CS507-Information Systems assignment 4 solution
Wednesday, January 11, 2012
Q.1 What are the problems that system engineers face while designing a secure information system?
[5 marks]
Solution
A. Natural Disasters
Natural disasters, such as floods, lightning, brown-outs, fire and earthquakes, are the most obvious security problems for most organizations. Since the source of these problems is generally uncontrollable, one must plan for the possibility. Physical location of computer systems, control of electrical surges or spikes and clean fire suppression methods are possible techniques to discuss when dealing with this topic. A pre-defined disaster plan, including appropriate off-site backup, helps to avoid regret.
B. Accidental Problems
Many threats to a system result from unintentional errors created either by a user or by the system itself. Examples include the accidental disclosure of data, inadvertent modification or destruction of data, faulty software that may produce incorrect data, residual data left in the system and that may contaminate new data, and wrong parameters that get passed inappropriately. The most common forms of accidental threats are employee mistakes. On-going training programs, both formal and informal, can help prevent many of these problems.
Malicious threats are deliberate attempts to circumvent or defeat the system's protection mechanisms, or exploit weaknesses in such mechanisms. A trapdoor is a "special element that when inserted in a program or system allows the intruder to bypass protective features safeguarding the secure functioning of a system." The Trojan horse technique of penetration "consists of supplying the computer with what is perceived appropriate and acceptable information, but in reality contains secret instructions for unauthorized behavior."
Q2. How security vulnerabilities can be over come by using the technique presented by the authors?
[5 marks]
Solution
Security center carries out distribution of vulnerability related information. It conducts analysis, establish countermeasures, provides PR documents, materials and develop support tools to counter vulnerability.
Collection / Analysis of Information on Vulnerabilities, Analysis of Attacking Methods
Information on vulnerability and attack methods released via the Internet is collected for the purposes of various research, verification, and evaluation of the impact.
Reduction of Vulnerabilities
For the development of safe software, our compilation of know-how titled, "A Secure Programming Course," is presented on our website. Furthermore, research, study, and the development of technology and supporting tools are carried out to reduce the vulnerabilities.
Report / analysis of Vulnerability-related information, and reports of spreading of countermeasures for vulnerabilities.
IPA operates "Information Security Early Warning Partnership" for vulnerability-related information distribution in cooperation with JPCERT Coordination Center (JPCERT/CC), and other related organizations/bodies.
IPA co-operates the JVN portal site, with JPCERT/CC, which provides the action status being taken by the vendors for the vulnerability which has been uncovered, and distributes countermeasure when it becomes available.
On Thu, Jan 12, 2012 at 1:46 PM, shano <mc100203524@vu.edu.pk> wrote:
i need idea solution of CS507 today is LAST date. if anyone have then
send me its urgent.
>> *www.Vugoogle.com <http://www.Vubaba.com>*
On 1/11/12, mc100207030 <mc100207030@vu.edu.pk> wrote:
> i need askari bank ratio analysis plz help me
>
> On Thu, Jan 12, 2012 at 7:49 AM, Muhammad Afaaq
> <afaaqtariq233@gmail.com>wrote:
>
>> Asslam O Alikum
>>
>> solutionssssssssss all new
>>
>> Remember Me in Your Prayers
>> Best regard's
>> Ch Muhammad Afaaq (Arrein)
>> MBA (Finance) Completed
>> 0346-5329264
>> Islamabad
>>
>> Afaaq_Tariq@yahoo.com
>>
>>
>> For latest assignments solved quizzes files GDB solve n unsolved past
>> papers Come join us in
>>
>>
>>
>>>> That's about me … !**
>>
>> http://groups.google.com/group/vustudymania
>>
>>
>> If u like me than raise your hand with me
>> If not then raise ur standard
-->>
>>
>> --
>> ██████████████████ Basic Group Rules ███████████████████
>> Immoral & Rudish talk, Earning program links, Cell number for friendship
>> purpose, Websites/Groups Links, Adult contents, Criticize-able Islamic
>> stuff, Spreading disruption, Spamming are strictly prohibited and banned
>> in
>> group.
>> █████████████████████████████████████████████████
>>
>> Follow these detailed Group Rules, otherwise you will be banned at any
>> time.
>>
>> https://docs.google.com/document/d/1YJxA8x3_U7C1lRc0EXfLrJpco4A1XkB1vDxOTqOd3Jg/edit?hl=en&authkey=CNDy9tkJ
>>
>> Group Email Address:
>> Attock-VU-Group@Googlegroups.Com
>>
>> Join group by sending a blank email from University ID at:
>> Attock-VU-Group+Subscribe@Googlegroups.Com
>>
>> Join us at http://www.Vusr.net for Papers,Assignments,GDBs, Quizes.
>>
>> ████████████ Click here to Join this group at Facebook:████████████
>> ♥ ♥ ♥ https://www.facebook.com/home.php?sk=group_111877855568034 ♥ ♥ ♥
>> █████████████████████████████████████████████████
>>
>
> --
> ██████████████████ Basic Group Rules ███████████████████
> Immoral & Rudish talk, Earning program links, Cell number for friendship
> purpose, Websites/Groups Links, Adult contents, Criticize-able Islamic
> stuff, Spreading disruption, Spamming are strictly prohibited and banned in
> group.
> █████████████████████████████████████████████████
>
> Follow these detailed Group Rules, otherwise you will be banned at any time.
>
> https://docs.google.com/document/d/1YJxA8x3_U7C1lRc0EXfLrJpco4A1XkB1vDxOTqOd3Jg/edit?hl=en&authkey=CNDy9tkJ
>
> Group Email Address:
> Attock-VU-Group@Googlegroups.Com
>
> Join group by sending a blank email from University ID at:
> Attock-VU-Group+Subscribe@Googlegroups.Com
>
> Join us at http://www.Vusr.net for Papers,Assignments,GDBs, Quizes.
>
> ████████████ Click here to Join this group at Facebook:████████████
> ♥ ♥ ♥ https://www.facebook.com/home.php?sk=group_111877855568034 ♥ ♥ ♥
> █████████████████████████████████████████████████
>
N.Malik
MBA(Finance)
Last Smester
--
██████████████████ Basic Group Rules ███████████████████
Immoral & Rudish talk, Earning program links, Cell number for friendship purpose, Websites/Groups Links, Adult contents, Criticize-able Islamic stuff, Spreading disruption, Spamming are strictly prohibited and banned in group.
█████████████████████████████████████████████████
Follow these detailed Group Rules, otherwise you will be banned at any time.
https://docs.google.com/document/d/1YJxA8x3_U7C1lRc0EXfLrJpco4A1XkB1vDxOTqOd3Jg/edit?hl=en&authkey=CNDy9tkJ
Group Email Address:
Attock-VU-Group@Googlegroups.Com
Join group by sending a blank email from University ID at:
Attock-VU-Group+Subscribe@Googlegroups.Com
Join us at http://www.Vusr.net for Papers,Assignments,GDBs, Quizes.
████████████ Click here to Join this group at Facebook:████████████
♥ ♥ ♥ https://www.facebook.com/home.php?sk=group_111877855568034 ♥ ♥ ♥
█████████████████████████████████████████████████
--
██████████████████ Basic Group Rules ███████████████████
Immoral & Rudish talk, Earning program links, Cell number for friendship purpose, Websites/Groups Links, Adult contents, Criticize-able Islamic stuff, Spreading disruption, Spamming are strictly prohibited and banned in group.
█████████████████████████████████████████████████
Follow these detailed Group Rules, otherwise you will be banned at any time.
https://docs.google.com/document/d/1YJxA8x3_U7C1lRc0EXfLrJpco4A1XkB1vDxOTqOd3Jg/edit?hl=en&authkey=CNDy9tkJ
Group Email Address:
Attock-VU-Group@Googlegroups.Com
Join group by sending a blank email from University ID at:
Attock-VU-Group+Subscribe@Googlegroups.Com
Join us at http://www.Vusr.net for Papers,Assignments,GDBs, Quizes.
████████████ Click here to Join this group at Facebook:████████████
♥ ♥ ♥ https://www.facebook.com/home.php?sk=group_111877855568034 ♥ ♥ ♥
█████████████████████████████████████████████████
No comments:
Post a Comment