, {EUR, NUC}), to write a document with classification (CONFIDENTIAL, {NUC, EUR}), and to read another document with classification (TOP SECRET, {ASIA, EUR}).
It has only just been granted permission to wiretap the suspect's phone lines. Would a certain kind of network equipment be required to handle network traffic interception, or will something else be required? Which position do you think is most suitable for the network sensors? educate the perpetrator as to why their monitoring would be disregarded by the criminal, Would you have done anything differently if you had been a member of the surveillance program?