Principles of Information Security 4th Edition 347

----Wk2----

--Exercises--

1. 3 different categories. Deliberate act of trespass, deliberate act of sabotage or vandalism, and deliberate act of theft.

2. Launched a series of highly publicized denial-of-service attacks in February 2000 against large commercial websites. The U.S. Federal Bureau of Investigation and the Royal Canadian Mounted Police first noticed Calce when he started claiming in IRC chatrooms that he was responsible for the attacks. He became the chief suspect when he claimed to have brought down Dell's website, an attack that had not been publicized at that time.[

3. The manual contains all or most of the phreak material and public resources availalbe on the web. A security admin can use the manual to make sure the communications network is protected from the known phreak methonds in the manual, and all loopholes are closed up.

4. http://csrc.ncsl.nist.gov/ - This site has info about new security standards for organizations from cryptology to network security.

http://www.symantec.com/avcenter/ - Information on the latest viruses and security advisories.

--Case Exercises--

1. Iris was justified in determining who the owner the CD was, because she was trying to determine who she needed to give the CD back to.

2. The hotline was the most effective due to the fact that approaching Henry could have caused him to destroy any of the evidence that showed he was passing information to someone else.

3. Iris should not have placed the CD back at the coffee station, because once she knew that Henry was selling information, she had a responsibility to report what she found.

----Wk3----

--Exercises--

1. Websrv6 should be evaluated first. Mgmt45 should be evaluated last.

3. SLE ARO ALE

5000 52 260000

75000 1 75000

500 52 26000

2500 4 10000

5000 2 10000

500 12 6000

5000 1 5000

1500 52 78000

2500 4 10000

250000 .05 12500

250000 .10 25000

500000 .10 50000

5. ARO ALE

12 80000

.50...