An asset has a value of $1,000,000. In an attack, it is expected to lose 60 percent of its value. Countermeasure X will cut the loss by two-thirds. Countermeasure Y will cut the loss by half. Both countermeasures will cost $20,000 per year. An attack is likely to be successful once in 10 years. Both countermeasures can cut the occurrence rate in half. Do an analysis of these countermeasures and then give your recommendation.

An asset has a value of $1,000,000. In an attack, it is expected to lose 60 percent of its value. Countermeasure X will cut the loss by two-thirds. Countermeasure Y will cut the loss by half. Both countermeasures will cost $20,000 per year. An attack is likely to be successful once in 10 years. Both countermeasures can cut the occurrence rate in half. Do an analysis of these countermeasures and then give your recommendation.

Database System Concepts

7th Edition

ISBN:9780078022159

Author:Abraham Silberschatz Professor, Henry F. Korth, S. Sudarshan

Publisher:Abraham Silberschatz Professor, Henry F. Korth, S. Sudarshan

Chapter1: Introduction

Section: Chapter Questions

Problem 1PE

See similar textbooks

Related questions

Q: Consider an invasion scenario that may occur at the bank. What safeguards does the bank have in…

A: Firewalls help in protecting a network from bad traffic.

Q: What does it mean to conduct a "poison package assault," and how would one execute such an attack?…

A: The term "poison package assault" refers to a malicious act involving the delivery of harmful…

Q: For example, what does it mean if an assault is carried out utilizing a poison package, and what…

A: Introduction: AI assaults are made possible by inherent limits in the underlying AI algorithms that…

Q: One way for an attacker to build trust with a target is with what type of information?

A: Cross-site scripting (XSS): In an XSS attack, an attacker injects a piece of malicious code onto a…

Q: Take, for example, a piece of software that, over the internet, permits one surgeon to operate on a…

A: Your answer is given below.

Q: First, let's evaluate the similarities and differences between two extremes: dangers and attacks.…

A: INFORMATION SECURITY 1. Evaluate threats and assaults in comparison. Provide examples to support…

Q: In a general sense, "security" is a. protection from only direct actions b. using reverse attack…

A: To be determine: Choose right option

Q: Which of the following is the best description of purpose of risk management? a. To implement…

A: Find the required answer with explanation given as below :

Q: Give examples of a few distinct takeover techniques. What kind of assaults are accessible defences…

A: Depending on their location and vector, an attacker has a variety of possibilities for hijacking a…

Q: Why do so many disgruntled current and former employees often resort to the "logic bomb" method of…

A: Cyber Security:- Cybersecurity is the activity of preventing unauthorized access to, use of,…

Q: Create a misuse-case diagram for a specific type of digital/computer-based attack. Be sure to…

A: One of the important types of cyber attack is a phishing attack. In this the attacker pretends to be…

Q: For the ransomware victims, justify the following cases: a) describe a scenario where the victim…

A: - We need to talk about the scenarios where we have to pay the ransom to attackers and one where we…

Q: Explain the overall importance of security planning in any organizational environment where…

A: Security planning is an essential component of any organizational environment where software systems…

Q: Consider software that lets a surgeon in one place help in an operation in another via the internet.…

A: We are only authorized to react to the first three subparts, per the rules: The questioner is…

Q: For example, what does it mean if an assault is carried out utilizing a poison package, and what…

A: Poison Package: Sending suspicious ARP packets to such a LAN's proxy server in order to alter this…

Q: Why is it so prevalent for disgruntled employees or former employees to deploy logic bombs as an…

A: Logic bombs Logic bombs are complex cyberattacks that are challenging to recognize yet may cause…

Q: Why is it that unhappy workers or former employees so often resort to the strategy of attacking with…

A: Introduction: Logic bombs are sophisticated cyberattacks that are difficult to spot but may cause…

Q: A company sells products through its webpage. An attacker finds a way to inject commands into their…

A: ANSWER:-

Q: Why do dissatisfied or former employees select logic bombs as a tactic of attack? So, how can we…

A: Dissatisfied or former employees sometimes resort to using logic bombs as a tactic of attack. A…

Q: If there were no laws for personnel to take vacations or divide duties, what security mechanism…

A: A security mechanism, also known as a security control or security measure, refers to a specific…

Concept explainers

Cryptography

Cryptography is a term used in computer science to describe secure information and communication techniques that transform messages in difficult-to-decipher ways using mathematical concepts and a set of rule-based calculations known as algorithms.

Question

An asset has a value of $1,000,000. In an attack, it is expected to lose 60 percent of its value.
Countermeasure X will cut the loss by two-thirds. Countermeasure Y will cut the loss by half. Both
countermeasures will cost $20,000 per year. An attack is likely to be successful once in 10 years. Both
countermeasures can cut the occurrence rate in half. Do an analysis of these countermeasures and then give
your recommendation.

Expert Solution

This question has been solved!

Explore an expertly crafted, step-by-step solution for a thorough understanding of key concepts.

This is a popular solution!

SEE SOLUTION Check out a sample Q&A here

Step 1

VIEW

Step 2

VIEW

Trending now

This is a popular solution!

Step by step

Solved in 2 steps

SEE SOLUTION Check out a sample Q&A here

Knowledge Booster

Learn more about

Need a deep-dive on the concept behind this application? Look no further. Learn more about this topic, computer-science and related others by exploring similar questions and additional content below.

Similar questions

Consider an automated audit log analysis tool. This tool could be used to distinguish “suspicious activities” from normal user behaviour on a system for some organisations. (This tool could be used for many more purposes as well.) Explain the limitations of the “automated audit log analysis tool” as a security control? explain in detail ....
excluding both XSS and CSRF techniques, please use a simple example to describe one possibility of attacking other end-users. In other words, no XSS and CSRF is allowed for this discussion. You can make assumptions to warrant the success of your attacking scenario. Discuss the corresponding prevention measures for your example.
A zero day threat is characterized by Select one: a. Getting hit with the threat same day it is released b. Getting hit with the threat on its last day of existence. c. Getting hit with the threat that only lasts for one day d. None of these
Why do dissatisfied or former employees choose logic explosives as a method of attack? Therefore, how can we prevent these types of assaults?