Denial of Service attacks are estimated to happen once every six months (twice a year) in a mid-size company. One such company, XYZ, estimates the cost of recovering from a single DoS attack to be $12000. The company decides to apply a number of controls to counter these attacks. With these controls, the frequency of successful DoS attacks against the company reduces to once a year and the cost of recovering from an instance becomes $8000. The cost of implementing these controls is $7,000 a year. From a purely financial point of view, is it worth for the company to implement these controls? Calculate the prior and post ALE and do a cost-benefit analysis to answer the question. In your answer make sure that you indicate what ARO, SLE and ALE are with and without controls. State clearly whether the company should implement the controls and explain why.

Denial of Service attacks are estimated to happen once every six months (twice a year) in a mid-size company. One such company, XYZ, estimates the cost of recovering from a single DoS attack to be $12000. The company decides to apply a number of controls to counter these attacks. With these controls, the frequency of successful DoS attacks against the company reduces to once a year and the cost of recovering from an instance becomes $8000. The cost of implementing these controls is $7,000 a year. From a purely financial point of view, is it worth for the company to implement these controls? Calculate the prior and post ALE and do a cost-benefit analysis to answer the question. In your answer make sure that you indicate what ARO, SLE and ALE are with and without controls. State clearly whether the company should implement the controls and explain why.

Computer Networking: A Top-Down Approach (7th Edition)

7th Edition

ISBN:9780133594140

Author:James Kurose, Keith Ross

Publisher:James Kurose, Keith Ross

Chapter1: Computer Networks And The Internet

Section: Chapter Questions

Problem R1RQ: What is the difference between a host and an end system? List several different types of end...

See similar textbooks

Related questions

Q: Give an example of a time when a user's complete denial of a service (when the user gets no response…

A: DoS: Denial of service A Denial of Service (DoS) prevents a resource (such as a website,…

Q: Think about software that enables a surgeon in one area to operate online on a patient in a…

A: This has the effect that: Consider a piece of software that enables an internet connection to enable…

Q: Cyber insurance is a field that looks like it will decrease in the future Group of answer choices…

A: Here is your solution -

Q: Denial of Service attacks are estimated to happen once every six months (twice a year) in a mid-size…

A: Please find the answer to the above question below:

Q: Attacks that are so new to the Internet that they haven’t yet been classified and for which no…

A: Attacks are very common to the technological world as everyone is shifting to internet. Zero day…

Q: A "denial of service attack," sometimes known as a "distributed denial of service attack" (DDoS), is…

A: A "Denial of Service" (DoS) attack, sometimes known as a "Distributed Denial of Service" (DDoS)…

Q: How should you protect yourself in the case that you are subjected to an attack of a lower rank?

A: Introduction: Downgrade attack: This is a form of cryptography attack against a computer system or…

Q: In your perspective, how risky is it to make use of such a program? Can you imagine a scenario in…

A: Introduction: Understanding app privacy settings is essential. When downloaded, apps often ask for…

Q: For those who aren't familiar with the term, please explain what a "poison package assault" entails.…

A: Poison packet assaults are the most common kind of attack in which attackers actively introduce…

Q: Ransomware is defined as a type of malicious software designed to block access to a computer system…

A: cybersecurity, ransomware has gained notoriety as a malicious software threat that poses significant…

Q: ce important information. Project Shield was offered for free to journalists, small publications,…

A: DDoS, or Distributed Denial-of-Service attacks, are among the most malicious endeavors in the…

Question

Denial of Service attacks are estimated to happen once every six months (twice a
year) in a mid-size company. One such company, XYZ, estimates the cost of
recovering from a single DoS attack to be $12000. The company decides to apply a
number of controls to counter these attacks. With these controls, the frequency of
successful DoS attacks against the company reduces to once a year and the cost of
recovering from an instance becomes $8000. The cost of implementing these
controls is $7,000 a year. From a purely financial point of view, is it worth for the
company to implement these controls? Calculate the prior and post ALE and do a
cost-benefit analysis to answer the question. In your answer make sure that you
indicate what ARO, SLE and ALE are with and without controls. State clearly whether
the company should implement the controls and explain why.

Expert Solution

This question has been solved!

Explore an expertly crafted, step-by-step solution for a thorough understanding of key concepts.

This is a popular solution!

SEE SOLUTION Check out a sample Q&A here

Step 1

VIEW

Step 2

VIEW

Trending now

This is a popular solution!

Step by step

Solved in 2 steps

SEE SOLUTION Check out a sample Q&A here

Similar questions

So, how can you protect yourself from a downgrade attack?
PLZ help with the following:
Think about software that enables a surgeon in one area to operate online on a patient in a different location. Upon completion of the programme, who wants to continue? What kind of damage are they attempting to cause? What weaknesses would they attempt to use against you? Is it conceivable for these weaknesses to do damage even if there isn't a hostile attacker present?
It is very necessary for you to have a solid understanding of what a downgrade attack is and how to defend yourself against one.
Distributed denial of service attacks occur when several users attempt to overload a website at the same time. I can't see how one individual could possibly manage all of this.
PLease answer in details
Please provide an illustration of a scenario in which the total denial of a service to a user (in which the user gets no response from the computer) results in a significant issue for that user. Another illustration of how a 10 percent denial of service might be a significant issue for a user is offered here. In this scenario, the user's computation continues, but at a pace that is 10 percent slower than normal. It is feasible for unauthorized access to a computer system to cause a 10% decrease in the level of service provided to users who are legally authorized to use that computer system. In such case, what steps would you take to carry it out?