Fluent Essays

Summative Discussion Board Review and reflect on the knowledge you have gained from this course. Based on your review and reflection, write at least 3 paragraphs on the following: What were some of common steps to be taken to prevent common breaches learned from the course? What were the most compelling topics, such as incident response and prevention techniques learned in this course for mitigating breaches? How did participating in discussions help your understanding of the subject matter? Is anything still unclear that could be clarified? What approaches could have yielded additional valuable information? Attached are some of the assignment I did for the student in the past discussion Running Head: DISCUSSION BOARD 1 DISCUSSION BOARD 2 Discussion Board Name Institution Affiliation Discussion Board One of the most compelling topics that I learned in the course is requirement analysis, which used in the development of performance and functional requirements. I have learned that system engineers have to ensure that the requirements are complete, unambiguous, understandable, and concise. The topic of design synthesis has also attracted my attention in this course. It is the approach of defining the item or products in the forms of software and physical elements that make up a system (Henshall et al., 2017). The result is physical architecture. Each component is required to meet at least one functional requirement, and any part can enhance many functions. My participation in discussions has reinforced my understanding of the subject matter. It offered me an opportunity to dig deep into the course content by exchanging ideas. This expanded my horizon of learning and knowledge by extending a chance to the participants to improve my abilities to think critically. The group discussion has been critical in helping me develop problem-solving skills. It brought together members with diverse opportunities to share their experiences. I considered it as among the approach for sharing ideas of the course content, which broadened my view of the topics in this course. Most of my peers in the group demonstrated clarity in expressing themselves, which was critical in convincing the rest about their ideas. An area that I would need more clarification is functional analysis and allocation. I understand that this is a top-down process of translating the system-level requirements. However, I would require clarification of the development of a functional architecture that supports the synthesis of solutions. I feel that the professor was very effective in engaging the students during the delivery of instructions. I could see the professor maintain eye contact with me and other students and also demonstrated enthusiasm in the course to ensure that they remain attached to the discussion. Besides, the lectures were made more impactful by the visual presentation of some complex concepts into simple diagrams. This achieved to create active learning that attracted me into the course. The utilization of a discussion board in this course was of great importance to me. It created an opportunity for interacting with all my classmates in sharing ideas concerning the topic. I was able to examine the different viewpoints of my classmates, together with their defense. I think this is a safe and respectful platform where I was able to view and respond to my peers concerning the course content. I feel that additional valuable information about the course can be delivered through flipped lecturing. It implies sharing videos and other course material to students to study at home before the commencement of a lecture. Blended learning can be instrumental in yielding additional value. It is a combination of the common lecturing process, independent study, and online learning. This approach allows students to gain more control over the pace, time, and style of their learning (Henshall et al., 2017). An example is the addition of online tests. Another method is student-led learning, where they take active roles in facilitating the learning outcomes. This approach involves prior learning of the course content and presenting the findings to the peers. It initiates the solving of problems since the students get opportunities for reflecting and exercising what they learn previously. This approach can be significant in providing additional value on the course because it stirs collaborative learning. References Henshall, E, Campean, F & Rutter, B. (2017). A system approach to the development of enhanced learning for engineering systems design analysis. Retrieved from https://pdf.sciencedirectassets.com/282173/1-s2.0-S2212827117X0005X/1-s2.0-S2212827117300215/main.pdf?X-Amz-Security R u n n i n g H e a d : D I S C U S S I O N B O A R D 1 Discussion Board Name Institution Affiliation Running Head: INCIDENT MANAGEMENT 1 INCIDENT MANAGEMENT 4 Incident Management Name Course Tutor Date Incident Management Every second count when an incident occurs. Malware infections spread rapidly and can cause catastrophic damages if not well managed. They can compromise accounts that are then used to escalate the damage, leading the further attack to sensitive assets. An effective incident team is critical in this moment in ensuring that an organization is back on its feet after the attack (Shackelford et al., 2016). During cybersecurity incidents, the response team may face significant pressure that alters their objectives. Periodic training can adequately equip the teams with the necessary skills and experience for responding to the incidents. The efforts should focus on achieving specific main objectives of management. They should include the following objectives: Incident Detection This objective involves the identification of a security incident. The response team should embark on research to explore the attack in detail. Sufficient information should be gathered concerning the situation. The entry point should be examined as fast as possible, as well as the breadth of the breach (Vasiu & Vasiu, 2018). This objective is eased and quickened by availing all the security tools to filter into a single location. An organization can install an intrusion detection system (IDS) on the network. Although it does not offer additional security, it is significant in the identification of the attacks on the system. The system can be configured to monitor specific activities and alert the incident response team in an event a threat is detected. Handling Incident handling should include processes like malware analysis, packet-sniffing, and other related actions that risk contaminating the machines used in the response. It is recommended that each team member has at least two computing devices, like laptops. Incident analysis resources can support the handling process (Vasiu & Vasiu, 2018). Some of the examples include the current baseline of projected system, applications and systems, and port lists. Others include laptops, workstations for digital forensic, and blank removable media. Some critical communication facilities for the handlers should be provided. Examples include contact information, encryption software, and incident reporting mechanisms. Response A security incident is likened with a forest fire. After it is detected together with the source, the event has to be contained to prevent further damage. The incident response team disables the network access for computers that are identified to have been infected by malware or viruses. The machines are quarantined, and security patches are installed. This process removes network vulnerabilities and resolves malware issues. Another response may be resetting the password for users whose accounts were breached. The accounts for insiders that may have caused the incident are blocked. Recovery This objective entails efforts of making an attacked organization operational again. The response team should back up all the affected systems to maintain their current state for later investigation. A system network validation is a critical effort at this stage (Shackelford et al., 2016). It should be accompanied by testing to ensure all systems are operational. Any component that was compromised should be recertified as secure and functional. The response team should install a long-term containment strategy that goes beyond returning all the system to production for regular business activities. The recovery needs to include a lockdown of a purge to user accounts and backdoors that can facilitate intrusion. Sustainability The objective of sustainability is to ensure that the changes made will be maintained in the long run. The process also ensures that the system is more secure than before from future attacks as an organization moves to a risk-based approach. The efforts need to include periodic and rigorous security testing, especially in high-risk areas such as the machines that have previously been attacked. An application security testing framework strengthens the cybersecurity plan for an organization. It is also critical in the sustainability of the security plan in preventing future attacks. References Shackelford, J. S, Fort, L. T & Charoen, D. (2016). Sustainable cybersecurity: Applying lessons from the green movement to managing cyber attacks. Retrieved from https://illinoislawreview.org/wp-content/uploads/2016/10/Shackelford.pdf Vasiu, L & Vasiu, L. (2018). Cybersecurity as an essential sustainable economic development factor. European Journal of Sustainable Development, 7(4): 171-178. Retrieved from https://pdfs.semanticscholar.org/859d/47f06042805b97e8a4b84728cc6b8ea99681.pdf R u n n i n g H e a d : I N C I D E N T M A N A G E M E N T 1 Incident M anagement Name Course Tutor Date Running head: SOFTWARE PROCESS IMPROVEMENT 1 SOFTWARE PROCESS IMPROVEMENT 5 Software Process Improvement Name Date Software Process Improvement Summary Software process improvement(SPI) gets defined as a method that is composed of a sequence of techniques, tasks, and tools to implement and plan activities for improvement, to achieve goals like cost reduction and high quality of products as well as increase the speed of development. SPI gets made up of four steps that are cyclic that entail several aspects including evaluation of the current situation, planning of improvement, and implementation of the improvement and finally the evaluation process of the improvement (Norimatsu et al., 2018). SPI can get considered as a project for change management that can be used by organizations in detecting inefficiencies in their software development lifecycle and help resolve them to improve their processes. Initiation of SPI in an Organization An organization will have to follow the various SPI process steps in initiating it into the organization to help in the development and improvement of the company. These steps are critical in ensuring that the right techniques get used to avoiding errors that could potentially lead the organization into worse performance instead of improving it. The various steps of the process are as discussed below. Evaluation of the current situation This step involves assessing the software process's current situation by obtaining the necessary information from the stakeholders, conducting an analysis of the deliverables and artefacts and making identifications of the inefficiencies in the current software process (Norimatsu et al., 2018). The information can be elicited through conducting interviews with the stakeholders, observations and analyzing case scenarios, among other appropriate means. Planning for improvement The results of the analysis of the current situation and goals for improvement get placed in categories and prioritized on the basis of what is of more importance or a matter of urgency. The priorities come with the alignment of the needs of the stakeholders, establishing how new target levels for improvement in the organization should look like. Implementation of the improvement This step involves the execution of the activities that were planned in the previous step, meaning that now, the improvement gets put into practice in order to establish the outcomes desired by the organization. The improvements get spread across the organization in an iterative way to make it possible for the organization to realize the achievements from the SPI early. Evaluation of the improvement This step makes it possible for the organization to make comparisons of the actual change and that which gets planned in order to make decisions and allocate resources based on actual results and progress that is expected. Importance and contribution SPI is important within an organization because it is practical and standard clearly created for the development of software in an organization, and it makes it possible for employees to be satisfied at their job with the good quality of products that get produced and a reduction in the workload. SPI ensures consistency and improves quality through its tools, making it possible for employees to play different roles in a project. Also, SPI contributes significantly to the success of projects through the reduction of costs of projects that get done by eliminating redundancies, issues and deficiencies as well as enhancing the progress (Kuruba & Chitimalla, 2018). Another way SPI helps in project success is through its outputs that include products that are valuable, delivery of projects, meeting the goals of the organization, standards that are quality, and documentation that is professional. Another way it contributes to project success is through improving the satisfaction of customers, SPI does this by delivering projects on time and on the basis of specifications of high quality which goes a long way in improving the satisfaction of customers and improving the process of sales. For these reasons, therefore, SPI comes highly recommended for organizations that aim to optimize their performance. References Kuruba, M., & Chitimalla, P. (2018). Quantitative software process improvement program using lean methodology. In Quality, IT and Business Operations (pp. 335-346). Springer, Singapore. Norimatsu, S., Kishi, T., & Wada, N. (2018, September). Development of “SPI Strategy Framework” and Its Application. In European Conference on Software Process Improvement (pp. 307-317). Springer, Cham. Running head: DIGITAL FORENSICS 1 DIGITAL FORENSICS 5 Digital Forensics Theory Name Course Tutor Date Digital Forensics Theory What is the meaning of digital forensics theory and its intended application during the digital forensics investigation? Digital forensics is that branch or aspect of forensic science whose concern is the recovery of materials I digital materials to aid investigations. In many cases where investigators are handling a case where they would have to look at digital materials, and they would have to obtain some data from the materials, it is more likely than not that they would have to invite the assistance of specialists of digital forensics. Thus, digital forensics theory refers to the processes, procedures, and laws that are used in digital forensic investigations (Holt et al., 2015). It is important to note that digital forensics is not a simple undertaking. Because the findings of digital forensics are supposed to be used in legal proceedings, it is incumbent upon the leaders in this field to make sure that they act in accordance with all the laws regarding the practice. Thus, the primary role of digital forensics theory is to make sure that the digital forensics investigators work within the law in practice. As indicated above, the theory of digital forensics plays an important role in making sure that the practice not only adheres to the law but also maintain a specific order and adherence to the law. Before gaining access to digital material and seeking to retrieve data or evidence from it, there are legal provisions that must be satisfied. There are many instances where courts of law have rejected evidence because it was obtained irregularly. The theory of digital forensics covers these legal provisions, and that means it will be immensely useful to digital forensic experts. What are the processes used by digital forensics investigators to identify threats and root causes of attacks against networks and systems? When there are attacks on networks and computer systems, it is the responsibility of digital forensic experts to investigate the attacks and come up with mechanisms and approaches that they may use to prevent future attacks. When investigators are investigating such attacks, there are approaches and protocols that they follow. The following is an analysis of the steps that these professionals follow in the process according to Davidoff and Ham (2012); Identification This involves identifying and classifying the attack based on the indicators that are generated from the network indicators. Preservation Obtain physicals and digital evidence and keep them safe so that they may not be lost, tampered with, or altered in any manner. Collection Appling standard tools and methods to gain access to and create duplicates of the digital data on preparation for analysis Examination Carry out an in-depth search for any piece of evidence that may be related to the attack from the pieces of materials that were collected Analysis Analyze the evidence collected and obtain as much information as possible with regard to the attack, and make conclusions about the nature of the attack and any other relevant information. Presentation Present the findings of the investigations to the relevant authorities for appropriate action. How can digital forensics produce evidence to determine what resources have been affected by the threat? Digital forensics is capable of giving information on the resources that have been affected by a threat to networks and systems. It is important to note that digital forensics is capable of making it possible for investigators to understand the nature of attacks and the sources, in addition to the resources that have been affected. Even without going into the details concerning the parts of the computer systems, to understand the potential areas of interest of the attackers. Additionally, from the vulnerability test, it is possible to understand the resources that might have been vulnerable. References Davidoff, S., & Ham, J. (2012). Network forensics: tracking hackers through cyberspace (Vol. 2014). Upper Saddle River: Prentice Hall. Holt, T. J., Bossler, A. M., & Seigfried-Spellar, K. C. (2015). Cybercrime and digital forensics: An introduction. Routledge.