Hello,This is a two part questions. First I will need the discussion question answer which will be below in bold, 300 words APA format. For those response I will need two responses of at least 175 words each.Security expert Chris Nickerson is often asked by clients to conduct penetration testing of their on-site security. Watch Nickerson and his team recently pull off a $24,000.Nickerson and crew recently took on such an exercise for a client he describes as "a retail company with a large call center." With some prep work, Nickerson says the team was able gain access to the company's network and database quite easily. Read on to find out how they did it and what lessons you can take away for shoring up your organization's defenses.http://www.infoworld.com/d/security-central/social...Nickerson and crew recently took on such an exercise for a client he describes as "a retail company with a large call center." With some prep work, Nickerson says the team was able gain access to the company's network and database quite easily. Read on to find out how they did it and what lessons you can take away for shoring up your organization's defenses.http://www.infoworld.com/d/security-central/social...Part twoStudent one:I found this week’s reading and lesson to be fascinating; it really highlighted the importance of physical security, and revealed vulnerabilities that exist through even the most basic social engineering. Along with my M.S. pursuit through AMU, I’m also studying for the CISSP (god help me!). I wanted to share some common and related principles from this certification and this week’s lesson. Physical security is a key tenant of overall information systems security. There’s a reason why most military cyber professionals work in secure facilities (SCIFs) - our physical information systems are just as critical as the networked data they process. Server rooms and data centers are often restricted to employees with need to know privileges...and for good reason...we’ve talked often about the insider threat these last few weeks (Chapple et al, 2018). Good practices for NSM analysts and CISSPs alike are strong secure facility plans, PHYSICAL intrusion detection systems (not just the network based ones we’ve discussed), motion control sensors/CCTV monitors, and much, much more. Chris Nickerson and his team leveraged holidays and sporting events to their advantage so that everyone’s guard was more relaxed (e.g. going in when the majority of employees were at a horse race). Their social media usage was also savvy - they used an employee’s Twitter account to monitor their locations. Stop telling everyone where you’re at! Confidence is key - wearing a company t-shirt (and having a plausible story WITH COOKIES) was more than enough for Chris and his team to appear legitimate and drop USB keys and start pilfering data with quick data dump tools such as Ophcrack/John the Ripper (Goodchild, 2009). I watched a TED Talk that Chris gave in 2014, and I thought some of his insights were useful for NSM analysts trying to bolster their overall defenses. According to Chris, a lot of hackers are genuinely curious, and tinker with all sorts of pathways and methods when targeting. Good hackers will be tenacious - you’ll have to be prepared for continuous network penetration attempts at times. Also, Chris touts that security is more of a feeling - nothing is 100% guaranteed. NSM analysts need to keep that in mind, and be prepared to tinker and tweak NSM processes/tools ad hoc (TEDx, 2014). Chris opines that awareness is sometimes greater than knowledge i.e. don’t back yourself into a corner thinking you have a hold on all the vulnerabilities out there...you will fall into a hubris trap and be caught off guard eventually. This goes back to this week’s lesson - oftentimes we don’t put focus on some of the little things we take for granted. These little things can be pathways to important things. Your access badge that you swipe to get into your building is useless to you if you lose it, and the world for a hacker who shows social engineering prowess. A mobile device with trade secrets is no longer secure lost or in the hands of a hacker (or even in close range e.g. bluetooth hacking). “The more we are aware of these things, it becomes easier to defend it.” One of his biggest points in the TED Talk is that humans are genuinely the core problem for most security issues, and that just like a patch for software, hiring people with experience is analogous to a patch for human behavior (TEDx, 2014). This is a bit of an aside, but around the same time this article was published, the STUXNET incident occurred. Based on executive summaries of what happened, its highly plausible multiple USB drives were dropped around the Iranian nuclear facility and were subsequently plugged in by employees because of curiosity (Terdiman, 2012). This is the same tactic Nickerson and his team utilized! If it can happen in a state sponsored nuclear facility, it can happen at your city’s IT start up. Stay safe out there, and good luck on everyone’s final assignment and quiz!ReferencesBejtlich, R. (2004). The Tao of Network Security Monitoring. Boston: Addison-Wesley.Chapple, M., Stewart, J. M., & Gibson, D. (2018). (ISC)² CISSP Certified information systems security professional: Official study guide. Indianapolis, IN: John Wiley & Sons.Goodchild, J. (2009). Social engineering: anatomy of a hack. CSO. Retrieved at https://www.csoonline.com/article/2123704/social-e...TEDx Talks. (2014). Hackers are all about curiosity, and security is just a feeling | Chris Nickerson | TEDxFulton Street. YouTube. Terdiman, D. (2012). Stuxnet delivered to Iranian nuclear plant on thumb drive. cnet. Retrieved at https://www.cnet.com/news/stuxnet-delivered-to-ira...Student two:I thought that Joan Goodchild’s “Social Engineering: Anatomy of a Hack” was a very interesting read. In the article, Goodchild (2009) describes how Chris Nickerson how he and his team performed Red Team Testing against a large retail company and its associated call center. This red team effort resulted in a heist of $24,000.There are some important lessons and takeaways from the article that are still valid for today. The first one relates to physical security. Nickerson managed to get past security by pretending to have a meeting with an employee who was not at the office and then by being invited to eat in the building’s cafeteria (2009). Even more surprising is that the front desk apparently let him into the cafeteria area without ever checking his identification card. I cannot imagine a scenario like this occurring with most of the commercial semiconductor companies that I visit. In order to gain access to the building, you need both a visit request into the building, require a special badge, and often have an escort. Additionally, if you go to specific areas, such as a foundry floor, you are almost certainly going to need to get multiple visit requests in place.The second takeaway relates to good practices regarding universal serial bus (USB) drives. A number of business have been fearful of the scenario described by Nickerson and have gone to such measures as banning USB drives and disabling USB ports (Goodchild, 2009) (Svan & Allen, 2008). There are times when this is not practical though. For instance, there are a number of semiconductor foundry tools that can only be given software and firmware updates via USB. In those instances, I am familiar of a couple different mitigation approaches. The most popular one seems to be a tool vendor providing the USB to a network security individual who will move the file from the USB to a standalone computer and examine the file in a sandbox environment. If it is deemed safe, the file will be moved to a company-owned USB drive and they would temporarily enable the USB port on the foundry tool. Once the update is performed, the USB drive is given back to the network security personnel, as to not lead to an exfil of data, and then the foundry tool technician leaves their USB drive behind with the network security personnel for a set number of days before they destroy it. I believe this is likely done if there is an issue in the future they still have access to the original file. To this day, I am still somewhat confused as to how the 2018 WannaCry events at Taiwan Semiconductor Manufacturing Company (TSMC) occurred. From what I can tell, it appears as though a foundry tool technician managed to get a USB drive in past security and use the infected tool to take down both the foundry tool, and a series of connected systems (Moore-Colyer & Page, 2018) (SkyBox Security, 2018) (Deloitte, 2018). This attack resulted in the loss of $170 million (SkyBox Security, 2018). I found the incident odd because TSMC is the most advanced foundry in the world, and their security should have been on par with the way the rest of the sector operates. Even more surprising was how connected their foundry floor network was with outside networks.I think the biggest takeaway is that blended techniques, or blended operations, are quite effective. A common phrase is that you are only as strong as your weakest link, and I believe this case study illustrated this point. The company’s physical security was poor, allowing an individual into their facility without providing any form of identification or providing any type of escort. Additionally, no one questioned his activities once he was in the building and touching company equipment. If any entity is able to bypass a large segment of security, then other areas that are meant to provide support to one another also crumble and could ultimately compromise an entire company.ReferencesDeloitte. (2018). TSMC Annual Report 2018. Retrieved from Taiwain Semicondcutor Manufacturing Company: https://www.tsmc.com/download/ir/annualReports/201...Goodchild, J. (2009, February 4). Social Engineering: Anatomy of a Hack. Retrieved from InfoWorld: https://www.infoworld.com/article/2675986/social-e...Moore-Colyer, R., & Page, C. (2018, August 7). TSMC Says Variant of WannaCry Forced Factory Shutdown. Retrieved from The Inquirer: https://www.theinquirer.net/inquirer/news/3037125/...SkyBox Security. (2018, October 8). TSMC WannaCry Hits OT Plants with a Hefty Price Tag. Retrieved from SkyBox Security: https://blog.skyboxsecurity.com/tsmc-wannacry/Svan, J. H., & Allen, D. (2008, November 21). DOD Bans the Use of Removable, Flash-type Drives on All Government Computers. Retrieved from https://www.stripes.com/news/dod-bans-the-use-of-r...: https://www.stripes.com/news/dod-bans-the-use-of-r...

The purpose of this activity is to expose you to the Microsoft Project tool for the purpose of developing a project plan and Gantt chart for a hypothetical 30-day hobby project of your choice. Examples include building a deck, painting the garage, or planting a vegetable garden. Completing this activity will help to jump start your successful completion of the project deliverables throughout the course. This activity consists of two parts: Part 1: Project Introduction, or Project Plan You will write a 3–5-page document outlining the project specifics, such as its key objectives and scope, functional and technical requirements, key components, etc. Part 2: Gantt Chart You will use Microsoft Project to create a Gantt chart for your hobby project. Download Microsoft Project to your computer if you don't already have it installed and familiarize yourself with its features. Note: Microsoft Project is available at no cost to Strayer University students. For more information, refer to the left-hand menu option titled “Microsoft Azure for Education.” This information is also available via iCampus You are to create or assume all necessary assumptions to successfully complete this activity. You must submit both parts as separate files to the assignment area. Label each file name according to the appropriate part. Instructions Part 1: Project Introduction or Project Plan Write a 3–5-page project plan in which you: Document the hobby project's key objectives and scope. Develop the hobby project's functional and technical requirements. Design the hobby project's components, including size, shape, and quality. Implement the project according to the chosen design and components. Part 2: Gantt Chart Use Microsoft Project to create a Gantt chart identifying the major and minor tasks, illustrating dependency relationships between activities.

Hello I need help with fixing my project for JavaScript and Jquery and I also need help with questions 2-8 for project 5 as well.This is what I need to correct for the project here was the issueas soon as I click start, the timer starts at 29 seconds, not 30 seconds. This is where you will need to adjust your counter in the timer function, and place it after the script that updates the phrase on your page.function decrementSeconds() { if(remaining_seconds < 0){ clearTimeout(clock); clearTimeout(t); alert("Game is over"); } else{ $('#spTimeLeft').text(remaining_seconds); remaining_seconds -= 1; clock = setTimeout("updateTimer()", 1000); } }For your setTimeouts, you will want to assign it to a variable. That way you can clear it (stop it) in the last project. If you do not assign it to a variable, you will not have a way to stop it. Thus will cause it to run dynamically after the game is over.clock <span class="token operator">=</span> <span class="token function">setTimeout</span><span class="token punctuation">(</span><span class="token string">"decrementSeconds()"</span><span class="token punctuation">,</span> <span class="token number">1000</span><span class="token punctuation">)</span><span class="token punctuation">;</span>Your gamespace is a little too small compared to the size of bubble. I would make the gamespace around 600px width and height of 350px.Not sure about using a soccerball for the cursor. It does not fit the overall theme. Maybe a cursor that looks like a target. https://encrypted-tbn0.gstatic.com/images?q=tbn%3AANd9GcR61leTxKEg7AzYlOyl2NvsjItDePz6ChDWwg&usqp=CAUProject 5 questions 2-82. In the last project, you created an addImage() function which added the image to #gamespace. This worked well but each time it is called, it replaced the image which was already in there with a new one. We want to preserve the images already in the #gamespace. Change your use of .html() in addImage() to .append(). If already using .append(), no need to make a change. 3. Now we will try to make the images appear randomly around the gamespace. To do so, you will need to utilize the position style. For more info on position, check out: https://www.w3schools.com/css/css_positioning.asp First, add the following code to your game.css file. This will allow us to use the "top" and "left" CSS styles on the IMG tag. div#gamespace img { position: absolute; } And add the following property to div#gamespace: div#gamespace { position: relative; } 4. To randomly move each image, you will need to call your random number functions! Call each function once in the addImage() function and save the returned value to a variable (eg. xPos and yPos). Now that you have two random values, you will need to add a "style" attribute to the IMG tag. For example: In this "style" attribute, you will need to add a "left" and "top" property. The values for each property will be your random numbers. Most students will have issues placing the quotation marks. To help you, a website to help better understand this: https://www.digitalocean.com/community/tutorials/h... Tweak the values of your random function to make the images stay within the #gamespace. Hint: The actual value would be stored within a variable. You will call the function to run, and have the value stored within a variable. You will place the variable within the line of code where the value is to be added. 5. When the image is clicked, it should disappear. To do this, add a line of code to your .on() function that makes image disappear when clicked. Note: There are a variety of methods that will allow you to do so in jQuery, and jQuery UI. 6. Turn off the click of the start button once it has been clicked. You can use the .off() function to turn off the click. Once the game has started, you do not want the gamer to be able to click on the start button again. 7. Randomize the time interval in which new images appear. Currently, it is set to a static 2000 (2 seconds). The interval should vary between 0 and 2000 at random. You may create a new random function like your random x and y functions, if you like. Images should now appear at random intervals! 8. Incorporate at least one widget, or effects from jQueryUI. Make sure to document which area by adding a comment within the script. Example: You might create a tab widget. One tab will have the game and the other tab will have the instructions.Then when it comes to project 5 it should do the following after it is completedBy then end of this project, the game should do the following:An image should disappear when clicked.Multiple images should appear at a timed interval randomly around #gamespace.The timing of the images appearing should be randomized now. Interval varies between 0 and 2000 milliseconds.The start button click is turned off once the game is started.A jQueryUI widget or effect has been added to the page.I would need it to be completed by Friday before midnight.