Denial of Service attacks are estimated to happen once every six months (twice a year) in a mid-size company. One such company, XYZ, estimates the cost of recovering from a single DoS attack to be $10,000. The company decides to apply a number of controls to counter these attacks. With these controls, the frequency of successful DoS attacks against the company reduces to once a year and the cost of recovering from an instance becomes $6,000. The cost of implementing these controls is $12,000 a year. From a purely financial point of view, is it worth for the company to implement these controls? None of the these O Yes, because the measures will save the company $2,000. O No, because the measures will cost the company $2,000.

Denial of Service attacks are estimated to happen once every six months (twice a year) in a mid-size company. One such company, XYZ, estimates the cost of recovering from a single DoS attack to be $10,000. The company decides to apply a number of controls to counter these attacks. With these controls, the frequency of successful DoS attacks against the company reduces to once a year and the cost of recovering from an instance becomes $6,000. The cost of implementing these controls is $12,000 a year. From a purely financial point of view, is it worth for the company to implement these controls? None of the these O Yes, because the measures will save the company $2,000. O No, because the measures will cost the company $2,000.

Database System Concepts

7th Edition

ISBN:9780078022159

Author:Abraham Silberschatz Professor, Henry F. Korth, S. Sudarshan

Publisher:Abraham Silberschatz Professor, Henry F. Korth, S. Sudarshan

Chapter1: Introduction

Section: Chapter Questions

Problem 1PE

See similar textbooks

Related questions

Q: Give an example of a time when a user's complete denial of a service (when the user gets no response…

A: DoS: Denial of service A Denial of Service (DoS) prevents a resource (such as a website,…

Q: Cyber insurance is a field that looks like it will decrease in the future Group of answer choices…

A: Here is your solution -

Q: The following scenario is used for Case Projects 2-1 through 2-6: Darts is a sporting goods company…

A: SUMMARY: - Hence, we discussed all the points.

Q: Attacks that are so new to the Internet that they haven’t yet been classified and for which no…

A: Attacks are very common to the technological world as everyone is shifting to internet. Zero day…

Q: Static analysis involves examining the code (source, intermediate, or binary) to assess the…

A: Malware analysis refers to the method of getting an idea of how malware tools can affect software or…

Q: Resources are made accessible to individuals who are unable to proceed after an impasse has been…

A: We must now recover the impasse after it has been found. There are generally two ways to get out of…

Q: How should you protect yourself in the case that you are subjected to an attack of a lower rank?

A: Introduction: Downgrade attack: This is a form of cryptography attack against a computer system or…

Q: Model checking techniques may be utilized successfully in a variety of fields, with security…

A: Model checking techniques This same system requirements as well as design (referred to as models)…

Q: In your perspective, how risky is it to make use of such a program? Can you imagine a scenario in…

A: Introduction: Understanding app privacy settings is essential. When downloaded, apps often ask for…

Q: For those who aren't familiar with the term, please explain what a "poison package assault" entails.…

A: Poison packet assaults are the most common kind of attack in which attackers actively introduce…

Q: Ransomware is defined as a type of malicious software designed to block access to a computer system…

A: cybersecurity, ransomware has gained notoriety as a malicious software threat that poses significant…

Q: What is the point of an attack with a lower level of difficulty?

A: Introduction: The term "downgrade attack" refers to a kind of cryptographic assault that may be…

Question

Denial of Service attacks are estimated to happen once every six months (twice a year) in a
mid-size company. One such company, XYZ, estimates the cost of recovering from a single
DoS attack to be $10,000. The company decides to apply a number of controls to counter
these attacks. With these controls, the frequency of successful DoS attacks against the
company reduces to once a year and the cost of recovering from an instance becomes $6,000.
The cost of implementing these controls is $12,000 a year. From a purely financial point of
view, is it worth for the company to implement these controls?
O None of the these
Yes, because the measures will save the company $2,000.
ONo, because the measures will cost the company $2,000.
No, because the measures will cost the company $4,000.
Yes, because the measures will save the company save $14,000.

Expert Solution

This question has been solved!

Explore an expertly crafted, step-by-step solution for a thorough understanding of key concepts.

This is a popular solution!

SEE SOLUTION Check out a sample Q&A here

Step 1

VIEW

Step 2

VIEW

Trending now

This is a popular solution!

Step by step

Solved in 2 steps

SEE SOLUTION Check out a sample Q&A here

Knowledge Booster

Learn more about

Need a deep-dive on the concept behind this application? Look no further. Learn more about this topic, computer-science and related others by exploring similar questions and additional content below.

Similar questions

The term for it is "conferency control." This is significant for the reasons listed below:
Hacktivists often use DDoS attacks against organizations that they perceive as being opposed to them. This includes not only government but also journalists, publications, and human rights groups. Google's parent Alphabet has stepped up to help with thwarting DDoS against these groups. Since 2016 Project Shield has thwarted DDoS attacks against hundreds of websites in over 80 countries. These attacks were directed at websites in order to silence important information. Project Shield was offered for free to journalists, small publications, human rights groups, and others. But Google is doing that from its own initiative at a relatively high cost. Should there instead be a tax on computer hardware and/or software that goes towards a fund that is then used for organizations like this to have permanent DDOS mitigation?
So, how can you protect yourself from a downgrade attack?
Denial of Service attacks are estimated to happen once every six months (twice a year) in a mid-size company. One such company, XYZ, estimates the cost of recovering from a single DoS attack to be $12000. The company decides to apply a number of controls to counter these attacks. With these controls, the frequency of successful DoS attacks against the company reduces to once a year and the cost of recovering from an instance becomes $8000. The cost of implementing these controls is $7,000 a year. From a purely financial point of view, is it worth for the company to implement these controls? Calculate the prior and post ALE and do a cost-benefit analysis to answer the question. In your answer make sure that you indicate what ARO, SLE and ALE are with and without controls. State clearly whether the company should implement the controls and explain why.
PLZ help with the following:
To avoid a standstill, what conditions must be met?
In what way does one really execute a downgrade attack?
PLease answer in details
Computer Security is one of the fastest-moving fields in the world today. There are generally several incidents each week, including data breaches, large scale attacks, or some advancement in security research (i.e. new tools, techniques, vulnerabilities, or exploits). Select a recent event from your favorite security news source and summarize it. Include your source and an analysis of the event, including a summary of what happened, any new information from the event that changes current security practice, and any larger scale implications from the event. Relate the event to the topics in Chapter 1 of the book, namely the CIA triad, U.S. Compliance Laws (if any), IT domains, security policy, and/or data classification. In addition, relate the event to a biblical example.
A denial of service attack might damage regular email in a few different ways. One of these possibilities is the sending of large attachments. Utilizing the information you've gained, devise a plan to defend yourself against these assaults.
Please provide an illustration of a scenario in which the total denial of a service to a user (in which the user gets no response from the computer) results in a significant issue for that user. Another illustration of how a 10 percent denial of service might be a significant issue for a user is offered here. In this scenario, the user's computation continues, but at a pace that is 10 percent slower than normal. It is feasible for unauthorized access to a computer system to cause a 10% decrease in the level of service provided to users who are legally authorized to use that computer system. In such case, what steps would you take to carry it out?