Question 5 (practical): A government agency where you are currently employed has claimed that one of their servers has been slowed. The primary responsibility of this server is to provide web-based access to internal users. They captured network traffic after some investigation to aid in the analysis of any suspicious activities. In addition, they agency asked you as the cybersecurity expert to do this job by analyzing the captured network traffic. You should examine the file "MCBS.pcap". Then you may be required to answer the following questions. a) Type of attack b) IP address of sender c) IP address of recipient/server d) Which port number(s) used? e) Any suggestion to mitigate?

Question 5 (practical): A government agency where you are currently employed has claimed that one of their servers has been slowed. The primary responsibility of this server is to provide web-based access to internal users. They captured network traffic after some investigation to aid in the analysis of any suspicious activities. In addition, they agency asked you as the cybersecurity expert to do this job by analyzing the captured network traffic. You should examine the file "MCBS.pcap". Then you may be required to answer the following questions. a) Type of attack b) IP address of sender c) IP address of recipient/server d) Which port number(s) used? e) Any suggestion to mitigate?

Database System Concepts

7th Edition

ISBN:9780078022159

Author:Abraham Silberschatz Professor, Henry F. Korth, S. Sudarshan

Publisher:Abraham Silberschatz Professor, Henry F. Korth, S. Sudarshan

Chapter1: Introduction

Section: Chapter Questions

Problem 1PE

See similar textbooks

Similar questions

SCENARIO 1: You have just completed a routine security audit on the company’s information systems, and you found several areas of vulnerability. For example, file permissions have not been updated in some time, no comprehensive password policy exists, and network traffic is not fully encrypted. You noted these areas, among others, in a report to your supervisor. The report included specific recommendations to fix the problems. Your supervisor responded by saying that budgets are tight right now, and she could not approve your requests to resolve these issues. As an IT professional, you are very uncomfortable with the risk level, but you have been unable to sway your supervisor. When you discussed the situation with a colleague, he said, “Why worry about it? If it’s good enough for her, it should be good enough for you.” What do you think of your colleague’s advice, and why? Is this an ethical question? If you are still is uncomfortable, what are your options? SCENARIO 2: You work for a…
You have been hired as a cybersecurity consultant for a company that has recently been breached in a crypto malware attack. According to file server logs, a large number of files on the network have been modified (encrypted). The company is looking for your guidance on the requirements below. Please provide a solution (in your own words) and your reasoning. a/ How to determine which files have been encrypted by the crypto-malware attack? The company would like to know the most efficient way as there are over 100,000 files potentially impacted. b/ What kind of policies and/or training would you suggest as a precautionary measure? c/ The company had some backups in alternate servers, but no consistent backup and recovery plan. The organization has agreed to have an RPO of 1 hour and an RTO of 4 hours. Please suggest the most appropriate backup strategy (full, differential, or incremental) to meet the requirement. d/ The company would like your help with their disaster recovery…
Let us assume you are hired by KOI as a network security engineer. You notice that the visits to the main web server is overwhelming. You develop a plan to add two more web servers to balance the load and redundancy. In this plan what requirement of information security is addressed? Choose one of the below options and justify your answer. - integrity - scalability - availability - confidentiality
When you refer to "network security," what precisely do you mean, and how would you explain it to someone else? Justify, within the context of your reasoning, the use of the data encryption technique that is accepted throughout the industry as the standard.
Walk me through a couple possible session hijacking techniques. The question is how one would protect oneself against such an attack.
Create, then document 2 firewall rules that would be important to include if all outbound traffic is being denied by the firewall rules. Explain your decision. Remember, all outbound traffic is being restricted. In order to having a functioning network, what 2 firewalls rules would you create? (ie: Since you have only 2 rules in this assignment, ask yourself, Which type of outbound signals (maybe, ports, OR maybe traffic type OR maybe network access would you permit?)
1. Given that sessions hold users' authenticated state, the fact of compromising the session management process may lead to wrong users to bypass the authentication process or even impersonate as other user. Propose some guidelines to consider when implementing the session management process. 2. When creating a password, some applications do not allow password such as 1111 aaaaa, abcd. Why do you think this practice is important
Could you provide additional details regarding the Cross-Site Request Forgery (CSRF) attack?
Hi, I need to answer this question. The name of the book is "Computer Security and Penetration Testing, 2nd Edition". Thank you. Question: Provide and explain the two groups of attacks related to proxy servers associated with attacks made upon a proxy server and attacks made through a proxy server. How can those attacks be mitigated?
Comparing and contrasting authentication and authorization. What's their connection?
1) In conducting security testing on the Alexander Rocco network, you have found that the company configured one of its Windows Server 2016 computers as an enterprise root CA server. You have also determined that Ronnie Jones, the administrator of the CA server, selected MD5 as the hashing algorithm for creating digital signatures.Based on this information, write a one-page report explaining possible vulnerabilities caused by signing certificates with MD5. The report should cite articles about MD5 weaknesses and include recommendations from Microsoft about using MD5 in its software. 2) After conducting research for Case Project 12-1, you have gathered a lot of background about the release of information on hashing algorithms. Articles on vulnerabilities of SHA-1, MD4, and MD5 abound. The proliferation of programs for breaking DVD encryption codes and the recent imprisonment of an attacker who broke Japan’s encryption method for blocking certain images from pornographic movies have…
We will go through cookies in depth in this part, covering at least four distinct types of cookies and how they influence internet security.