Discussion

On the discussion forum, please post a 500-word summary of the results of your research paper (cyber intelligence sharing and protection act)

Reply 1:-

Abstract

Cybercrimes are in charge of the interference of typical PC works and has been known to cause the ruin of numerous organizations and individual elements. This exploration paper expects to talk about after parts of Cybercrimes: the definition, why they happen, laws administering them, strategies for carrying out cybercrimes, who they influence, and cybercrime avoidance methods. All the more explicitly, this paper will dive into one fundamental case of cybercrime “hacking”. The report will demonstrate the utilization and movement of innovation has enhanced distinctive sorts of wrongdoings, for example, robbery violations and fear based oppression. Additionally, this report will show measurable information which will give a thought of how far cyber crimes has increment over the time of ten years or more.

Introduction

A commonly accepted definition of this term is that a cybercrime is a “crime committed using a computer and the internet to steal a person’s identity or sell contraband or stalk victims or disrupt operations with malevolent programs” (Definition of Cybercrimes).

Web users might be uninformed of cybercrimes, not to mention what to do on the off chance that they fall casualty of digital assaults. Numerous honest people succumb to cybercrimes around the globe, particularly since innovation is developing at a fast pace. Cybercrimes are any wrongdoings that reason damage to another individual utilizing a PC and a system. Cybercrimes can happen by issues encompassing entrance of protection and secrecy. Whenever protection and private data is lost or hindered by unlawfully people, it offers approach to prominent wrongdoings, for example, hacking, digital fear mongering, reconnaissance, budgetary burglary, copyright encroachment, spamming, digital fighting and a lot more violations which happen crosswise over fringes. Cybercrimes can transpire once their data is rupture by an unlawful client.

The aim behind this paper is to instruct people who don’t have the foggiest idea what are cybercrimes and its significance in becoming innovative development all through society. Understanding the danger of cybercrimes is an appropriate issue since innovation holds an extraordinary effect on our general public in general. Cybercrime is developing each day in light of the fact that since mechanical progressing in PCs makes it exceptionally simple for anybody to take without physically hurting anybody as a result of the absence of information to the overall population of how cybercrimes are perpetrated and how they can ensure themselves against such dangers that cybercrimes presents. This paper will talk about a few parts of Cybercrimes including: characterizing the term, why cybercrimes happen, laws administering them, strategies for perpetrating cybercrimes, who is influenced, and aversion methods and some more.

Reasons for Cybercrimes and strategies for perpetrating

There are numerous ways or means where cybercrimes can happen. Here are a couple of causes and strategies for how cybercrimes can be perpetrated consistently: Hacking, Theft of data contained in electronic structure, Email shelling, Data diddling, Salami assaults, Denial of Service assault, Virus/worm assaults, Logic bombs, Trojan assaults, and Web jacking.

Prevention

It appears to be practically difficult to abstain from being a casualty of cybercrime, with every one of the headways in innovation which make it simple for somebody to perform cybercrimes. In light of this, there are some ways anyway to abstain from turning into a casualty of cybercrime. Most web programs email administration, and Internet suppliers give a spam-blocking highlight to counteract undesirable messages, for example, deceitful messages and phishing messages, from getting to your inbox. Notwithstanding, every client must guarantee to turn them on and don’t turn them off at all. Likewise, clients must introduce and stay up with the latest antivirus projects, firewalls and spyware checkers.

Conclusion

Cybercrimes will dependably be a progressing challenge regardless of the headways being made by various nations. Most nations have their very own laws to battle cybercrimes, yet some doesn’t have any new laws yet exclusively depends on standard earthbound law to indict these wrongdoings. Alongside obsolete laws to battle cybercrime, there are as yet weak punishments set up to rebuff lawbreakers, therefore doing no significant counteractive action of cybercrimes’ which influence the economy and individuals’ public activities on a vast scale by those culprits. Subsequently, there is an urgent requirement for nations on a worldwide scale to meet up and settle on what comprise a cybercrime, and create manners by which to mistreat crooks crosswise over various nations.

Reply 2:-

Costs of crime estimates can play an important role in helping the Government to achieve the greatest impact on crime for the money spent. The estimates can be used in both appraisal and evaluation of crime reduction policies. They can help the Government to priorities, focusing scarce resources on policies that have the biggest impact on harm caused by crime, rather than simply the number of crimes. The Home Office has previously published research examining the costs of traditional crimes such as burglary and violent crimes. The Home Office also published a report estimating the social and economic costs of organized crime. However, due to the challenges associated with robustly calculating costs, cyber crime has not been included in any such estimates to date. In light of the emergence of new threats from cyber-enabled crimes and cyber-dependent crimes there is now a need to look at the impacts of new modern crime types and attempt to quantify the costs they pose to the UK economy. The costs of crime work have taken an iterative research approach, and has published updates as methods and cost estimates have improved. This has enabled the cost of crime research to drive improvements in future research, as well as summarizing the best-known cost estimates for the research community in an easy-to-access manner.

In calculating estimates, the costs of crime research has focused on the economic cost to the UK per incident, and has separately used estimates of the prevalence of crime in order to form an overall understanding of the cost of crime. Costs considered by this research have been broken down into three categories:

• costs in anticipation;
• costs as a consequence; and
• costs in response.

The methodological approach taken by the previous costs of crime research study has formed the basis of the approach taken in the costs of cyber crime research presented in this report.

In light of the lessons learned from the literature review exercise and a desire to promote consistency in future research, the Costs of Cyber Crime Working Group commissioned a project to devise a costs of cyber crime framework to summarise and understand better the different estimates of the costs of cyber crime. This project was undertaken by Dr Adam Bossler, in conjunction with Home Office Analysis and Insight. The framework approach was based closely on the Home Office’s previous research investigating the costs of crime.

The costs of cyber crime framework is an attempt to combine all that is known about the costs into one table that would enable greater understanding of current (as at 2016) research gaps and encourage further research. This intention was to enable researchers to identify what the various different component costs of cyber crime are, and how these combine to form the overall cost of cyber crime – a resource that did not previously exist in the extant literature. Considering costs in this way should help researchers to identify gaps for future research, facilitating the design of consistent research, which could be used together in future to get closer to understanding the overall cost of cyber crime. The framework, summarizing a range of component costs.

Note:-

Hi

Its a Discussion and two replies each of 150 words for above question

i need everything in separate documents as 1st document should be discussion of 250words. , 2nd document should be reply 1 and 3rd document should be reply 2.make sure no turnitin and no plagiarism please dont copy it from any source write in your own words.

make sure you write everything in own words

Please dont copy from any source we have a turnitin.

need references

And send me three documents in different folder.

Discussion

On the discussion forum, please post a 500-word summary of the results of your research paper (cyber intelligence sharing and protection act)

Reply 1:-

Web security city is an idea of digital law that identifies with PC security. The term web security legitimately to identifies with program security which covers to arrange assurance. Expert digital law security group have refered to the approaching ascent in web security given the expanded digitization and utilization of the web. Web security should deal with the wellbeing worries of both the overseers and the clients. One of the most significant destinations of web security is to set up measures, standards, and rules against the conceivable web assault. Digital law everywhere centers around advancing web security by neutralizing the rising instances of digital psychological warfare and digital wrongdoing we see today. One significant way to deal with check the rising web security risk is empowering interest in protected and secure innovation (Crawford, 2013). The paper looks to give a top to bottom investigation of the idea of web security as a touchy theme in digital law.

Digital wrongdoing and digital fear based oppression keep on being on the ascent with the present and rising innovation. As time passes by the web and digital aggressors are quickly creating mechanical ability that advances the majority of their violations. Web was made with the main motivation behind advancing data trade between the suppliers and clients. Be that as it may, the stage has transformed into an uncertain channel where individuals execute risky data ruptures everywhere throughout the world. Individuals take part in deceitful exercises, for example, phishing, Trojans, online infections and worms among different dangers. Singular clients, sellers and program directors should work in a shared way in sentencing the rising danger to data security. The nearby and national government ought to put resources into digital security since the outcomes of the issue will influence everybody. In the United States, China and Canada among different nations more awful digital wrongdoing situations have been seen with administrative substances the most influenced (Jing, et al., 2014).

The Current Face of Internet Security

Web security is shockingly on the ascent regardless of the guidelines set up by web security control offices and different government. The rising danger requires a strong methodology that is forceful enough to obstruct the approaching security challenges. Today, digital wrongdoing is one of the inclining issues in data security. Consistently numerous occasions of information ruptures, information burglaries, and hacking are accounted for with the measurements apparently deteriorating bearing. As indicated by ebb and flow inquire about, Melon Security announced that web security is to a great extent temperamental. About 42% of top 100,000 sites associated with the security study are accounted for to be undermined in this manner dangerous for clients. The exploration went further to investigate the measures set up to battle the instances of program security. Shockingly, it was clear that these measures have had little effect in recovering the negative pattern in web security (Tao et al., 2014).

As of now, the emphasis on class guideline and website notoriety have been utilized to improve the web security. It appears that additional endeavors should be set up to meet the forceful degrees of the majority of these security challenges. Digital hoodlums have turned out to be progressively tricky. They have started utilizing confided in locales to dispatch and present malware undetected. This strategy empowers them to access the locales like some other client intense their evil aims try to degenerate the information making the frameworks helpless against shut down. The present pattern in web security break is the mistake crouching. In grammatical error hunching down, fraudsters come up looking like space names that are practically indistinguishable from the real one. They present some negligible grammatical errors that can’t be distinguished effectively by the clients. The strategy empowers them to pick up enlistment which fabricates the ground for executing the criminal follows up on locales (Bertino and Islam, 2017).

Reply 2:-

CYBERLAW:

Cyberlaw is important subject to understand the laws or principles which will mainly relate the information to the internet. So cyberlaw is considered as the mandatory subject for the IT graduation studies. It mainly deals with important rules involve in the legal regulatory or activities involved with the regular modalities.

It deals with the people issues regarding the internet impacting the human behavior and how the people can react by considering the rules and regulations to complain against the Software companies. By gaining the information one can know the importance of the existence of Cyberlaw. These skills can make the ability for the development of the field in suitable direction.

Internet is a global communication system which mainly deals with the huge information which mainly tells about the online conduct. There is no specific interaction between the people, so it is a type of dealing the intangible property. Internet is information repository which can get from the series of Internet service providers which will allow the access the information across the search engines and group of websites. Cyberlaw deals the issues with the bad information which spread across the social media. The cyberlaw mainly deals with how its effecting the people globally whether it is a country based or state based etc. We can explain it in a simple way the information of any website can not impact any of the people badly because of the religion or caste etc.

If any of the harms happened because of the accessing the information from the internet cyberlaw deals them legally by taking suitable remedies by reducing the harms. Cyberlaw mainly deals the information related to the copyrights, privacy or trademarks.

Internet contain the different kinds of information like the images, text etc which can be easily readable and also there is a information which is not readable. Cyberlaw deals with the regulatory information which allows to provide the sensible information only and not all kinds of information to the people. Otherwise it will affect the people badly in all ways.

There are specific rules imposed in the cyberlaw field to deal with the social norms and privacy levels. The regulation of the internet can be more determined and conceptualized which can be possible only with rules or regulations provided in the cyber law. If the cyber law was not properly maintained there would be chance of more thefts online and illegal activities over the internet. So, I consider cyberlaw can be studied by all the Software professionals.

So according to my research cyberlaw is an important subject to be considered for understanding the laws and regulations and also lot of crimes happening because of cyber-attacks. Government should take care of allowing the students as mandatory subject so that all the students can get basic knowledge about cyber related a laws and regulations. So that if they face any cyber attacks they can easily complain or follow up the law authorities

Note:-

Hi

Its a Discussion and two replies each of 150 words for above question

i need everything in separate documents as 1st document should be discussion of 250words. , 2nd document should be reply 1 and 3rd document should be reply 2.make sure no turnitin and no plagiarism please dont copy it from any source write in your own words.

make sure you write everything in own words

Please dont copy from any source we have a turnitin.

need references

And send me three documents in different folder.

Main que:

What is authentication, authorization, and Accounting? Please provide an example

sruthi-

Authentication: It is the process of providing a user with access to the network. The users like employees want to access the network resources by asking the credentials like username and password. Common methods of authentication are put authentication on console port, AUX ports, etc. A network administrator has the full control on how a user can be authenticated if wanted any access to the networks. Some of the methods of acquiring the authentication include using the local database of that device, sending the authentication request to the external server, etc. In the process of performing the authentication is broken into three parts: Principal (Entity that requests the authorization), Credential (the user provides as the proof of identity like shared key or password, one-time password (OTP), etc.) and Contextual (includes network and physical location of the request made).

Authorization: It is providing the ability to implement the policies of the network resources after the user has access to network through authentication. Authorization is used to determine what resources can be accessed by the user who has the successful authentication to access the networks. Like network administrator determines what operations to be performed by the user. For junior employees, the administrator can create access to the user which allow the user only to perform few operations. There is also a concept called null authorization (no authorization at all) where this is the most common authorization in AAA. After the authentication occurs, the user is granted full access to the network.

Accounting: This provides a way to monitor and track the events performed by the user after having the success authentication granted to the network resources, how long the user has the access. The administration is able to create an accounting activity and also has the authority to specify what should be accounted and to whom the records can be sent. Accounting holds the track history of the users who has the successful authentication like, which clients have the access to the network, what all access they were granted and when the client has been disconnected etc. Accounting is widely used in the Internet Service Provider space.

Example:

To use the local database and local running configuration, we need to implement AAA in case of new employees. The first step is to create the users and have the authentication requested to the administrator for access to access the local database. Then the administrator who has the authorization grants the access to the new employee by providing a username or email id and the password to log in and have the successful authentication to access the local database. This user’s events will be tracked by the accounting activity created for this specific user. When there is an issue with accessing the networks or the database, the administrator will access the accounting activity and provide an immediate solution for the issue with the authentication.

swathika-

hat is authentication, authorization, and Accounting? Please provide an example

In the past decade the cloud services have enabled many organizations and individuals to perform variety types of tasks such as online storage, email services and on demand TV and online shows. With the help of cloud services, the deployment of applications with very cheap cost with elastic and scalable due to fault tolerance system. Authentication and authorization and accounting (AAA) are three mains that helps track the system tracker of the user activities via IP-based network and controlling the access to network resources. A term AAA protocol is often implemented as a dedicated server.

Authentication refers to identifying unique information in each user system in a form of username and password. With the help of system administrators, we are able to monitor, add or delete authorized user in the system.

Example: When a network administrator controls the user authentication when an individual wants to access the network. These methods include local database that could be a router that sends authentication request to an external server. Sometime customized authentication methods are used for default authentication customization.

Authorization refers to the an individual adding or denying any user access in the computer network and its resources. Depending on the limit and their access towards the networks, users are given different authorization level depending on that. This determinization can be based on variety of entities on geographical location, date or time restriction, multiple logins by single individuals frequency associated types of authorization in the services include routing assignments, IP address filtering, bandwidth encryption traffic management.

Example: when a junior engineer who has not given any privilege to access all the resources and would want to access the devices, this were the administration would come into the picture to allow particular commands wherein the view will be created which will allow particular commands to be executed. This is to specify the user in a way is authorized to network resources through local database or ACS server.

Accounting refers to tracking or record keeping of individual activities in an computer network. Some of the examples of accounting would be time period but not limited to accounting time spent towards accessing the network, capacity and trend analysis, network cost allocations, billing data and user authentication and authorization.

Examples of AAA protocols include:

• Diameter, a successor to Remote Authentication Dial-In User Service (RADIUS)
• Terminal Access Controller Access-Control System (TACACS)
• Terminal Access Controller Access-Control System Plus (TACACS+) a proprietary Cisco Systems protocol that provides access for network servers, routers and other network computing devices.

Note:Please provide reply to below discussion in 150 words.

Professor Note:”You need to demonstrate to me that you read his or her post and that your response relates to their post and not yours.”Please take care of this note.

sruthi—VPN: Virtual Private Networks are the private networks used by the employees or the users to connect remotely to the network or the sites of an organization. VPNs are usually based on Internet connectivity. VPN uses virtual connections through the internet from the private network to assist and allow to connect from remote locations. A VPN maintains the privacy of the data and follow the protocols.

Benefits: We have two types of VPN available. Site-to-site VPN allows internal multiple offices or teams to connect to each other at the fixed location. Remote access VPN allows users to connect to the network of the business of a company from anywhere or remote location securely. The main benefit of deploying the VPN is it secures the sensitive data. It keeps all the malicious websites at bay and prevents from exposing the important data of the company. An employee can access from anywhere in the world by having a secure connection which is provided by VPNs. The VPNs are affordable, and the cost is considerably low. Every company should have VPNs.

Limitations: If at all the internet connectivity is lost, the VPN is lost too. VPN is solely based on internet connectivity. Installation and management of VPN on the client-side is a big expenditure. Sometimes, the VPN can be hacked too and might end up revealing the important information. The connection might become slow sometimes. The data transfer or connecting to someone else’s system might get things slower than usual. Some devices don’t have VPN supporting operating systems and have to manually configure the VPN connection. Free VPNs are always risky. They have security issues.

For example, I work from home every once in a while. I connect to my company’s applications or software only after I connect to the VPN. That helps me to easily access all the applications of the company without any disturbance. VPN might get slow due to my internet connectivity issues since the VPN is primarily based on internet connectivity. The offshore-team in the IT companies connect and access the applications through VPN. It has been an important factor every company should take care of.

Soumya–

A Virtual Private Network (VPN) has become a requirement for companies to protect their data from Internet. VPN doesn’t make a private network, it just hides your identity and make your communications more secure. VPN keeps your identity secure through encryption. With help of Virtual Private Network one can avoid content restrictions and government monitoring. A Virtual Private Network is mostly used to create a private network over public connections.

There are some other options for securing identity and sensitive information like proxy servers and TOR. Proxy servers are not totally secure, but they are available for free. Another popular option is TOR, a browser that encrypts and bounces the communication over other TOR users. A Virtual Private Network is like a middle man between you and internet. For Instance, if there is an emergency issue over a network and employee who must fix the issue is out of station, then he can connect to network remotely through VPN. There are some organizations which give limited access.

Virtual Private Network is available in different types. Each type of VPN offers differ in their scope and level of security. VPN’s can also use different protocols. Let’s look at different types of VPN that are available for internet users.

PPTP is Point to point tunnel protocol is the most commonly used and have been around long time since Windows 95. PPTP is easy to setup but is vulnerable to third parties and hackers. SSTP is Secure Socket Tunnel Protocol, it uses SSL is more advanced and safer than PPTP. SSTP can also be configured to use AES encryption. IPSec/L2TP is Layer 2 Tunnel Protocol doesn’t encrypt but create a tunnel and IPSec handles encryption. This encryption is most effective but impacts the network performance as traffic has to be converted to L2TP with encryption. Open VPN is the safest option and easily configurable on web. Open VPN uses open-source technology and protocols like SSLv3/TLSv1.IKEv2 is Internet Key Exchange is a request/response protocol. IKEv2 uses X509 certificates and a shared key.

Let us discuss some of the advantages of VPN’s

High end encryption keeps the data secure when browsing over a VPN connection.

Geographical freedom, disguising the actual location of user and use can access secure information sitting at home or anywhere in the world.

Sharing critical file over VPN makes them more secure and keep the integrity of the files.

Securing browsing over a public network to secure personal and business information.

There are some limitations to VPN’s listed below

Efficient encryption also comes with network lag.

Encryption requires a lot processing power, to achieve optimal network speed one must pay for a decent VPN service.

To ensure adequate protection of the network, one need to understand network security issues and understand configuration.

Slow VPN is always a problem to determine which server provides optimal speeds required one must try multiple servers.

VPN technology standards and products from different vendors use different equipment, this can lead to technological incompatibilities.

Watch YouTube video Deming at Pontiac. Research W. Edward Deming and the total Quality movement (TQM) Read below Case study 5-2 Boeing 787 Dreamliner. Respond to the questions. Also consider how Deming and TQM would have dealt with (or avoided) problems at Boeing. What does a TQM initiative look like in an IT department? How would IT support Total Quality at Boeing?

CASE STUDY 5-2 Boeing 787 Dreamliner

The first Boeing 787 Dreamliner was delivered to Japan’s ANA in the third quarter of 2011, more than three years after the

initial planned delivery date. Its complicated, unique design (including a one-piece fuselage that eliminated the need for

1,500 aluminum sheets and 50,000 fasteners and reduced the resulting weight of the plane proportionally) promised both

a reduction in out-of-service maintenance time and a 20% increase in fuel economy, but problems with early testing of

the new design contributed to the giant project’s troubles. Even after those delays, the 787 was grounded in January 2013

because the main battery had problems of overheating and subsequently burning. The problems were finally reported solved

in December 2014.

Delivery of Boeing’s 787 Dreamliner project was delayed, in part, because of the company’s global supply chain network,

which was touted to reduce cost and development time. In reality, the network turned out to be a major cause for

problems. Boeing decided to change the rules of the way large passenger aircraft were developed through its Dreamliner

program; rather than simply relying on technological know-how, it decided to use collaboration as a competitive tool embedded

in a new global supply chain process.

With the Dreamliner project, Boeing not only attempted to create a new aircraft through the innovative design and

new material but also radically changed the production process. It built an incredibly complex supply chain involving

over 50 partners scattered in 103 locations all over the world. The goal was to reduce both the financial risks involved in a

$10 billion-plus project for designing and developing a new aircraft and the new product development cycle time. Boeing

tapped the expertise of various firms in different areas such as composite materials, aerodynamics, and IT infrastructure to

create a network in which partners’ skills complement each other. This changed the basis of competition to skill set rather

than the traditional basis of low cost. In addition, this was the first time Boeing had outsourced the production on the two

most critical parts of the plane-the wings and the fuselage.

The first sign of problems showed up just six months into the trial production. Engineers discovered unexpected bubbles

in the skin of the fuselage during baking of the composite material. This delayed the project a month. Boeing officials insisted

that they could make up the time and all things were under control. But next to fail was the test version of the nose

section. This time, a problem was found in the software programs, which were designed by various manufacturers. They

failed to communicate with each other, leading to a breakdown in the integrated supply chain. Then problems popped up in

the integration of electronics. The Dreamliner program entered the danger zone when Boeing declared that it was having

– trouble getting enough permanent titanium fasteners to hold together various parts of the aircraft. The global supply network

did not integrate well for Boeing and left it highly dependent on a few suppliers.

The battery problems involved lithium-ion batteries that could not recover from a situation involving a rare but serious

internal short circuit that would cause flames to spread from one cell to another. Lithium-ion batteries had not previously

been used in an airplane and had not been tested under an assumption of a short circuit.

This case clearly underscores the hazards in relying on an extensive supply chain, failing to expect the worst case with

critical new parts, and encountering information exchange problems that caused long delays and seriously compromised a

company’s ability to carry out business as planned. Creating a radically different process can mean encountering unexpected

problems. In some cases, it would put a company so far behind its competition that it was doomed to fail. However, in this

case, the major competitor to the Dreamliner, the Airbus 380 program, was also using a global supply chain model, and its

program was delayed by a couple of years. The result for Boeing was a much-anticipated plane with fuel economy and outstanding

design that made the wait worth it. However, because of compromises in design, the Dreamliner holds only up to

250 passengers, compared to the A380, which has a seating capacity