Posted: September 30th, 2022

Homework Assignment #2

Cybersecurity Technique and Administration
Boston Faculty, ISYS6641, Fall 2022
Homework Assignment #2
Please submit your homework on the day it’s due utilizing the homework submission device on the course
web site. You will have to login to submit your homework. Please don’t e mail the doc to the teacher.
Your homework must be in PDF or MS Phrase format and please don’t use any fancy structure or
formatting; in different phrases, the easier the format the higher.
The file title to your homework should embody your title and the precise hw#. As well as, you could of
course embody your title and your e mail deal with as a part of the doc. (Some college students all the time neglect to do
this.) There’s a penalty for late homework and the graded homework will probably be returned on-line. Your homework
should be your personal work, in your personal phrases.
HOMEWORK #2
1.) As the CIA Triad is used to explain three vital safety targets: confidentiality, integrity and
availability.
a.) Briefly describe a particular incident or instance from a information story inside the previous six months that pertains to every
of the three targets of the triad. In different phrases, your reply ought to describe three completely different incidents. Though
one incident may (and doubtless does) embody components of multiple a part of the triad, you need to state
explicitly which a part of the triad every of the three incidents you describe is concentrated upon. Embody the hyperlink for the
story and say which a part of the triad is related to that story. (NOTE – You shouldn’t use the examples now we have
mentioned at school.) [6 points for the entire question]
2.) The Firefox breach monitor web site experiences whether or not or not an e mail deal with has been a part of an information breach. Strive
two or extra of your e mail addresses and report the outcomes. The hyperlink for the web site is:
https://monitor.firefox.com/ [2 points]
three.) The NIST Cybersecurity Framework contains completely different components known as Core perform, classes, subcategories
and informative references. The explanation for this division is that every factor supplies an growing stage of element to
Help clarify and handle the precise safety requirement. For instance, contemplate the connection (typically
known as a mapping) ranging from the core perform of Defend, to the class of Information Safety (PR.DS) after which the
subcategory PR.DS-1 which specifies that Information-at-rest is protected. An instance of a services or products that
implements this requirement can be complete disk encryption comparable to offered by File Vault in OSX or BitLocker
in Home windows.
Describe two different examples of this Core/Class/Subcategory mapping, and as a part of your description,
embody data on a services or products that implements (or helps) the requirement. Your examples ought to
be chosen from two completely different core features.
[6 points for the entire question]
four.) To state the apparent, Zoom utilization skyrocketed over the previous few years. Assume that you’re the CISO for a
massive M&A agency that has been utilizing Zoom to debate their offers, in addition to different very delicate monetary
data with shoppers. You may have been requested by the CFO of the agency to analysis and report on the safety
vulnerabilities that had been reported about Zoom within the spring of 2020.
Extra particularly, the CFO desires to know what, in your opinion, had been the 2 most important safety
vulnerabilities that had been recognized throughout that point. The CFO assumes that these have been patched since then so
you do not want to debate their decision. Your report must be three or 4 paragraphs lengthy and it ought to focus
on the vulnerability and what would have occurred if the vulnerability was exploited by a nasty actor.
Put apart to your report a dialogue of Zoom’s privateness insurance policies about consumer’s private information which weren’t
very clearly defined at the moment. Additionally, put apart for this report back to the CFO the issue of Zoom bombing since
that difficulty was very nicely understood. [4 points for the entire question]
Listed below are a pair hyperlinks for background:
https://www.theguardian.com/expertise/2020/apr/02/zoom-technology-security-coronavirus-video-conferencing

Ex-NSA hacker drops new zero-day doom for Zoom

© 2022 L. Evenchik Web page 2 of two
5.) As mentioned at school all pc working techniques right now embody software program that may generate public/personal
(uneven) key pairs, and as you’ll anticipate, there are web sites that reveal the identical factor.
One of many web sites is known as the On-line RSA Key Generator and the hyperlink for it’s:
http://travistidwell.com/jsencrypt/demo/
The aim for this Question Assignment is to reveal how keys are generated and what keys of various sizes appear to be.
Do not forget that an extended secret’s “stronger” than a shorter key, however there’s a tradeoff, which is said to
efficiency.
Utilizing this web site, create a 512 bit key pair after which a 4096 bit key pair. You are able to do this by choosing the important thing size
from the pull-down menu after which clicking the “Generate New Key” button.
A.) Examine the keys and word any variations between the private and non-private keys (in a sentence or two)
B.) Talk about the distinction in time when producing the longer versus shorter key pair?
[2 points for the entire question]

Order | Check Discount