An asset has a value of $1,000,000. In an attack, it is expected to lose 60 percent of its value. Countermeasure X will cut the loss by two-thirds. Countermeasure Y will cut the loss by half. Both countermeasures will cost $20,000 per year. An attack is likely to be successful once in 10 years. Both countermeasures can cut the occurrence rate in half. Do an analysis of these countermeasures and then give your recommendation.

An asset has a value of $1,000,000. In an attack, it is expected to lose 60 percent of its value. Countermeasure X will cut the loss by two-thirds. Countermeasure Y will cut the loss by half. Both countermeasures will cost $20,000 per year. An attack is likely to be successful once in 10 years. Both countermeasures can cut the occurrence rate in half. Do an analysis of these countermeasures and then give your recommendation.

Database System Concepts

7th Edition

ISBN:9780078022159

Author:Abraham Silberschatz Professor, Henry F. Korth, S. Sudarshan

Publisher:Abraham Silberschatz Professor, Henry F. Korth, S. Sudarshan

Chapter1: Introduction

Section: Chapter Questions

Problem 1PE

See similar textbooks

Similar questions

Suppose that in order to keep the information relevant to your class private and secure, you will want some kind of security model. Analyze each of the cells using the CNSS model, and after doing so, provide a few thoughts on how you may go about managing the three components that are located inside that particular cell.
In a broad sense, "security" refers to a. immunity from everything except direct acts b. protection via the use of reverse attack vectors (RAV) c. accessible only on fortified computers and systems d. the measures required to safeguard a person or property from damage
Compare and contrast some specific types of defensive techniques that would be sufficient to deter an apprentice-level intruder to what would be needed to keep out a master-level intruder.
Consider an automated audit log analysis tool. This tool could be used to distinguish “suspicious activities” from normal user behaviour on a system for some organisations. (This tool could be used for many more purposes as well.) Explain the limitations of the “automated audit log analysis tool” as a security control? explain in detail ....
. Let us suppose a telecommunication company has hired you as their information security manager, categorize possible threats to your firm in terms of active and passive attacks and give possible solution structure to mitigate those attacks.
excluding both XSS and CSRF techniques, please use a simple example to describe one possibility of attacking other end-users. In other words, no XSS and CSRF is allowed for this discussion. You can make assumptions to warrant the success of your attacking scenario. Discuss the corresponding prevention measures for your example.
Are there any guarantees that an attack will not be effective while using a multilayered defense? What is the reason for this or why is it not?
Consider an invasion scenario that may occur at the bank. What safeguards does the bank have in place to stop intrusions from happening in the first place?
You are hired as a security expert for an online retailer. Currently, the company makes an annual revenue of $10,000,000. A security-risk analysis has shown that in the case of a ransomware attack on this company, the company would see an immediate loss of $1000,000. In addition, due to degraded reputation, the company's revenue would experience a drop of 10% over the next year. It is estimated that online retailers, similar to the one in question, experience 1 ransomware infection every 2 years. The company is considering the purchase of a set of security safeguards that would reduce the probability of successful ransomware infection in half. The annual cost of this set of safeguards is $200,000. It should also be noted that if implemented, the safeguards would slow down the retailer's site, and cause a revenue loss of about $50,000 a month (relative to the current revenue). Using the cost-benefit analysis approach, determine whether the company should purchase this solution. Provide…
Consider a potential bank robbery scenario. How does the bank go about stopping, spotting, and dealing with an intrusion when it occurs?
Why is a logic bomb such a common technique of attack among dissatisfied or ex-employees? What can be done to lessen the possibility of such attacks?
A zero day threat is characterized by Select one: a. Getting hit with the threat same day it is released b. Getting hit with the threat on its last day of existence. c. Getting hit with the threat that only lasts for one day d. None of these