Computer ForensicsDiscussion 1Forensics Certifications Ple.docx
- 1. Computer Forensics Discussion 1 "Forensics Certifications" Please respond to the following: · Determine whether or not you believe certifications in systems forensics are necessary and explain why you believe this to be the case. Compare and contrast certifications and on-the-job training and identify which you believe is more useful for a system forensics professional. Provide a rationale with your response. · Suppose you are the hiring manager looking to hire a new system forensics specialist. Specify at least five (5) credentials you would expect an ample candidate to possess. Determine which of these credentials you believe to be the most important and provide a reason for your decision. Discussion 2 "System Forensics Organizations" Please respond to the following: · Use the Internet or the Library to research and select one (1) reputable system forensics organization. Provide a brief overview of the organization you chose, including what it provides for its members, and how one can join the organization. Indicate why, in your opinion, this particular organization would be the best choice for a system forensics professional to join and why you believe this way. · Examine what you believe to be the most important reason for a systems forensic professional to be a member of a forensics organization and how this could further one’s career in the industry. Cyber Security Discussion 1
- 2. "Leading Through Effective Strategic Management" Please respond to the following: · Propose three ways to ensure that cooperation occurs across security functions when developing a strategic plan. Select what you believe is the most effective way to promote collaboration and explain why. · Explain what may happen if working cultures are overlooked when developing a strategy. Recommend one way to prevent working cultures from being overlooked. Discussion 2 "Installing Security with System and Application Development" Please respond to the following: · Provide three examples that demonstrate how security can be instilled within the Systems Development Life Cycle (SDLC). Provide two examples on what users may experience with software products if they are released with minimal security planning. · Suggest three ways that application security can be monitored and evaluated for effectiveness. Choose what you believe to be the most effective way and discuss why. Computer Security Discussion 1 "Current Events and Future Trends" Please respond to the following: · How can we create a national security culture where all are more cognizant of security threats and involved to help prevent potential incidents? How do we balance the need for this security culture with the rights guaranteed to us by our Bill of Rights?
- 3. Research Topics (Choose 1 Topic) · Terrorism remains one of the major concerns in the wake of the 9-11 events. Research into terrorism as it pertains to homeland security is conducted by corporations like the RAND Corporation, which is federally and privately funded. Terrorism as a research topic presents students with many different areas of fruitful inquiry. Possible topics in the area of terrorism include advanced community planning in response to the potential threat of terrorism, how to improve recruitment and retention within the homeland security counter-terrorism force, economic concerns in the aftermath of disaster, and the cost of increased security. Cybersecurity · Cybersecurity is another major research concern of homeland security. Given the potential for cyber-terrorism and the increased dependence on computers and the Internet for modern business, an act of sabotage against the nation's network infrastructure could prove devastating. Areas of concern noted by the Department of Homeland Security include combating malware and botnets, combating threats within the U.S., usable security, attack attribution and situational understanding, systems evaluation, and the survivability of time-sensitive threats. Privacy · Privacy is another major concern in homeland security, so much so that the Department of Homeland Security issued a research report in November 2010, dealing with the use of volunteers in homeland security research and their right to privacy in that setting. In the aftermath of the Patriot Act, signed into law in October 2010, the Department of Homeland Security and other government agencies have had to deal with the privacy issue. The Patriot Act gave government agencies like the FBI the right to use surveillance tools that had already
- 4. been used against crimes like drug trafficking. Fruitful areas of research in this area include studies into the psychological impact of the Patriot Act on the American public, the extent to which citizens should have privacy or give up privacy in exchange for protection, and the way in which privacy rights impede the ability of investigators and counterterrorism units to do their job. Environmental Security · A fourth major concern within Homeland Security and of the Environmental Protection Agency is the potential environmental impact of biological and nuclear attacks on the United States. Areas of research that have been noted by the EPA include outdoor and indoor contaminant research, technological testing and evaluation programs, the vulnerability and responses of the nation's water systems, infrastructure protection, contaminant mitigation, decontamination and treatment, and risk assessment. Security and Cryptography · The Journal of Theoretical and Applied Information Technology affirms that computer security is a significant topic to write about. Analyzing how identity thieves use the Internet and how they are stopped makes for an interesting research paper. Some areas to discuss are phishing scams, email Trojans, and key log trackers. In the never ending cat-and-mouse game played by thieves and security agencies, you can discuss how modern security methods stop and catch thieves. Parallel Query Optimization · You can write about how databases retrieve information. For example, a person who has invented a device first has to do a search to make sure the device hasn't been patented already. The United States Patent Office (USPTO) uses "and" and "or" statements in its public patent search area. If an inventor has an idea for a new type of paint brush, he would type in "paint" AND "brush" to search the database only for "paint brush." If he was to use "paint" OR "brush" the database would return results for any patents that contains the word "paint" or any patents
- 5. that contains the word "brush" as well. Optimized Video Streaming · When the Internet was in its infancy, all connections were dial-up. This was extremely slow, but through a gradual evolution, baud rates (the rate of data transfer) increased dramatically. In 2010, video streaming is possible, with many "tube" sites available for people to upload and download video. Making the data transfer process as fast as possible is a science, and you can write about how that science is currently being used and refined. Cloud Computing: A new Era of IT Opportunity and Challenges · IT industry stands at the threshold of a new era in the technological leap. Cloud computing is everything that could answer the problems of IT companies. Cloud computing has the ability to make IT resources more cheaper and it gives businesses a great flexibility to expand. Discuss how cloud computing will prove to the next milestone in IT world. Internet Censorship: Should It be Allowed? · It is an issue that has created huge controversies after some world renowned Internet Search engines were banned in some countries. Should we control the flow of information? Is Internet censorship essential to avoid several cyber crimes? Study and analyze the both sides of the coin, giving innovative alternatives to it. Some Other Information Technology Research Paper Topics ✍ Assessment of Robot Assisted Surgery ✍ Issues of Privacy and Databases in the Ever Broadening IT World ✍ The Future of Artificial Intelligence ✍ E-commerce and the World Wide Web: An Evolving Relationship ✍ Genetic Engineering and Role of Computers in It
- 6. ✍ Controlling Pornography over the Internet ✍ Evolving Human Computer Interaction ✍ The Future of Computational Photography ✍ Sensor Networks Evolution: Opportunities and Challenges ✍ Claytronics Future Applications ✍ Future of Bioinformatics and Biometrix ✍ Electronic surveillance In Modern World ✍ Future of Social Media ✍ Multimedia over ATM Networks ✍ Comparative Study of Windows, Linux, Unix, and Ubuntu ✍ Basic input/output system (BIOS) Functions and Modifications ✍ Growing Challenges in Website Development ✍ Making Parallel Packet Switches Practical ✍ Network Congestion Control Program (NCP) ✍ Design and Study of Single Buffered Routers ✍ Implementing Real-Time Programmable Shading ✍ 3-D Rendering Algorithms ✍ Simulation & Analysis of Musculosekeltal Systems ✍ Human Modeling and Simulation Future ✍ Multilayer Switch In Networking Computer Security Paper Assignment #8 - Due in Week 10 · Term Paper: Your final will consist of a 5-6-page paper for this course. Students will select from a range of topics provided by the instructor. The topics will consist of a broad category within the Information Security field. · Submit your findings with APA references. (Check the research topics doc to select topic to write paper on) Cyber Security Paper
- 7. The Rookie Chief Information Security Officer Due Week 10 and worth 200 points This assignment consists of five (5) parts: Part 1: Organization Chart Part 2: Request for Proposal (RFP) Plan Part 3: Physical Security Plan Part 4: Enterprise Information Security Compliance Program Part 5: Risk Management Plan Imagine that you have been recently promoted to serve as Chief Information Security Officer (CISO) for a Fortune 500 organization. This organization has known brand products across the world and expects top-secret methods for safeguarding proprietary information on its recipes and product lines. The Board of Directors request that their information security strategy be upgraded to allow greater opportunities of secure cloud collaboration between suppliers and resellers of their products. Another concern they have is the recent number of hacktivist attacks that have caused the network to fail across the enterprise. Their concern extends to making sure that they have controlled methods for accessing secured physical areas within their various regional facilities. For your new position, you will be responsible for developing standards, methods, roles, and recommendations that will set the new IT security path for the organization. The existing organization has limited experience in supporting an enhanced level of IT security; therefore, you may need to outsource certain security services. Additionally, you may create and / or assume all necessary assumptions needed for the completion of this assignment.
- 8. Write an eight to twelve (8-12) page paper in which you provide the following deliverables: Part 1: Organization Chart 1. Use Visio or an Open Source alternative, such as Dia, to: a. Create an organization chart in which you: i. Illustrate the roles that will be required to ensure design, evaluation, implementation, and management of security programs for the organization. ii. Within your organizational chart, clearly identify the reporting structure for roles such as IT Security Compliance Officer, Security Manager, CIO, CISO, IT Security Engineer, Privacy Security Professional, and IT Procurement Specialist. iii. List the types of resources required to fulfill the each forensic duty of the organization below each of the roles you identified. iv. Align your organization chart to reflect the Department of Homeland Security (DHS) Essential Body of Knowledge’s three (3) areas of information security: physical security professional, privacy professional, and procurement professional. Provide comments and comparisons on how your organizational chart fosters these three (3) values. Part 2: Request for Proposal (RFP) Plan 2. Develop a Request for Proposal (RFP) plan to solicit qualified vendors that could partner with your internal team to deliver optimum IT service delivery. The RFP Plan should contain qualifying criteria of potential vendors and the responsibilities of the vendor once
- 9. the contract is awarded. As part of the plan, you must: a. Describe at least two (2) perspectives that need to be closely monitored within the contract. b. Give your perspective on at least two (2) methods that could be used to evaluate and develop a qualified trusted supplier list. Part 3: Physical Security Plan 3. Recommend a physical security plan that could be used to protect sensitive areas such as telecom rooms, employee only areas, and manufacturing facilities in which you: a. Include at least three (3) specific methods. Part 4: Enterprise Information Security Compliance Program 4. Establish an enterprise information security compliance program that addresses the concerns of the board of directors of the organization in which you: a. Describe specific plans and control objectives that could be adopted to address the known issues. b. Suggest at least three (3) information security policies that could be developed and practiced within the organization for data security assurance. c. Outline the steps you would take to define the security needs of the organization in terms of duties, staffing, training, and processes. Part 5: Risk Management Plan 5. Develop a risk management plan in which you: a. Describe at least three (3) possible risk management
- 10. efforts that could be used to assess threats and unknown issues. b. Determine why defining priorities is an important part of the process when enumerating and having efficient risk control measures. c. Suggest specific technical and management controls that could be enacted in order to monitor risks accurately. 6. Use at least three (3) quality resources in this assignment. Note: Wikipedia and similar Websites do not qualify as quality resources. Your assignment must follow these formatting requirements: · Be typed, double spaced, using Times New Roman font (size 12), with one-inch margins on all sides; citations and references must follow APA or school-specific format. Check with your professor for any additional instructions. · Include a cover page containing the title of the assignment, the student’s name, the professor’s name, the course title, and the date. The cover page and the reference page are not included in the required assignment page length. · Include charts or diagrams created in Visio or one of its equivalents such as Dia. The completed diagrams / charts must be imported into the Word document before the paper is submitted. The specific course learning outcomes associated with this assignment are: · Describe and apply the 14 areas of common practice in the Department of Homeland Security (DHS) Essential Body of Knowledge. · Describe best practices in cybersecurity. · Describe physical security plans and processes. · Evaluate the ethical concerns inherent in cybersecurity and how these concerns affect organizational policies.
- 11. · Explain legal and regulatory compliance practices. · Explain risk management plans and policies. · Describe physical security plans and processes. · Develop a cybersecurity plan that incorporates the Department of Homeland Security (DHS) Essential Body of Knowledge. · Identify the strategic management issues in cybersecurity planning and response. · Explain data security competencies to include turning policy into practice. · Compare and contrast the functional roles of an organization in the context of cybersecurity. · Identify and analyze the role of the Chief Information Officer, Information Security Officer, and IT Security Compliance Officer in the context of cybersecurity. · Use technology and information resources to research issues in cybersecurity. · Write clearly and concisely about topics associated with cybersecurity using proper writing mechanics and technical style conventions. Computer Forensics Paper Investigating Data Theft Suppose a large aerospace engineering firm has immediately hired you as a consultant to investigate a potential violation of corporate policy and data theft. You have been informed that an employee may have been using corporate email to send confidential corporate information to one or more personal email accounts, which may or may not belong to him. You have been told that this action has been happening each business day for the last 13 days and the employee is unaware of any suspicion.
- 12. Write an eight to ten (8-10) page paper in which you: 1. Explain, in detail, the initial actions you would take based on the provided information including formal plans to preserve the crime scene(s) and eventual transportation of evidence to a lab. 2. Analyze the physical and logical places where you would look for potential evidence on the suspect's computer(s) and / or network servers. 3. Describe, in detail, how you proceed with the email investigation, including the review of email headers and tracing. 4. Describe the processes that would be utilized in order to recover data that may have been deleted from the suspect's computer(s). 5. Identify the tools you would use to perform your investigation from beginning to end based on the information you have on the incident. Provide a brief overview of each tool, to include: · A description of the tool. · How you would use the tool in the investigation. · How the tool helps the investigation and the evidence you expect it to provide. · Why you believe the evidence the tool provides is critical to the investigation. 6. Use at least five (5) quality resources in this assignment. Note: Wikipedia and similar Websites do not qualify as quality resources. Your assignment must follow these formatting requirements: · Be typed, double spaced, using Times New Roman font (size 12), with one-inch margins on all sides; citations and references must follow APA or school-specific format. Check with your professor for any additional instructions. · Include a cover page containing the title of the assignment, the student's name, the professor's name, the course title, and the date. The cover page and the reference page are not included in
- 13. the required assignment page length. The specific course learning outcomes associated with this assignment are: · Identify the role of computer forensics in responding to crimes and solving business challenges. · Outline system forensics issues, laws, and skills. · Examine and explain the evidence life cycle. · Identify the procurement of evidence in physical and virtualized environments. · Analyze the impact of sequestration on the evidence-gathering process. · Develop plans that collect evidence in network and email environments. · Examine automated digital forensic analysis. · Use technology and information resources to research issues in computer forensics. · Write clearly and concisely about computer forensics topics using proper writing mechanics and technical style conventions.