buy custom After-Action Report essay

buy custom After-Action Report essay Post Event Evaluation of How the Organizations IT Staff Responded to the Attack Describe the Nature of the Incident Spoofing attack enabled the employee to pretend to be the real user of the human resource system. In this spoofing attack, the employee created a misleading context, in order to make an inappropriate security relevant decision (Khosrowpour, 2002). The employee did this by spoofing an IP address, in order to eavesdrop on the network. The spoofing attack was used by the employee to pretend that he was the legitimate user of the human resource system to change his payroll details of his salary. Khosrowpour (2002) noted that the attacker in this form of attack intercepted and deliberately identified where the data was stored and modified. As a result, the employee made changes and received two paychecks with the new amount. The prime goal of the spoofing attack was to establish a connection that allowed the employee to gain root access to the host and to create a backdoor entry path into the organizations human resource system (Paquet, 2009). Through IP spoofing, the attacker gained unauthorized access to the human resource system and sent messages to the system with an IP address that indicated the message was coming from a trusted host. Identify Who Needs to be Notified Based on the Type and Severity of the Incident The chief information officer is the right person to be notified of the incident. This is because the network security of the company had been compromised two times, and this called for the senior management to demand a risk assessment and management report. The chief information officer should write a report geared towards finding out the possible areas, which had security holes allowing the employee to enter or interfere with the companys human resource system. The chief information officer should be notified, because the network security is a dominant concern amid information technology professionals and senior management of the organization. The chief information officer and the network administrator must include a stipulation for examining the network periodically to review its vulnerabilities. Outline How the Incident Could be Contained To address challenges of the attack, Das, Kant Zhang (2012) proposed an efficient and securekey management framework (SEKM) for distributed environments. SKEM will enable the network administrator to build a public key infrastructure (PKI) by means of applying an underlying multicast server group and secret sharing scheme. In a secure and efficient key management framework, the server group creates the view of certification authority (CA) and provides the certificate update services for all nodes, including servers (Das, Kant Zhang, 2012). In order to solve the spoofing attack problem, the management should introduce the concept of public key cryptography. This will enable each person to get a pair of keys; public and private ones. Through this, need for a sender and receiver to share the secret information is eliminated. The organization can implement IEEE 802.11 which has been designed with help of extremely limited management capabilities, using up to four static, long-term, key, shared by all the stations on the LAN (Das, Kant Zhang, 2012). This design will make it difficult for the attacker to revoke access fully from previously authorized hosts. In this context, a host should be revoked when it is no longer associated with the access network point. More importantly, it should be revoked, when it can no longer decrypt and eavesdrop traffic generated by other hosts in the local area network. Discuss How the Factor that Caused the Incident Could be Removed To remove the spoofing attack, the organization should move the network security and its risk assessment from the initial functional concern to a core part of the overall business trategy of the firm. Jones Ashenden (2005) say that the companys local area network presents a substantial risk because it does not address the wider issues of protecting information in the environments through which it flows across the information network (p. 9). Among the network security threats that the organization faces, there are trapping attacks, monitoring activities, intrusions attacks, identification, authentication, access control, availability, privacy, integrity, accountability and non-repudiation. Describe How the System Could be Restored to Normal Business Practice. Human resource systems performance parameters are mainly set to an acceptable compromise between security and usability. Cole (2011) says that the post attack step is to restore the compromised system to its original state. The first step is to remove files that were used in the penetration testing process. Secondly, the administrator revert any network setting changes to their original values. Cole (2011) says that in the process, network cards in promiscuous mode or ARP poisoning from sniffing needs to be corrected. Finally, the registry setting or any other system configuration that were changed during the attack process should be fixed (Cole, 2011). Explain How the System Could be Verified as Operational After the system is restored, it is necessary to ascertain that the system is operational. Cole (2011) says that the operation of the human resource system can be verified by developing a detailed test plan that provides for complete test coverage of the system. The network management and system administrator should establish an orderly schedule of events. The team should determine the expected output and perform a test run against the anticipated outputs. Cole (2011) says that the verification process should be done against a written record of test inputs. During the process, the team must exercise system limits and abnormal inputs. Perform a Follow-up of the Post Event Evaluation Identify Areas that Were not Addressed by the IT Staffs Response to the Incident The Information technology staff has not addressed the network security threats, which include the basic implementations done by organizations, in order to achieve some level of security to their systems. Some of this network security threats include basic integrity and confidentiality attacks. Fung (2004) says that confidentiality and integrity security technologies ensure that the content of a message is not visible to persons other than the intended or authorized recipients. There are some security technologies which provide competitive advantages to the organization. Security technologies have evolved from being basic, enhanced to integrated technologies (Fung, 2004). An example of enhanced security technology which provides competitive advantage is a digital signature which is used for implementing the source non-repudiation, as digital signature is built on the top of hashing algorithms used mostly for implementing confidentiality (Fung, 2004). Integrity and confidentiality ens ures that the organization is assured that its information is safe. Other Attacks Mentioned in the Scenario That Were not Noticed by the Organization Password attack occurred, but it was not mentioned in the scenario. Paquet (2009) says that password attacks can be implemented using several methods, including brute-force attack, Trojan horse programs, key loggers and packet sniffers. The employee used password attack to gain access to the human resource system. Usually, password attacks refer to repeated attempts of identifying password, user account, or both (Paquet, 2009). It is necessary to note that, since the human resource system had sufficient privileges, the employee created a back door for the future access, without concerns for any password and status changes to the compromised user account. Through password attack, the employee was able tto lower the salaries of the president of the company and several other employees, and then to include the salary difference in his own paycheck. Describe the Nature of the Attacks not Noticed by the Organization Integrity attack occurred in the organization. Integrity violations can occur when the employee changes salaries of the president of the company and several other employees, and then include the salary difference in his own paycheck without proper authorization. Paquet (2009) says that the attacker has permission to write the sensitive data and change or delete it. In case of this organization, the HR department did not detect such changes, until it was too late, when the changes had already resulted in tangible loss. This is the most serious threat to the organization because of difficulty while detecting changes, and possible cascading results of late detection (Paquet, 2009). How these Additional Attacks Can be Prevented in the Future The organization should use authentication security technologies to counter password and integrity attacks. Authentication ensures that only users who have permission can access particular information (Fung, 2004). This type of security technology uses Encapsulating Security Payload (ESP), packet filtering techniques, and user id and password authentication methods. Fung (2004) says that message integrity technologies also provide competitive advantage, because they ensure that data from sender to the receiver is the same. A message integrity technology maintains the originality of the information on transit. Message integrity technologies encompass protocols, such as generic routing encapsulation (GRE), point-to-point tunneling protocol and Layer 2 VPNs such as FR and ATM VPNS. The recent trend is that instead of simply responding once an organizations network security has been compromised, companies should move towards the real time proactive monitoring of its operations by using tools of intrusion detection that can assist administrators in spot unusual or illegal activities on the network (Evans, 2003). This means that the firm is able to detect activities that would have gone off unnoticed, which can be easily detected when they are in progress, and be easily blocked or their actions reported to security enterprise administrators. The extranets have to ensure that security will not be compromised. In the company, the extranet security ensures that passwords and identities are encrypted, while being sent through the network. Recovery Procedure to Restore the Computer Systems Restoring the system to its original condition is the most significant step that should be taken by the organization. Restoration means removing programs the employee placed on the computer and cleaning up any altered data files. To restore the system, there are three main options which include repair during continued operation, restoration from backup tapes and reinstallation from the original installation media (Bidgoli, 2004). Bidgoli (2004) further says that the organization should reinstall the human resource system and other program files from the last clean back tape. While restoring the human resource system to its original state, it is necessary to know when the attack begins. To achieve this, the restoration of program files from backup tapes requires the system to be taken offline at least temporarily. In conclusion, the management of the company should realize that globalization brings about tremendous opportunities, and therefore, the need for competitive security technologies should be implemented, in order to counter security threats. The firms network security should start with an evaluation of the known risks, threats, and then the associated impacts. Security professionals must understand, implement and operate effectively enhanced security technologies to ensure the business continuity in the firm. Buy custom After-Action Report essay

Analysis Of Ralph Ellison s Invisible Man Essay -- White people, Bl

In Battle Royal, the first chapter of Invisible Man, Ralph Ellison parallels the struggles of the protagonist to that of minorities in a post-slavery America. Ellison 's character is invited to deliver his graduation speech to a gathering high society white men and finds himself participating in a Battle Royal. Through deeply rooted, almost allegorical symbolism Ellison illustrates the protagonists journey toward self discovery and the â€Å"American dream† in a predominantly white powered society. Throughout this work the narrator/protagonist remains nameless. This namelessness serves to highlight the denial for a significant identity experienced by those who have suffered from the follies of racism. In Ellison 's Battle Royal the protagonist is blind to this racism, which defines him, and portrays himself, as the â€Å"black exception,† by asserting the standards and convictions imposed upon him as a means of achieving success. It is clear that the protagonist is affected by the convictions of those around him when he states that his grandfather 's words of wisdom â€Å"had a tremendous effect upon† him. His blatant naivety and gullibility are foreshadowed as he feels â€Å"guilty and uncomfortable... whenever things [go] well for† him, as if he â€Å"[is] carrying out his [grandfather 's] advice in spite of [himself].† In this particular passage Ellison shows the reader that by being affected by his grandfather 's curse the protagonist subconsciously accepts his grandfathers challenge of achieving success through playing the part of a â€Å"traitor† and a â€Å"spy in enemy territory.† The grandfather 's last words imply that what the protagonist is doing is treacherous and hs act, his speech. With the"thunderous applause" received from the oration of his speech, the protagonist is willingly mislead "in the right direction... of the the destiny of [his] people." Th is allows for the protagonist to maintain the mindset of false superiority. The protagonist mistakingly views himself as a privileged black man causing the hinderance of his journey to self-discovery. The characters surrounding the protagonist are constant reminders of the narrator 's lack of authority on the path of his future. Ellison illustrates this point to highlight that blacks who strive to achieve success or the American Dream through their own terms will only propel themselves farther into the follies of invisibility. In order for the veil to be lifted from the eyes of the blind, men must band together and the fight the powers that may be instead of each other.

Marketing Essay Example | Topics and Well Written Essays - 1500 words - 4

Marketing - Essay Example This extended marketing mix can be very easily applied to consumer markets such as FMCG’s markets, organizational markets such as non-profit organizations, services sector and international markets such as global markets (oil markets and commodities exchange are an example). Recommended ‘Extended Marketing Mix’ for two different segments Following discussion will throw some light on how, the 7 P’s should be transformed and tweaked to apply the extended marketing mix to psychographic and demographic segments in consumer markets which are described above. Product The product or the market offering should be parallel to the demographic variables and psychographic segmentation. If the product is not mass marketed, then offering a differentiated product or tailor-made product for each segment makes more sense. For example, BIC offers its various products according to the segmentation it has done. It has clearly demarcated and allotted each of its products to eac h segment. Offering the wrong product to the wrong market segment would dilute the essence of the brand. Besides, the steps of product development which involve the identification of needs of your target market should be pursued with ultimate care as the whole success of one’s product lies in this particular step. For example ‘Royal Dutch Shell’ released its new product of oils and lubricants for cars in England. The sales were pretty impressive and successful just because of the trend of maintaining cars with high quality products and services. Price Price is one of the most crucial aspects of the mix. When setting a price, it is extremely important to take demographic variables into consideration, for example, the average income of the target market can be a critical indicator to the right price of the product, similarly, factors like age and education may help in evaluating its value to the target market, which in turn suggests if the price can be set liberall y or should it be priced modestly. An example to elucidate the price factor is that the branded products of Armani and Nike with higher prices have a very minimal amount of sales in South East Asia, when compared to the western countries. Evian bottle which costs $4 in US would be a failure if introduced in a less developed country because people there would be reluctant to buy branded water which would guzzle a major part of their income. Promotion Promotion is the easiest way to let your customers know about the merits of your existing or upcoming products. Setting a promotion budget depends on the segmentation that you have done. An ideal example would be of Pantene where great in-roads were made in promotional activities. In the Pantene ad, expensive celebrities like Katrina Kaif are being shown endorsing and patronizing the brand. The promotional strategies should be in coherence with the lifestyle of people. Another example is TESCO who made all the advertisements and banners in accordance with the lifestyle of the citizens of UK to attract them towards their products and services. Placement Placement is not only about just placing the product but it is more about presenting it in the right time at the right place. In this regard, Apple inc. the leading brand in computer technologies devised a perfect strategy to market their product via placement. In the mid 90’

An Experience Related to Crime Essay Example | Topics and Well Written Essays - 250 words - 1

An Experience Related to Crime - Essay Example ïÆ' ¼Ã‚  The actual hit and run incident was not actually observed but the man sprawled just near the middle island of two busy streets was a disturbing sight – especially when people just looked and no one dared to find out if assistance could still be provided. No police officer was on the premises. The initial reaction was to try to bring the victim to the nearest hospital, with the plan of reporting the hit and run incident leading to vehicular manslaughter in the hospital desk. The impact of the criminal incident had unexpected repercussions that could not be forgotten.  A vehicular manslaughter has been defined by Hill and Hill (2005) as â€Å"the crime of causing the death of a human being due to illegal driving of an automobile, including gross negligence, drunk driving, reckless driving, or speeding† (par. 1). In this particular case, it was reported by various bystanders who witnessed the crime as due to reckless driving, in conjunction with speeding. The v ehicle was identified as a cargo truck. Through the assistance of witnesses, who willingly provided their names and contact numbers, the information was likewise relayed to the hospital to be forwarded to criminal investigators and police officers, as required.  I rushed to the hospital the investigation was finally resolved. However, the trauma as spectator, as someone who wanted to immediately give assistance to the victim, and as a community member, rendered this experience as noteworthy and unforgettable.

Exposing Child Abuse and Neglect Essay -- Violence Against Children

In 2012 it was reported that over five million children were abused and neglected in the United States. More than five children die each day as a result of abuse and neglect. (Prevent Child Abuse America). There are many factors that cause child abuse and neglect. The parent factor states that parents who have been abused physically, sexually, or emotionally or were neglected, as children will do the same to their children. Stress plays a major role in the parent factor. Overly stressed parents often take their frustrations out on their children. Alcohol and drug abuse also play a major role in the parent factor. Another factor is the child factor. It states that some children are more vulnerable to abuse or neglect than others from parents or guardians due to their age, size, emotional stability, as well as their social development. A third factor is the family factor states that the situations that occur in the family can increase the likelihood of child abuse and neglect. That was the case with young Dave from the above passage. Because his mother no longer got the attention she needed from his father she began to take out her anger and frustrations on him. Finally, the environmental factor states abuse and neglect is often caused by a combination of the previous three factors (U.S. Department of Health and Human Resources). When dealing with the issue of child abuse and neglect several questions are often raised: when does disciplining a child turn into child abuse, what happens to these children that survive the abuse and neglect, and is there a solution to stopping child abuse?   Ã‚  Ã‚  Ã‚  Ã‚  Whenever the issue of child abuse and neglect is raised, the statement is often made that I have the right to discipline my child however I see fit. Parents often feel that disciplining their children is a right that they have. My mother would often tell me, â€Å"I brought you into this world and I sure will take you out.† Now days the government tells the children that if their parent or guardian put their hands on them the children have the right to call the police on the parents. This leads to the question when is it okay and how do I discipline my child? Children should only be disciplined to let them know that their actions or behavior in a certain situation was not acceptable. There are many ways to discipline a child. One way is to put the child in time out wh... ... of abuse has made you pay. I never knew how you felt; Your self-esteem so low. I only knew you crept away, And never let your feelings show. I never knew what I could do; That I could help somehow. That all you needed was a friend; Just someone to be your pal. But now I know that I can help; I can make a difference, too. I’ll shout with you, and All the rest can’t say, â€Å"I never knew.† (Pelzer 175). Child abuse and neglect is greatly affecting the lives of young children. It is a dangerous epidemic that seems to be growing by the day. Work Cited Landau, Elaine. Child Abuse: An American Epidemic. New Jersey: Silver Burdett Press, Inc. 1984 Prevent Child Abuse America. Child Abuse and Neglect Statistics. 2014. http://www.menweb.org/throop/abuse/studies/child-ma.html Pelzer, Dave. A Child Called â€Å"It†. California: Health Communications, Inc. 1995. U.S. Department of Heath and Human Resources. Child Abuse & Neglect. 2014 http://www.acf.hhs.gov/programs/cb/focus-areas/child-abuse-neglect Walker, C. Eugene, Bonner, Barbara L., and Kaufman, Keith L. The Physically and Sexually Abused Child Evaluation and Treatment. New York: Pergamon Books, Inc. 1988.

Handout the American Civil War

Handout â€Å"A House Divided†: Towards the American Civil War, 1831-1861 Causes of the American Civil War 1. social-economic differences between North and South 2. regional conflict about over slavery in unorganized territories 3. break-up of national political party system; emergence of new party system based on region (i. e. North-South) (see also handout week 4) 4. ideological and cultural polarisation between North and South Constitution: three-fifth’s clause; fugitive slave clause; slave trade clause 820 Missouri Compromise: – Missouri admitted as slave state – Maine created as free state – Line of 1820 (36 . 30 ) 1828-1833 – South Carolina tariff nullification crisis 1831-1860 – antislavery activism (1831: William Lloyd Garrison –The Liberator) 1831 slave rebellion led by Nat Turner in Southampton County, Virginia 1845 annexation of Texas 1846-1848 Mexican War 1848U. S. victory over Mexico; territorial expansion (Californ ia, Utah and New Mexico territories) 1850 Compromise of 1850: California admitted as free state – â€Å"popular sovereignty† in New Mexico and Utah – slave trade prohibited in District of Columbia (Washington, DC) – Fugitive Slave Act 1852 Book publication Harriet Beecher Stowe's novel Uncle Tom's Cabin 1854 Kansas-Nebraska Act (â€Å"Bleeding Kansas†) 1854 splitting of Whig; foundation Republican Party (â€Å"Free Soil, Free Labor, Free Men†) and American (â€Å"Know Nothing†) Party 1857 Dred Scott Decision of the U. S.Supreme Court led by Chief Justice Taney (pro-slavery) 1859 raid on Harpers Ferry (John Brown) 1860 Democratic Party splits into two (North vs. South) November 1860 – Lincoln (Republican Party) elected president December 1860 – South Carolina secedes from the union 1861- January: secession of Mississippi, Florida, Alabama, Georgia, Louisiana, and Texas – February: adoption Confederate Constitution and creation of Confederate States of America (South); pres.Jefferson Davis; capital: Montgomery, Alabama. – March: inauguration of Pres. Lincoln – 12 April: attack on (federal) Fort Sumter by door Confederate (Southern) troops; beginning of the Civil War 9 April 1865 – surrender by (Confederate) general Robert E. Lee (Appomattox) 14 April 1865 – assassination attempt on Pres. Lincoln; Lincoln dies on April 15. George Fitzhugh, Sociology for the South (1854) and Cannibals All! or, Slaves Without Masters (1856) John Calhoun, Disquisition on Government (1850)

Implementation Of No Child Left Behind - 1564 Words

The ever evolving world of education calls for constant reflection and revision of processes and protocols in a school district. With the implementation of No Child Left Behind, the seed of standard based teaching took root and developed into greater endeavors like the Common Core Learning Standards. As each state has adopted these standards, teachers and students are becoming more aware and accustomed to using the standards every day in the classroom. In moving with this natural progression comes the notion of standards-based reporting and communication with parents. Schools are shifting from traditional to standards based reporting because it is a better way to communicate with parents and students about the progress their child is making in school. With the current reporting system, parents are often times helpless when trying to assist their child because the areas of growth are not specifically defined. With the wealth of technology, tutors, and information that can be prov ided, it is crucial to be most specific when reporting the progression of a child through skills in life. Not only does standards based reporting help identify what skills a student may struggle in, but also what one excels in as well. Teachers can use this information to differentiate instruction and carry gifted and talented students to higher levels in the already too short amount of time they are in school. In order to effectively implement a standards-based grading and reporting systemShow MoreRelatedWhy Is Common Core Necessary?961 Words   |  4 PagesCommon Core necessary? Common Core is needed to stabilize education. Through the implementation of Common Core, every child will learn the same thing at the same time. Education throughout the country would be equal and no child would truly be left behind. The theory of Common Core is good, but the implementation so far has not been. Creating an unified teaching curriculum is a great idea for any child who would be moving across the country, or even to another state, mid-school year; thatRead MoreEssay about Anotated Bibliography No Child Left Behind760 Words   |  4 PagesLevente Vizi Professor Di Gloria ENC 1101 T2 137 25 March 2012 Annotated Bibliography What the paper Whats Missing from No Child Left Behind? A Policy Analysis from a Social Work Perspective. argues is that the No Child Left Behind bill might not be accomplishing its purpose. Moreover, the paper sheds light on the social and emotional risk factors that prevent students from succeeding in school. In the end, the article suggests that school social workers are capable of eliminating theseRead MoreEvaluation Of A Program Based Assessment Data For The Calculation Of Multi Year Averaging1072 Words   |  5 Pagesancillary services to achieve at levels commensurate with their abilities. High-achieving students. Students who score 90% or above on any portion of the CRCT tests. Instructional Extension. A state-funded academic instructional program designed for implementation beyond the regular school day to address the academic needs of low performing students. Middle school. A school that enrolls 11-15 year-old students in grades six, seven, and eight. Multi-year Averaging. If a school fails to make AYP based onRead MoreEducating Children With Learning Disabilities1612 Words   |  7 PagesTermpapermasters.com, Inc. by M. Hall 8/2009 Introduction Educators and parents sometimes have very different views on the education of their children and the best approaches to classroom process. Educational initiatives since the implementation of the No Child Left Behind Act (NCLB) has led to increasing focus on providing parents with adequate data for decision-making and promoting positive parent/teacher interactions. For children with learning disabilities, the team approach based on interactionsRead MoreCritical Analysis of Problems and Issues in Education Essay examples1547 Words   |  7 Pagesa child’s tuition. Their choices ranged from private or parochial schools, these are schools that many of these children may not experience otherwise. Charter schools were also options because they are run much like private schools. The thought behind voucher programs is that a sense of competition would be created. The hope is that a higher educational output and an improved level of education would be provided. Proponents of t he program believe that children from poor public school districtsRead MoreEducation Is An Important Part Of Society1690 Words   |  7 Pageswould receive a good education. However, not every child was receiving the same education opportunities based on money issues surrounding them and the minority they were classified as, the No Child Left Behind Act of 2001 was to ensure that these issues would be dissolve. On January 8th of 2002, six months and one war later after George W. Bush first proposed the No Child Left Behind bill, it was finally passed. Under the No Child Left Behind, every state was required to develop and implement strictRead MoreThe Education System Of Education1728 Words   |  7 Pageseducation in our nation all together?† In 2002 our American education system was one that was failing. High school test scores showed that year by year our student’s success was falling further and further behind. Since 2002, under the watch of former president George W. Bush, â€Å"No Child Left Behind† was put into legislation. The act in itself was one to keep a closer eye on how students are doing. The former president was well aware of the issue. Bush knew of the statistics on American education thatRead MoreNo Child Left Behind Act Vs. Every Student Succeeds Act Essay1711 Words   |  7 Pages Boesenberg No Child Left Behind Act vs. Every Student Succeeds Act December 10, 2015: We Won, RIP No Child Left Behind! Headlines such as this one, seen on the American Federation of Teachers newsletter, were commonplace on this momentous day for all involved in the American educational system. Newspapers ranging from the New York Times to the Washington Post, to nearly every small town daily chronicle, celebrated the end of a much-maligned era; that of No Child Left Behind. On this momentousRead MoreEssay On No Child Left Behind840 Words   |  4 PagesNo Child Left Behind (NCLB) was produced to make 100% of students’ proficient by 2014. While the idea sounds perfect on paper, it is not the case when it is put into action. NCLB was replaced in 2015 and replaced by the Every Student Succeeds Act. Many students did not use the resource effectively due to the fact that not all children have the same views and desires toward fulfilling their education career. This in turn makes it hard for the teachers to follow the education guidelines while alsoRead MoreThe Children Left Behind788 Words   |  3 PagesThe Children Left Behind (Rough Draft 1) Learning disability is a worldwide problem affecting over 2.4 million children in the United States alone. All types of communities are afflicted by learning disabilities causing problems, but it seems children in urban areas struggle the most, as those schools generally don’t provide extra help. Disabilities like attention deficit/hyperactivity disorder (ADHD), dyslexia, and dyscalculia are issues you can see by looking at someone, and are often overlooked