Identifying Potential Risk, Response, Recovery

In this paper I contain just been hired as an Information Security Engineer for a video game development comp whatsoever. I have previously set all of the latent Threats, Vulnerabilities and Malicious Attacks for the videogame development corporation. The CIO have reviewed my report and has straight requested that I draft a report analyzing and assessing all potential Malicious Attacks, Vulnerabilities and Threats that may be carried out against the phoners entanglement. I sp ar for then choose a strategy for dealing with put on the line, such as mitigation, assignment, chance and avoidance.Next I entrust develop controls that ordain be functiond to mitigate each risk. like a shot lets get by wrangleing the nemesis of the Web/ commit transfer protocol master of ceremonies, some servers, or hosts, essential be open to the internet. Web servers are examples of such hosts. You deprivation any phthisisr to be able to entrance fee your web server- but you take overt want everyone to be able to get to your internal network (Fundamentals of Information Systems Security). The simple solution for this is just to isolate the host that is attached to the internet from the internal networks and then create a demilitarized zone.The risk mitigation for the Web/FTP, the FTP is very useful for working with remote corpses, or to move blames between systems. On the otherwise hand the use of FTP across the internet or other untrusted networks, exposes you to certain earnest risk. Your goal authority scheme might non provide enough justification when you renounce the FTP on your system. The next risk for FTP is a hacker stinker mount a denial of service plan of attack with your FTP server to disable user pro filing cabinet (FTP Security). This is usually do by repeatedly act to logging on with the incorrect password for a user profile, generally until the profile is disabled.This kind of attack will disable the profile if it reached the m aximum sign on count of three. If the company use a FTP server logon exit program to winnow out logon requests by any system user profile and those user profiles that the company designate will not be allowed FTP access. Now we will discuss the NIDS, the primary purpose of a network-based intrusion detection system is to identify attackers trying to expose vulnerable network services. The NIDS toilette do to the attack or alert personnel, who can take the necessary and trance actions for this type of attack.NIDS allows administrator to respond to attacks with actions appropriate to their security policy. To properly canvas false alarm reduction strategies, it is necessary to quantify risk and the NIDS intent in risk reduction. The NIDS uses two formulas, one formula assumes that risk is somewhat equivalent to single loss expectancy. This formula for this quantification is SLE= (Asset Value x Exposure Factor) (Fundamentals of Information Systems Security). The next formula sta tes that risk is equal to characterisation multiplied by threat. Risk= Exposure x Threat.This equation determines threat and the type of threat. For example thither are threats of port scans, automated scans and sweeps, defence force of Service and Service attacks and compromises. Now we will move on to Windows 2008 agile Directory Domain Controllers (DC), because domain controllers provide critical services to their clients, it is crucial to minimise the risk of any disruption of these services that may be caused by malicious attacks. Antivirus Software can be used to mitigate the risk of malicious attacks in Windows 2008 Active Directory Domain Controllers.Make sure that you verify the antivirus computer software system you select is confirmed to be compatible with your domain controllers. Do not use domain controller systems as general workstations. some other instruction to prevent malicious attacks on domain controller systems is to not allow users to use domain control lers to surf the web or to perform any other activities that can allow the introduction of malicious code. Only allow browsing on sites that are known to be safe, this will be did strictly for the purpose of supporting server operation and maintenance.Another practice to take place in mind is to firebrand sure that all of the companys files, including the shared ones, should be ran against a virus scanning software. This bring me to the file servers, have the potential to receive different viruses such as worms, Trojan horses and logic bombs. To allow an end user to upload files to your website, is like arising another door for a malicious user to compromise your server (acunetix. com). File uploads are permitted in social network applications. File uploads are also allowed with blogging, e-banking sites and you tube.All of these network sites allow users the opportunity to efficiently share files with merged employees. Users are allowed to share files with corporate employees, through uploaded videos, pictures, avatars and many other types of files. The scoop up way to prevent malicious attacks through the companys file servers is to make sure that the file that is being uploaded is validated. This will prevent a hacker from uploading files with malicious codes that can lead to a server compromise. Another way to prevent a malicious attack on the file server is for the company to block all dangerous extensions.In cases like this, on that point would be a blacklist, the list will show the dangerous extensions and there access will be denied if the extension of file they are trying to upload is on this list. The stovepipe practices to follow when uploading files onto websites and web applications. The first risk mitigation in a file server is to estimate the surface of programs, files, and transaction. Then you will need to prevent deviation in sizing of the files as well as the amount of users that have access to the files. Now we will move forward th e Wireless access point (WAP), this is the radio link between a wired and receiving set network.This is also a wireless security protocol designed to address and fix the known security issues in WEP. WAPs are radios, sending and receiving networking information over the carriage between wireless devices and the wired network wireless (Fundamentals of Information Systems Security). The best way to prevent malicious attacks on a WAP is to increase security. briefly WPA provides users with a higher level of assurance that their data will expect protected by using Temporal Key Integrity protocol for data encryption.If the data is not encrypted then it is considered as fair game, because it would be very easy for anyone that have access to a radio to access this data. The mitigation risk for a Wireless access point is to make sure your technology is updated. Failure to upgrade to newer, more advanced technologies could potentially impact productivity and lead to significant downt ime, security vulnerabilities, and non-compliance issues. Older wireless technology do not support new features and functions that are proving to be so valuable.Next you will need to choose the right carrier, ensuring information is deposit within the supply chain, complying with all the latest government and retailer mandates and taking advantage of all the latest features and functions to save time and money can seem like a daunting task ( Wireless technology Migration Mitigating risk and increasing supply chain efficiency). Now we will discuss the 100- Desktop/Laptop computers, both of these computers are subject to viruses such as worms, hoaxes, Trojans and other security vulnerabilities.The best way to prevent these from occurring is to install and use a firewall. Always make sure you are installing and modify the latest critical security software. Add a virus software scanner, to allow the software to scan your computer for potential viruses. Next we will discuss the VOIP t elephone system, this is one of the newest technologies that is being rapidly embraced by the commercialize as an alternative to the traditional public switched telephone network. The malicious attacks that can occur with this system is denial of service, impersonation or spoofing or doorbellfraud.The best way to prevent this from happening is to add port security, cisco secure access control server, DHCP Snooping, Cisco firewall solutions and intrusion prevention. Data conveyance can also be used to protect the voice work over the wireless LANs. The risk mitigation for desktop/laptop is as followed is to target malware with automated defenses. One of the first line of defenses for any PC or laptop is to block or eliminate viruses, worms, spyware, and other malware, including Trojan downloaders and keystroke loggers, both on endpoints and at the gateway.Deploy anti-malware and filtering software for all netmail gateways, to prevent malware and spam from ever reaching the PCs. N ext you would want to patch your vulnerabilities as quickly as possible, create a password to access your PC or laptop. To really maximize security in a minimal amount of time, as part of the acceptable use policy, prohibit users from installing unauthorized software on PCs or laptops (10 Ways to mitigate your security risk).