ISEC5006: Fundamental Concepts of Data Security - Report Writing - IT Assignment Help

Assignment Task:

Question 1 (16 Marks) 

Ransomware attacks are becoming more common nowadays targeting large organisations. In 2017, a medical centre in the United States suffered from a major attack by a ransomware known as SamSam, which encrypted data on more than 6,000 computers of the centre, making them unusable to staff and clinicians. The attack exploited three vulnerabilities: 1) a vulnerability in a Java-based application server; 2) the availability of remote desktop protocol (RDP) on many Windows machines in the organisation; and 3) poor password security practices (such as not changing the default password of some IT equipment or using weak passwords). It took over two weeks for the system to be restored and costed the organisation over $10 million worth of damage. 

• Which security goal (Availability/Integrity/Confidentiality) was compromised by this ransomware attack? Explain your reasoning. Your argument must be based on the information within the question. 

• Suggest one technical preventive control, one technical detective control, and one administrative preventive control that should have been taken by the victim organisation prior to the attack in order to prevent it from happening.

Question 2 (12 Marks) 

• Explain why the Clark-Wilson model can prevent unauthorised modification of data despite the fact that it does not explicitly require subjects and objects to have multiple security levels like the Biba model does. 

• Suppose that the Clark-Wilson security model is used by a bank to implement an Internet banking system so that customers can access their accounts and perform transactions online using an Internet browser on a computer. From the customer’s perspective, give an example of the relevant part of the Internet banking system best describes 

– Constrained data items (CDIs) – Unconstrained data items (UDIs) – Transformation procedures (TPs) – Integrity verification procedures (IVPs) 

For each example, briefly describe your reasoning.

This ISEC2001: IT Assignment has been solved by our IT Experts at My Uni Paper. Our Assignment Writing Experts are efficient to provide a fresh solution to this question. We are serving more than 10000+ Students in Australia, UK & US by helping them to score HD in their academics. Our Experts are well trained to follow all marking rubrics & referencing style.

Be it a used or new solution, the quality of the work submitted by our assignment experts remains unhampered. You may continue to expect the same or even better quality with the used and new assignment solution files respectively. There’s one thing to be noticed that you could choose one between the two and acquire an HD either way. You could choose a new assignment solution file to get yourself an exclusive, plagiarism (with free Turnitin file), expert quality assignment or order an old solution file that was considered worthy of the highest distinction.