Information Security Group Project (I wasn't in class, Solo Project) by Badreddin Messaudi

General

bame6892 — 2024-04-05 06:10:37 UTC

Information security includes safeguarding all data types to preserve their confidentiality, integrity, and availability. Cybersecurity is a subset of information security that focuses on defending digital data from cyber threats. Sophisticated ransomware, phishing schemes, and the malevolent application of artificial intelligence are among the emerging developments in information security that need that enterprises implement AI-driven detection systems, layered security defenses, and ongoing staff education. According to the UpGuard article, companies may utilize role-based access, user-friendly security solutions, and flexible policies that allow for remote work to strike a balance between security and productivity. This will guarantee that employees have the access they need without jeopardizing data protection.

bame6892 — 2024-04-05 06:24:09 UTC

General Response Video

Group A (hacking)

bame6892 — 2024-04-05 06:31:33 UTC

The ethics and legality of black-hat, gray-hat, and white-hat hackers vary. Ethical hackers, sometimes known as "white-hats," protect systems by finding vulnerabilities with authorization and acting lawfully. ambiguous-hat workers operate in an ethically and legally ambiguous area by working without express authorization and disclosing vulnerabilities to the general public or the system's owners. Black-hats operate unlawfully and take advantage of weaknesses for their own gain or harm. White-hats want to increase security; black-hats want to earn money or other benefits; and hacktivists, who are a subset of the black-hat community, want to further political objectives. White-hats perform penetration testing, whereas hacktivists and black-hats may use malware or DDoS attacks. Their strategies are in line with their objectives.

Video

bame6892 — 2024-04-05 06:31:56 UTC

Group B Authentication

bame6892 — 2024-04-05 06:38:20 UTC

By integrating Multi-Factor Authentication (MFA) into all user access points, such as cloud and on-premise applications, VPNs, and server logins, organizations may improve authentication security. Adhering to standards like RADIUS and OATH, providing a range of authentication factors for user convenience, integrating MFA with single sign-on and least privilege access schemes, and employing adaptive MFA to modify requirements based on context are examples of best practices. Using biometrics has drawbacks, such as possible privacy violations and the possibility of irreversible compromise. Ensuring biometric data is securely maintained, restricting its usage, and offering alternatives to users who are uncomfortable with biometric authentication are all necessary to strike a balance between security and privacy.

Video

bame6892 — 2024-04-05 06:39:16 UTC