Reference no: EM132504034

Assignment: 1) You are the web master of a college website. You share a server with other school departments such as accounting and HR.

Based on this chapter, create at least five security-related rules for staff members who are adding web pages being added to your site. Include a justification and explanation for each rule. Rules should relate to college, staff and student, and system information security.

Write it in 200+ words and references

2) Do a bit if research into File Inclusion Vulnerability. Post it in 200+ words and references

a) What is it? Why is is dangerous?

b) What is the difference of low and remote inclusion?

c) What methods can me employed to prevent a security breach? What programming languages are vulnerable to this type of attack.

3) You are the web master for the Republican Party National Committee. Prepare a risk assessment analysis for your website. Some questions to consider:

a) Who is likely to attack your site? When are attacks likely to occur?

b) What sort of attacks might take place?

c) How can you best minimize attacks and protect the integrity of your site?

Write it in 200+ words and references.

4) Do a bit of research on penetration testing techniques. Investigate and document the following in 200+ words and references.

a) Five network penetration testing techniques

b) Advantages and disadvantages of each

c) One notable social engineering test

d) Possible negative implications of penetration tesing

5)Do some research on Threat Response software. Find one particular software package to investigate

a) What does the software do?What are it's major features?

b) What kind of training is required? How much does the software cost?

c) Do not do the same software as everyone else.

Post it in 200+ words and references.

6) Write a brief paper on the following topics, Post it in 200+ words and references.

a) What is the Dark Web? How is it accessed?

b) How is it used by criminals? How can it be used in a positive way?

c) How can be used by law enforcement and the intelligence services. How can be used by private individuals.