Information/Cyber Security Group Project by Richard Nguyen

General Question: Information Security vs Cyber Security

ring5069 — 2024-04-10 21:04:03 UTC

The major difference between information security and cyber security is the coverage of security that both provides. Cyber security only covers information digitally, while information security is more general and covers both physical and digital info and access.

Some trends and threats with info. security right now is social engineering, use of ai for password cracking, and different types of hacking.

Organizations can balance the need for info. security and need for employee access by limiting certain functions and access to only certain employees. For example, new employees shouldn't have permissions to access vast amounts of data, but instead should be limited to what they only need.

Video Resource: https://www.youtube.com/watch?v=RDiD0wq2VWo

Group A: Social Engineering

ring5069 — 2024-04-10 21:29:49 UTC

Social engineering is the ability to gain unauthorized access and information through human activity rather brute forcing a system. Some common examples include phishing, scareware, and tailgating. Organizations can protect themselves by informing employees about these attacks and upholding policy to prevent certain actions (i.e. holding the door for someone you don't know).

Some emerging trends with social engineering is doing more physical acts, such as tailgating and dumpster diving, and using ai to fake interactions with employees (i.e. using ai voices and video in a zoom call). Organizations must educate to employees about these particular attacks and having a protocol if they feel like they're being attacked.

Video Resource: https://www.youtube.com/watch?v=v7VTJhkJUUY

Group B: Authentication

ring5069 — 2024-04-10 21:54:15 UTC

Organizations can use multi-factor authentication (MFA) to help prevent certain attacks from occurring. Organizations must make sure every employee has it or else a gap in the security system can be exposed. Organizations also must choose the right system for their MFA and make sure it integrates easily with their current system.

Some people may not be comfortable using biometrics for authentication. Biometrics also aren't always consistent (i.e. having water on your finger while using a fingerprint scanner) and can also be duplicated, which can be a huge security flaw. Organizations must chose a MFA system that is both transparent and secure to ease in employees into using biometrics.

Video Resource: https://www.youtube.com/watch?v=07mRDyydCNY

NOTE

ring5069 — 2024-04-10 21:56:42 UTC

The text resources are the embed photos on each table
Thank you for allowing to turn in this project late

📹General Question Video

ring5069 — 2024-04-10 22:14:04 UTC

Group A: Social Engineering Video

ring5069 — 2024-04-10 22:25:28 UTC

Group B: Authentication Video

ring5069 — 2024-04-10 22:38:44 UTC