Description
Case Project 1-1: Determining Legal Requirements for Penetration Testing
Alexander Rocco Corporation, a large real estate management company in Maui, Hawaii, has contracted your computer consulting company to perform a penetration test on its computer network. Penetration testers are hired to attack an organization’s network, determine what vulnerabilities are present, and provide recommendations for securing the company’s information systems. The management company owns property that houses a five—star hotel, golf courses, tennis courts, and restaurants. Claudia Mae, the vice president, is your only contact at the company. To avoid undermining your tests, you will not be introduced to any IT staff or employees. Claudia wants to determine what you can find out about the company’s network infrastructure, network topology, and vulnerabilities without any assistance from her or company personnel. Based on this information, write a report outlining the steps you should take before beginning the penetration tests. Research applicable state and federal laws, and reference them in your report.
Case Project 2-2: Investigating Possible Email Fraud
A vice president at Alexander Rocco Corporation says he received a hostile e-mail message from an employee in the Maui office. Human Resources has informed him that the message's contents are grounds for termination, but the vice president wonders whether the employee actually sent the message. When confronted, the employee claims he didn't send the message and doesn't understand why the message shows his return address.
Construct a memo to the vice president, outlining the steps an employee might have taken to create an e-mail message and make it appear to come from another employee's account. Be sure to include some SMTP commands the culprit might have used
No Plagiarism, Original Content, Case project 1-1( Min 500 words), Case Project 2 ( Min 300 Words), citation in APA format, References
Case Project 1-1 1. talk about black box testing methodolgy about the black box, what is it, what does it entails 2. exist of the contracts between consultanting firm and Alexandra Rocco point of contact is Claudia Mae 3. Legal aspects research state laws apply (state of Hawaii) which laws are applicable? is port scanning legal? 4. Federal laws that apply according to state of hawaii? 5. include the composition of your team (Red team) Case Project 2-2 Write a memo min 300 words
Explanation & Answer
Attached.
Case Responses
Thesis statement: case responses on system robustness
I.
II.
Case Project 1-1:
a. Outlining the legal framework in penetration testing in Hawaii
Case Project 2-2
a. Identifying a possible SMTP command and the means of identifying a possible
attacker.
Running head: CASE RESPONSES
1
Case Responses
Name
Institution
CASE RESPONSES
2
Case Responses
Case Project 1-1: Determining Legal Requirements for Penetration Testing
Penetration testing is like practice, over time, it makes the security infrastructure more
robust. These systems run on computer programs. Their coding determines the sort of activities
they conduct regularly and the responses that the system has toward specific stimuli. One of the
core components of any electronic security mainframe is the black box. A black box is a device
that contains all the information that the entire system processes, from the time, which the
machine comes online; up until it goes off, or some event causes a system breakdown. Typically,
a black box is a secure device with ample hard disk space.
Penetration testing is a vulnerable area in security operations since successful tests find
the real vulnerabilities in the system. That means that if the information that a penetration testing
firm acquires gets into the wrong hands, serious compromises will result. The government has
set up stringent federal and state laws to ensure that these companies act with integrity. It must
be taken into consideration ...
Review
Review
