Reference no: EM131412096
Case Project 12-1: Web Server Security Analysis
A challenge that faces the information security community is to make sure their organizations' top decision makers understand the importance of effective security policies. Understandably, managers who are responsible for an organization's financial stability want to ensure that investments in "nonrevenue" activities are necessary and effective. In many ways, the field of information security is in its infancy; practitioners do not have a long history of research that indicates the most effective security countermeasures against specific threats. Also, the threats are constantly changing. As new generations of information security workers secure digital assets, they will also need to create a solid body of research-based evidence to support the practices they recommend. In this project, you read and summarize a research project that addresses Web server security.
Go to www.sans.org/reading_room/whitepapers/webservers/comparative-studyattacks-corporate-iis-apache-web-servers_33734. Read the entire article, including the appendices. Answer the following questions:
1. What was the purpose of the research project?
2. What did the research demonstrate about the relative security of the IIS and Apache software?
3. What do you think detracted from the credibility of the report?
4. What were the main findings of the study?
5. What did the results of the study imply about the frequency of automated attacks versus the frequency of manually controlled attacks against Web servers?
6. Based on the results of the study, what policies and procedures would you recommend for Web server security?
7. Based on this study, which operating system is easier to attack: Windows or Linux?
|
Manufacture wine goblets
: You manufacture wine goblets. In mid-June, you receive and order for 10,000 goblets from Europe. Payment of €400,000 is due in mid-December. You expect the €uro to rise from its present rate of $1=€1.5, to a rate of $1=€1.4 by December.
|
|
Which competitors might be adversely affected
: The rumor mill has been filled with stories of Amazon and its desire to the enter the world of brick and mortar retailing. Now comes evidence (via a liquor license) that it is planning a drive-through grocery. Your task is to write a position pape..
|
|
Whether or not given is a good sampling plan
: She decides to sample lakes by randomly dropping grains of rice on the map and measuring the area of the lakes hit by the rice. Comment on whether or not you think this is a good sampling plan.
|
|
Weighted average cost of capital
: What is the weighted average cost of capital for Crescent Corporation?
|
|
What was the purpose of the research project
: What did the results of the study imply about the frequency of automated attacks versus the frequency of manually controlled attacks against Web servers?
|
|
The case of sampling service times at the bank window
: The sampling by touch method is said to suffer from selection bias, in that the longer strings get chosen more often than the shorter ones.- What are the implications of this phenomenon in the case of sampling service times at the bank window?
|
|
Create a customer relationship management plan
: Think of a company that has provided great customer service to you recently.What did it do? How did it go beyond what you expected? What do companies have to do to get employees to deliver such services?Are loyalty programs more likely to be successf..
|
|
Calculate usd denominated cash flow scenarios for project
: Project - Specific financial analysis: Exchange rate scenarios, cost of capital estimate. How does this number differ from the inflation parity rate? Which exchange rate scenario is closest to the implied forward rate? Calculate the USD denominated c..
|
|
How one might get unbiased data in given situations
: Suggest other situations in which selection bias could be important. Discuss how one might get unbiased data in these situations.
|