Denial of Service attacks are estimated to happen once every six months (twice a year) in a mid-size company. One such company, XYZ, estimates the cost of recovering from a single DoS attack to be $10,000. The company decides to apply a number of controls to counter these attacks. With these controls, the frequency of successful DoS attacks against the company reduces to once a year and the cost of recovering from an instance becomes $6,000. The cost of implementing these controls is $12,000 a year. From a purely financial point of view, is it worth for the company to implement these controls? None of the these O Yes, because the measures will save the company $2,000. O No, because the measures will cost the company $2,000.

Denial of Service attacks are estimated to happen once every six months (twice a year) in a mid-size company. One such company, XYZ, estimates the cost of recovering from a single DoS attack to be $10,000. The company decides to apply a number of controls to counter these attacks. With these controls, the frequency of successful DoS attacks against the company reduces to once a year and the cost of recovering from an instance becomes $6,000. The cost of implementing these controls is $12,000 a year. From a purely financial point of view, is it worth for the company to implement these controls? None of the these O Yes, because the measures will save the company $2,000. O No, because the measures will cost the company $2,000.

Database System Concepts

7th Edition

ISBN:9780078022159

Author:Abraham Silberschatz Professor, Henry F. Korth, S. Sudarshan

Publisher:Abraham Silberschatz Professor, Henry F. Korth, S. Sudarshan

Chapter1: Introduction

Section: Chapter Questions

Problem 1PE

See similar textbooks

Similar questions

Denial of Service attacks are estimated to happen once every six months (twice a year) in a mid-size company. One such company, XYZ, estimates the cost of recovering from a single DoS attack to be $12000. The company decides to apply a number of controls to counter these attacks. With these controls, the frequency of successful DoS attacks against the company reduces to once a year and the cost of recovering from an instance becomes $8000. The cost of implementing these controls is $7,000 a year. From a purely financial point of view, is it worth for the company to implement these controls? Calculate the prior and post ALE and do a cost-benefit analysis to answer the question. In your answer make sure that you indicate what ARO, SLE and ALE are with and without controls. State clearly whether the company should implement the controls and explain why.
A phishing attack on a certain social media platform locks users out of their accountsand spreads by sending malicious links to their followers to gain access to more accounts. On thefirst day, the attack has hacked into 2 accounts. Near the beginning of each of the following days,each hacked account sends links to 4 new accounts, which subsequently become hacked as well.By the end of the second day, IT support has found a way to restore users’ accounts, and 1 accounthas been restored at that point. Each day thereafter, 5 times as many accounts have been restoredas the previous day. (a) Write a recurrence relation for the total number of hacked accounts at the end of day n.(b) Solve the recurrence relation.(c) How many days will it be until all users’ accounts have been completely restored?
A software is used to calculate the number of integers ranging from 1 to 10. The software is developed by a programmer who understands reusability and maintainability, and it counts the numbers from k to n. In contrast, a team of security specialists analyzes the code. The team verifies that this software properly sets k to 1 and n to 10; as a consequence, the program is certified as sufficiently restricted to operate only within the range of 1 to 10. List numerous methods to sabotage this program so that it computes a certain number, such as 3 to 20, during operation.
A SAF authorization form is used in most universities to approve funding for students to aid their studies. Suppose a student fills out a blank form and sends it to his or her departmental chairperson for a signature. If the amount of funds requested by the student is small (under 10,000 Tk), then the chairperson signs the form and routes it to accounts payable to be input into the accounting system. The system cuts a check that is sent to the student for the right amount, and after the check is cashed, the form is filed away with the canceled check. If the check is not cashed within 30 days, the form expires. When the amount of the requested fund is large (over 10,000 Tk), the chairperson signs the form and sends it to the chief financial officer along with a paragraph explaining the reason for the grant, and the chief financial officer will sign the form and pass it along to accounts payable. Both the chairperson and the chief financial officer can reject the SAF authorization form…
Scenario 2 An organization dedicated to reducing spam tries to get Internet service providers (ISPS) in an East Asian country to stop the spammers by protecting their mail servers. When this effort is unsuccessful, the anti-spam organization puts the addresses of these ISPS on its "black list." Many ISPS in the United States consult the black list and refuse to accept email from the blacklisted ISPS. This action has two results. First, the amount of spam received by the typical email user in the United States drops by 25 percent. Second, tens of thousands of innocent computer users in the East Asian country are unable to send email to friends and business associates in the United States. Questions 1. Did the anti-spam organization do anything wrong? 2. Did the ISPS that refused to accept email from the black listed ISPS do anything wrong? 3. Who benefited from the organization's action? 4. Who was hurt by the organization's action? 5. Could the organization have achieved its goals…
Bob has designed a secure login system for the student portal of the Xiamen University of Technology (XUT). In Bob's design, a two-factor authentication method is used for verifying the authenticity of the user. A brief description of the design is provided below. For the two-factor authentication, the followings are required: • Factor 1: a user first required to provide a secret password, • Factor 2: the user then needs to provide the correct answer to a security question. To securely store the user password in the system, Bob has used state-of-the-art encryption algorithm, Advanced Encryption Standard (AES), to encrypt the user password and stored the encrypted password in the system database. For securely signing in to the system: the user needs to provide his/her user ID and the corresponding password. This information will be transmitted to the system over a secure communication channel. Upon receiving this information, the system will: o locate/retrieve the corresponding…
Write a threat model with all necessary details for the following scenario: A writer goes to the CAF-POW coffee shop for their free public open WiFi and uses his laptop to access the Internet.
It is important to compile a list of all known hazard categories and rank them according to the frequency with which they occur, preferably with URL proof.
HackerLand National Bank has a simple policy for warning clients about possiblefraudulent account activity. If the amount spent by a client on a particular day is greaterthan or equal to 2 ×the client's medianspending for the last d days, they send the client a notification about potential fraud. The bank doesn't send the client any notificationsuntil they have at least d prior days of transaction data.Given the value of d and a client's total daily expenditures for a period of n days (where n>d) write amethod which returns the number of times the client will receive a notification over all days.Note: Your algorithm time efficiency should not exceed O(nd) where n is the total number of daily expenditures and d is the number of prior day expenditures used for frauddetection.Your algorithm space complexity should not exceed O(n+d).where n is the total number of daily expenditures and d is the number of prior day expenditures used for frauddetection.Space complexity is defined as the…
Give an example of how a full denial of service attack on a user (where the user receives no answer from the computer) causes a serious problem for that user. Another example is given in which a 10% denial of service (the user's computation proceeds but at a 10% slower rate than usual) is a big concern for that user. Illegal access to a computer system can cause a 10% denial of service attack on legitimate users of that computer system. If that's the case, how would you go about it?
Create a risk assessment for the following scenario, being sure to include all of the pertinent information: A writer goes to the CAF-POW coffee shop with his laptop so that he may make advantage of the free public open WiFi that is offered there.
Take, for example, a piece of software that, over the internet, permits a surgeon in one area to perform surgery on a patient in another. And now that the program is over, who would want to keep going? What kind of destruction do they want to cause? To what extent would they look to your weaknesses in order to pull you down? Is it possible that damage may be caused by such vulnerabilities even if there were no hostile aggressor present?