Analyze Threat Prevention and Response Solutions and Propose Strategies and Tools for Cloud Security

Part 1: Analyze Threat Prevention and Response Solutions

For this assignment, you must create a presentation that compares different tools and algorithms commonly used in the industry for threat prevention, detection, and control.

Your presentation must include the following:

• title, agenda, and references slides
• Table of industry tools that can be implemented to prevent intrusions or malware attacks.
• Advantages and issues related to the full implementation of the following mathematical models:

• access-control matrix model
• mandatory-access control model
• discretionary access control model
• role-based access control model
• Bell-LaPadula confidentiality model
• Biba integrity model
• Lipner model
• Clark-Wilson model
• Brewer-Nash (Chinese Wall) models
• Graham-Denning model
• Include speaker notes on each slide to assist with the delivery of the presentation.

Length: 9-11 slides

Resources: Minimum of 5 scholarly resources (Ensure to include in-line citations matching your references) using APA 7.

The completed assignment should demonstrate thoughtful consideration of the ideas and concepts presented in the course and provide new thoughts and insights relating directly to this topic. Your response should reflect scholarly writing and current APA 7 standards.

Part 2: Propose Strategies and Tools for Cloud Security

Scenario:

The use of security information event management (SIEM) software detected that a malware attack originated from an international source. As the cybersecurity analyst of NCU-FSB with critical infrastructure and mission-sensitive information, you have determined that the external hackers have the motivation to cause business disruption. The virus penetrated the enterprise’s IT infrastructure, infecting servers, desktops, and laptops; destroying information; and spreading ransomware. The payload of the virus deleted mission-critical files and changed file extensions for all database files.

The attacks have crippled the organization’s ability to make timely business decisions. Further investigation of logs using a security information event management application revealed that there had been significant internal attacks including sniffing, MAC spoofing, WEP/WPA cracking, AP spoofing, and DoS of the company resources due to the weak wireless infrastructure. These attacks have weakened the security posture of the organization.

Instructions:

For this assignment, you must write an academic paper in which you address the malware attack. Your paper should include the following:

• title and reference pages
• Reasons why web-based applications are vulnerable.
• Describe three attacks that can be levied on web servers and their applications. Support this description with supportive reference, where you will describe the economic and operational impact of these attacks, either coming from malware, phishing, whaling, ransomware, or any other.
• Recommend response procedures to be followed to contain the impact and spread of the malicious code, mitigate further damage and regain control of the network, applications or services. These recommendations must include at least two tools recommended as part of the solutions with their corresponding features to mitigate wireless network attacks.
• Reasons why wireless networks are more vulnerable to attacks than wired networks.
• Suggest risk responses in terms of:

• Risk avoidance
• Risk acceptance
• Risk-sharing/transfer
• Risk mitigation through the application of industry best principles and practices and information security policies

• Monitor the infrastructure for security-related events
• Securing of information assets