What would you consider the most effective perimeter and network defense methods available to safeguard network assets? Your answer should include at least one practical example of each type of defense and potential type of attack.1.FirewallsFirewalls are a fundamental component of any perimeter defense. There are many misconceptions about firewalls. Most firewalls are not just pieces of hardware. Firewalls are collections of components. A firewall resides between two networks acting like a gateway. Some basic requirements of a well configured firewall are as follows:•It must work as a gatekeeper that grants and denies incoming and outgoing traffic.•It must prevent all unauthorized traffic from entering the network.•It must be configured correctly to be immune from attacks.2.Intrusion DetectionIntrusion detection systems (IDS)are designed to provide the network more sophisticated protection than that offered by firewalls.Intrusioncan be defined as any unauthorized attempt to access a system.Intrusion detectionis the art of detecting unauthorized attempts to access a system or network. The two main categories of IDS are network-based IDS and host-based IDSA network-based IDSruns on the network, monitoring activity and reporting any activity that arouses suspicion. A network-based IDS usually employs a dedicated network server or a device with a network adapter configured for promiscuous mode to monitor and analyze all traffic in real time as it travels across the network. The network-based IDSs monitor packets on the network wire and attempt to discern the legitimate traffic from the malicious. Network-based IDSs are operating system independent. They are centralized and therefore have very low maintenance requirements. They are positioned to monitor outside intrusions, but, in addition, they can detect network-based patterns originating from within the segment they are protecting.Host-based IDSsreside on the host and are capable of automatically monitoring and denying services if suspicious activity is detected. They monitor activity in the individual host, as opposed to the network. A host-based IDS, in many cases, is more complex than a network-based system because a host-based system monitors several things in addition to network traffic specific to the host on which the system is running. A host-based IDS can be configured to monitor the following:•Ports used by the system for incoming connections•Processes running on the system and how the list compares to the baseline•Checksums of important system files to see whether any of them have been compromised.In addition to active network traffic analysis on the host itself, some newer host-based IDSs can filter content and protect against viruses.3.Network Attacks OverviewNetwork attacks continue to be a concern for organizations as they continue to rely on information technology. The most common forms of attacks are footprinting and scanning.Footprintingis the process of systematically identifying the network and its security controls. For example, an attacker might look at the source code of your Web site and, based on that information, get other information such as what language was used to write code and create various elements of the program. Information is readily available by doing a DNS query and getting the IP address.Scanningis the process that attackers use to gather information about how a system or network might be configured. They can use port scanners that are readily available for anyone to download from the Internet free of charge. They can also use troubleshooting commands such as pings and traceroute to get information regarding what computers are "live" on the network.4.Denial of Service AttacksADenial of Service (DoS)attack prevents access to resources by users authorized to access those resources. Several different types of attacks can occur in this category. These attacks can deny access to information, applications, systems, or communications. DoS does not cause "harm" to the resource but can bring about negative consequences. For example, if the Amazon.com Web site was successfully attacked, Amazon would lose money from its Web site not being available for purchases. SeeThe US Cert Websitefor more information about DoS and other security threats.Distributed Denial of Service (DDoS)uses multiple computers to attack a single computer. An attack can load an attack program onto many computers that use DSL or cable modems. The program stays dormant until a master computer instructs it to attack a particular system. The master computer can be another unsuspecting user or computer.5.Session and Spoofing AttacksAspoofing attackis an attempt by someone or something to masquerade as someone else. A very common spoofing attack that was popular for many years involved a programmer writing a fake log-on program. No matter what you typed, the program would indicate an invalid login. The spoofing program would write the user ID and password onto a disk file that could be used later by a hacker.Aman-in-the-middle attackis commonly used to gather information in transit between two hosts. A third system is placed between two hosts already communicating or currently in the process of setting up a communication channel. The attacker establishes a session with each of the victims and represents what appears to be a valid end point of communication to each. This gives the attacker the ability to intercept the data, record it, and then pass it on to the second victim. Remember, the attacker can choose to alter the information rather than pass it.

Q1.Write a 3 to 4 page paper. Conduct research on some initiatives and security measures that have been taken in the aviation industry (everything from the airports to the air planes). Are these measures successful, why or why not? Recommend some other measures that you think can be effective but have not been implemented at this time. Q2. Write a 3 to 4 page paper (not including title or reference page) using chapter 10 "recommended websites" to determine if there is a federal or local agency that is better configured to engage in homeland security preparedness and planning. Explain why the agency you chose is better prepared than others.Q3.Write a 3 to 4 page paper. Conduct research on two U.S. intelligence agencies. Describe their mission and their role in the war on terrorism. Writing Requirements3-43 pages in length (excluding cover page, abstract, and reference list)Include a minimum of 3 sourcesAPA format, Use the APA template located in the Student Resource Center to complete the assignment.Please use the Case Study Guide as a reference point for writing your case study.NO PLAGARISM3-4 PAGES EACH QUESTION

This homework assignment is a three- part activity. You will respond to three separate prompts but prepare your writing as one paper. Be sure to include at least one Scholarly article per prompt, in addition to your textbook (which means you'll have at least 4-6 sources cited).      Start your paper with an Abstract paragraph. And also, an Introduction.     Prompt 1 "Data Warehouse Architecture" (2-3 pages): Explain the major components of a data warehouse architecture, including the various forms of data transformations needed to prepare data for a data warehouse. Also, describe in your own words current key trends in data warehousing.      Prompt 2 "Big Data" (2-3 pages): Describe your understanding of big data and give an example of how you’ve seen big data used either personally or professionally. In your view, what demands is big data placing on organizations and data management technology?      Prompt 3 “Green Computing” (2-3 pages):  One of our topics in Chapter 13 surrounds IT Green Computing. The need for green computing is becoming more obvious considering the amount of power needed to drive our computers, servers, routers, switches, and data centers. Discuss ways in which organizations can make their data centers “green”. In your discussion, find an example of an organization that has already implemented IT green computing strategies successfully. Discuss that organization and share your link. You can find examples in the UC Library.    Conclude your paper with a detailed conclusion section.