a)  Distinguish the TWO (2) methods for encrypting network traffic on the Web. 

b)  Briefly explain the following terms.
 i. Cyber warfare - Cyber warfare involves the actions by a nation-state or international organization to attack and attempt to damage another nation's computers or information networks through, for example, computer viruses or denial-of-service attacks. RAND research provides recommendations to military and civilian decision makers on methods of defending against the damaging effects of cyber warfare on a nation's digital infrastructure.

 ii. Computer Forensic - Computer forensics is the practice of collecting, analyzing and reporting on digital data in a way that is legally admissible. It can be used in the detection and prevention of crime and in any dispute where evidence is stored digitally. Computer forensics follows a similar process to other forensic disciplines, and faces similar issues.

Question 3
a) Without protection against malware and intruders, connecting to the Internet could be very dangerous. Firewalls, intrusion detection system and antivirus software have become the tools to overcome this problem. Briefly explain these THREE (3) tools. 

b) Information systems controls is one of the components of an organizational framework for security and control. Information systems controls consist of two - general and application control. A company must know how and where to deploy security tools and security personnel must know what controls a company must have in place to protect its information system. Contrast between General Controls and Application Controls. 

Question 4
Malicious Software programs are referred to as Malware. Describe FOUR (4) types of malicious software. 

Question 5
a) Nowadays securing information systems has become an important issue in organization to protect itself against computer crime. Define computer crime and provide an appropriate example. 

Computer crime describes a very broad category of offenses. Some of them are the same as non-computer offenses, such as fraud, except that a computer or the Internet is used in the commission of the crime. Others, like hacking, are uniquely related to computers. The example of computer crime is hacking, logic bombs and phishing.

b) Briefly explain THREE (3) reasons why information systems are vulnerable to destruction, error and abuse? 

c) Discuss the THREE (3) most important tools and technology for safeguarding information resources. 

Question 6
a) Identity management software automates the process of keeping track of all information systems users and their system privileges, assigning each user a unique digital identity for accessing each system. Define authentication.

The process of identifying an individual, usually based on a username and password. In security systems, authentication is distinct from authorization , which is the process of giving individuals access to system objects based on their identity. Authentication merely ensures that the individual is who he or she claims to be, but says nothing about the access rights of the individual.

b) Identify and briefly describe FOUR (4) authentication technologies. 

a) Describe ransomware. 
Ransom malware, or ransomware, is a type of malware that prevents users from accessing their system or personal files and demands ransom payment in order to regain access. The earliest variants of ransomware were developed in the late 1980s, and payment was to be sent via snail mail. Today, ransomware authors order that payment be sent via cryptocurrency or credit card.

b) State how do we prevent and protect our computer from ransomware.

1. Security awareness training

2. Updates, patches and configuration

3.  Up to date asset inventory

c) Discuss the effects of computer crime to an organization. 

The effect of computer crime to an organization is Computer crime can damage business' reputation and erode the trust that customers have for the organization. This could potentially lead to loss of customer, loss of sales and reduction in profits. The effect of reputational damage can even impact on suppliers, or affect relationships with partners, investors and other third parties vested in the business.

1. Security isn’t simply a technology issue, it’s a business issue. Discuss.

Security is an important business issue because it affects the competitive and strategic issues of the organization. As the lines between work and play blurs due to the advances of technology, it becomes more apparent that ‘Information Security’ within the workplace is not just the IT department’s issue. Information or data is a business enabler, it enables operations and productivity so, the security of it should be viewed as essential and promoted throughout the company – but, in most cases it is not.

2. Who poses the biggest security threat: insiders or outsiders?

There are a number of insider threats related to data leakage (accidental or on purpose), fraudulent action through an integrity breach, loss of availability, or business continuity as a result of insider mistakes or deliberate action. In general, insider threats can cause significant business impact, not only because of the privileges that employees have over information technology but also because the company theoretically has its employees under its control, being responsible for their actions, in contradiction to external threats. External threats, including cyber threats, are an evolving type of threat requiring organizations to improve their cyber security capability and ensure that the appropriate framework and especially cyber security skills are present. There is a third category with increasing importance. Those are the partners, services providers, and subcontractors of a company. In this category, the line between internal and external is sometimes barely visible. In any case, enterprises have to ensure that their threat model includes this category and take the necessary measures to mitigate the related risks

3. Suppose your business had an e-commerce Web site where it sold goods and accepted credit card payments. Discuss the major security threats to this Web site and their potential impact. What can be done to minimize these threats

Malicious software and computer viruses are some of the biggest security threats to any E-commerce website. Viruses are normally from external sources and can corrupt files on website if introduced into the internal network. Viruses can completely destroy a computer system and disrupt the operations of the website. Trojan horse is malicious software that has the ability to capture the clients’ information, before any encryption software can take effect. They can also impersonate a customer and pass over bad and malicious codes into the server running the website. to avoid these viruses, Users should exercise reasonable precautions in order to minimize the introduction and spread of computer viruses onto the Rhodes networks. Virus scanning software should be used to check any software downloaded from the Internet or obtained from any questionable source. Virus protection software has to be installed on the computer; check frequently for virus signature updates; and actually scan the files on the PC. 

Cyber warfare is a serious problem that should be addressed.  With technology being  utilized world wide to control missiles and warfare, having a cyber threat is as serious if not more serious than a physical threat.  Cyber warfare can also act as a catalyst and induce an all out strike of terror on other countries. Cyber warfare is more complex than conventional warfare. Although many potential targets are military a country’s power grids, financial systems, and a communication network can also be crippled. Non-state actors such as terrorist ore criminal groups can mount attacks, and it is often difficult to tell who is responsible. Nations must constantly to be on the alert for new malware and other technologies that could be used against them, and some of these technologies develop by skilled hacker groups are openly for sale to interested governments.

2. What solutions are available for this problem? Do you think they will be effective? Why or why not?

The solution that the country must take to prevent from this problem is Computer crimes or rules should therefore be established, maybe in combination with an organization monitoring the cyberspace, with large and serious consequences against states violating these rules. Cyber weapons won’t go away and their spread can’t be controlled. Instead, as we’ve done for other destructive technologies, the world needs to establish a set of principles to determine the proper conduct of governments regarding cyber conflict. They would dictate how to properly attribute cyber attacks, so that we know with confidence who is responsible, and they would guide how countries should respond.