Data Breach: Recent Security Breaches and Ransomware Attack

This article discusses recent security breaches and a ransomware attack that occurred in Network City Hall. It explores the impact of the attack and suggests possible solutions to prevent future breaches.

Running Head: DATA BREACH
Data Breach
[Name of the Student]
[Name of the University]
[Author note]

1DATA BREACH
Part 1: Recent security breaches which occurred during April-August 2015-
2018.
First event: The computers of Network City hall hacked by the Ransomware in the year of 2017
on 24 of April. This Ransomware attack was also seen to be associated with causing an
additional harm by affecting the additional harms to the Australian Breaks of the different
worldwide organizations (Kharaz et al., 2016). In addition to all this the DLA piper workplaces
were associated with advising their clients that they are being offered with a “security Cyber
Incident and have been associated with stopping the email services such as the prudent steps.
Nearby Novel had also been associated with reporting the fact that the PC in the “Cadbury
Chocolate Processing Plant” which were possessed through the Mondelex intercontinental had
been associated with indicating the message of Ransomware.
Ransomware hacked the Computers of Network City Hall:
This particular attack happened around 12:30 P.M when the IT managers have been
associated with complaining about the slamming of the different email servers and along with
this various administrators started descending and followed by this numerous NHS dictionaries
started to claim that they were receiving the message demanding bitcoins for the different files
which have been encrypted (Scaife et al., 2016). They might be associated with taking the
message of the issues or might be having the capacity of using the data so as to help in
persuading the individuals who were seen to be associated with dealing with the monetary
allowances for the purpose of remunerating more mindfulness so as to provide cash for the cyber
security. However the cyber security is not only the speculative issue and these days are
associated with showing that this can be demise or life. Besides this report form the police

2DATA BREACH
headquarters related to the type of issue on this day that they have seen on the PC mainly related
to the information (Scaife et al., 2016). The major issue is that whenever an attacker is associated
with getting into the system they are associated with a creation of a computerized key which is
not capable of controlling who is actually getting them. For this particular rupture a very
essential issue is put forward which we would be taking about and this issue includes the
determining of the fact that if the NSA examination ensures the individual or is associated with
the startling of any kind of mischief which is capable of achieving a greater weakness.
Ransomware is one of the most devastating cyber-attack which includes a cybercriminal
who would be entirely associated with taking control of the entire PC framework and congest the
access to the framework so as make the data owner pay the pending payoff (Kharraz et al.,
2015). According to the records the city was mainly damaged by the RSA-2048 encryption
which is associated with encrypting the documents present in the PC which mainly included the
different documents, pictures and the other records. According to records the programmers have
been associated with illuminating the fact that it is only possible to open the PC of the city if a
ransom amount is paid by electronic means such as bitcoin.
The security breakage was also responsible for having a huge influence upon the PC
present across the other government divisions along with having a huge influence upon the
GSWAN as well. However this break in the security was restricted and only effected the interior
PC and did not have any kind of effect upon the administrations and customers (Kolodenker et
al., 2017). This is one of the major digital attack which has huge influence upon organizations
situated all across the world.
How issue Arise

3DATA BREACH
The programmer would be associated with testing the usage of some of the weakness in
the PC Network and Gesner needs PC owner to refresh or make use of an antivirus
programming, a firmware, and a programming, download scrap to the working framework and
use the presence of mind (Andronio, Zanero, & Maggi, 2015). The digital pack is living being
rebuked for the hack.
Possible solution
The weird association have been associated with stealing of the digital solution from the
NSA which is a knowledge unit of the ground-breaking military force of America. The
mechanical assembly of hacking known as the Eternal Blue have been associated with providing
of an exceptional access to the PCs which were associated with the usage of the Microsoft
Windows which is one of the world’s well-known working environment. This was created by
making use of the NSA for the purpose of accessing the PCs which were mainly seen to be used
by those monger states which were the foe and the fear. Antivirus were utilized for the purpose
of providing security to the machines as well as for the archiving and for storing the photos.
However despite of the existence of the anti-virus the digital crooks were associated with
ceaselessly chipping away by means of unique strategy for the purpose of ruling the assurance.
Besides all this the ransom products were also seen to be spreading crosswise all over the
association by means of the powerlessness of the Microsoft Windows framework (Continella et
al., 2016). Identification was done by making use of the Wanna Cry which included both of the
endeavor which included the defenselessness of the Eternal Blue in the Windows XP along with
the extra 'Microsoft Windows framework' for doing the assault. This firstly seemed to be a
flaring-up of another digital criminal which took the advantage of digital stick which was
released. Numerous cases exists where the security authorities have been claiming the fact that

4DATA BREACH
the installment instrument of the ambush have been associated with showing up in an excessive
manner which was mainly put forward by the lawbreakers who are entirely unsafe. Followed by
this the payoff product message consist of the address of every piece of comparable for all the
casualty. In addition to this, the requests related to the malware which were responsible for the
fatalities impart by means of the aggressors by making use of the individual email address which
are seen to be balanced through the email supplier. This was seen to be happening after the
uncovering of the life form which was already utilized. Below are the listed some of the
convincible answers for the entire Project:
Making of secure as well as safe reinforcements: After defiling of the record or losing
amongst any of the ruptures are associated with the reinforcements which are likewise associated
with acting as an imperative choice for m this issue.
Refresh and scrap framework: The Ransomware of latest version acted in a fruitful sense of
mixing the elements (Rid, & Buchanan, 2015). This was associated with containing of the
dangers of the security opening in the Microsoft Windows, and most of the time the malwares
were composed in the college, business or government Networks.
Utilize the Antivirus Software: By usage of the Antivirus programming it is possible to shield
the information or data from any kind of infection by means of examining of the framework
rather than the known unique finger impression (Ding et al., 2017).
PART –A -2
Explain why asynchronous I/O activity is a problem with many memory protection
schemes, including base/bounds and paging. Suggest a solution to the problem.

5DATA BREACH
The most favorable position which an Operating system would have by fence enroll is the
capability related to migration. Besides this it is also the fundamental of the multi-client
condition. By having less than two clients is almost know the position of stacking the program so
as to be executed at the early stage. The movement enroll is seen to be associated with dealing
with the issues put forward by means of providing the base or an area of introduction. In addition
to all this the address present inside the undertaking is responded as the base address. Besides
this the variable fence enroll also called the base enlist is associated with providing of a lower
bound yet not an upper one (He & Yan, 2016). The upper bound can be acting as an important
aspect in knowing the amount of space which has been doled out along with the enrollment of
the surges associated with the territories which has been disallowed. For the purpose of beating
this issue a second enroll is often included.
The second enroll is also known as the bound enlist acts as a limitation of the upper
address. Each of the program which is conveyed is constrained over the base address with
respect to the way where the base enlists substances are added to address (He & Yan, 2016). The
system is also associated with shielding of the program address from any kind of change made
by other clients. The moment when changes begin in the execution with respect to one client
program then onto the following, then the Operating system necessarily needs to change the
substance of the base along with restricting the enlist for reflecting the honesty related to the
goodness of the address space of that specific client. This in turn is associated with making
changes which acts as a general course of action also known as the setting switch. By having few
bases or bound enroll, a client would be protected perfectly from any outside client (Liu et al.,
2016). Along with this the Off base address present inside a client address space might now be
associated with having a huge impact upon that program with respect to the way by which the

6DATA BREACH
base or the bound is associated with checking the guarantees only about the addresses which are
seen to be existing inside the t address space of the clien. It is possible to handle this kind of
issue by making use of another join of base or a bound registers. One would be associated with
the program whereas the other one would be associated with the data space. Till then only
moving of the course carries are done along with checking those with respect to the principle
enlist join. However two of the two arrangements related to enlisting are not associated with
keeping all the program errors, but are responsible for confining of the effects of the data control
course upon the data space. In addition to all this joining of the enrolling is associated with
offering of another basic favored outlook which includes the ability of sectioning a particular
program into two pieces which would be capable of moving freely (Liang et al., 2017). The
features are seen to be requiring the usage of no less than three arrangements of registers in
which one would be for the code, one would be for the just reading of the data and the last one
would be for the modifiable data regard. Having more than two sets is associated with making
each course decides the one which is of no less than two data spaces. Despite of the existence of
the two sets it is possible to customize the decision: heading with one set, data with other. Usage
of another base or bound enroll match acts as an answer for this issue. Rules have been
formulated along with being moved with the enlistment which is the first enroll and the second
enroll is associated with moving and checking (Liang et al., 2018). One of the basic purposes of
intrigue includes the providing of ability related to the sectioning of the program into two pieces
which are having the capability of moving in a free way.
PART –B
2011 Sony Play station Network Outage Case
1. What was the issue?

7DATA BREACH
Sony had been associated with facing a huge rupture in the PC amusement online
framework which was responsible for the provoking of the theft of customer details including the
names, addresses and maybe charge card data. Almost 77 million customer accounts were
affected and for this reason this incident is considered to be one of the greatest ever Internet
security break-ins. Sony identified that the information of the customers were stolen from the
PlayStation Network seven days earlier, which was initially responsible for the shutdown of the
entire framework instantly (Taha et al., 2018). The "unlawful and unapproved individual" were
associated with stealing the information of the customers and this is just a glimpse of the large
problem.
2. Who was affected and how?
Sony have been associated with declaring the fact that the hackers have broken into the
records consisting of almost details of more than 93,000 clients and this was done by making of
attempts for signing in into the Sony accounts by making use of huge rundown of usernames and
passwords. Along with this the presentation of the custom firmware, have been associated with
making it possible that the customers intrigue the database mainly the ones which were broken
and this initially ended up making it accessible successfully. It might have happened that the
security related instruments of Sony did not look into the inside attack from the trusted users and
without any kind of doubt it is impossible to make a framework which is value without having
some administrators who can be trusted.
3. How was the attack completed?
Because of certain reasons related to security along with the reason that Sony is really
tight-lipped on this type of issues, it is almost impossible to know about the right attack vector.

8DATA BREACH
Despite of this it is possible to make certain emphatically educated suppositions regarding the
hacking of the PlayStation Network. Irrespective of the provided closeness towards the
Anonymous' continuous strikes, it can still be stated that the database crack is by some methods
related to the entire attack (Liu et al., 2017). Sony is protected by having the expectation that the
Anonymous might have been associated with getting some of the answers which is concerned
about the deficiencies existing in the security instruments of the PSN's, and besides this after
passing of a short time the data which was present in some other place was acting as another for
getting-together of the developers and starting from this if the openings were seen to be
adequately gigantic, then the aggressors might be having the capability of simplifying the
propelling in a right way with the SQL mixture attack.
There exists a other alternative is the landing progress of the custom PlayStation 3
firmware manufacture which is also known as the Rebug, this in turn was associated with
making reasonable changes in the PS3, that is into a planner unit. This in turn starts in a
countless manner where the buyers can not commonly get accommodated. Besides this the
Rebug firmware is associated with providing help in having a trusted in access to Sony's inside
creator organize.
4. What could have been done to keep the attack?
In case of Sony — and associations which are in need of taking a sidestep acts practically
as the identical fate and for that reason the security must to be acting as an essential bit of
association culture, from the best solutions provided.
For example the Emails, and necessarily it is to be made sure that that they are not left
and along with this it is also to be made sure that all the corporate correspondence are being

9DATA BREACH
mixed as an issue related to preparing (Milburn, 2017). Besides this, it is also to be made sure
that the Associations are associated with preparation of the delegates on the best way for the
purpose of living and breathing in the best way which helps in security sharpening. In addition to
this the delegates also needs to have a hold over the setting which are not only related to their
condition but are also not associated with the enabling of the PCs so as to sit without being
bothered in the open places or when they are associated with thinking about joining open Wi-Fi
hotspots. Information being critical need to be understood in a proper way which can be seen to
going far beyond the settling of the pre-assumptions of the people.
Meanwhile there is also a need of progress of the workplace related to preoccupation and
along with this the there also exists an insignificant amount of consistency. For this reason there
is a need of practicing a watchfulness in an consistent way along with checking in an dependable
way for any kind of contaminations if there is a need of considering a treat to be essential (Goode
et al., 2017). In addition to this there is need of creating certain measures such as the framework
interference disclosure and passageway testing which are capable of helping in the process of
hindering and recognizing any kind of security breaks. Lastly, one of the best plan for tackling
the problem includes the creation of a substitute game-plan (Taha et al., 2018). Associations
need to make sure that they are associated with taking the security measures in a realistic way so
as to survive any kind of data breach.

10DATA BREACH
References:
Andronio, N., Zanero, S., & Maggi, F. (2015, November). Heldroid: Dissecting and detecting
mobile ransomware. In International Symposium on Recent Advances in Intrusion
Detection (pp. 382-404). Springer, Cham.
Continella, A., Guagnelli, A., Zingaro, G., De Pasquale, G., Barenghi, A., Zanero, S., & Maggi,
F. (2016, December). ShieldFS: a self-healing, ransomware-aware filesystem.
In Proceedings of the 32nd Annual Conference on Computer Security Applications (pp.
336-347). ACM.
Ding, D., Wang, Z., Ho, D. W., & Wei, G. (2017). Observer-based event-triggering consensus
control for multiagent systems with lossy sensors and cyber-attacks. IEEE Transactions
on Cybernetics, 47(8), 1936-1947.
Goode, S., Hoehle, H., Venkatesh, V., & Brown, S. A. (2017). User compensation as a data
breach recovery action: An investigation of the Sony PlayStation Network breach. MIS
Quarterly, 41(3).
Hammill, A. (2017). The rise and wrath of ransomware and what it means for society (Doctoral
dissertation, Utica College).
He, H., & Yan, J. (2016). Cyber-physical attacks and defences in the smart grid: a survey. IET
Cyber-Physical Systems: Theory & Applications, 1(1), 13-27.
He, H., & Yan, J. (2016). Cyber-physical attacks and defences in the smart grid: a survey. IET
Cyber-Physical Systems: Theory & Applications, 1(1), 13-27.

11DATA BREACH
Isozaki, Y., Yoshizawa, S., Fujimoto, Y., Ishii, H., Ono, I., Onoda, T., & Hayashi, Y. (2016).
Detection of cyber attacks against voltage control in distribution power grids with
PVs. IEEE Transactions on Smart Grid, 7(4), 1824-1835.
Kharaz, A., Arshad, S., Mulliner, C., Robertson, W., & Kirda, E. (2016). {UNVEIL}: A Large-
Scale, Automated Approach to Detecting Ransomware. In 25th {USENIX} Security
Symposium ({USENIX} Security 16) (pp. 757-772).
Kharraz, A., Robertson, W., Balzarotti, D., Bilge, L., & Kirda, E. (2015, July). Cutting the
gordian knot: A look under the hood of ransomware attacks. In International Conference
on Detection of Intrusions and Malware, and Vulnerability Assessment (pp. 3-24).
Springer, Cham.
Kolodenker, E., Koch, W., Stringhini, G., & Egele, M. (2017, April). PayBreak: defense against
cryptographic ransomware. In Proceedings of the 2017 ACM on Asia Conference on
Computer and Communications Security (pp. 599-611). ACM.
Liang, G., Weller, S. R., Luo, F., Zhao, J., & Dong, Z. Y. (2018). Distributed blockchain-based
data protection framework for modern power systems against cyber attacks. IEEE
Transactions on Smart Grid.
Liang, G., Weller, S. R., Zhao, J., Luo, F., & Dong, Z. Y. (2017). The 2015 ukraine blackout:
Implications for false data injection attacks. IEEE Transactions on Power Systems, 32(4),
3317-3318.
Liu, J., Wei, L., Xie, X., Tian, E., & Fei, S. (2018). Quantized stabilization for T–S fuzzy
systems with hybrid-triggered mechanism and stochastic cyber-attacks. IEEE
Transactions on Fuzzy Systems, 26(6), 3820-3834.

12DATA BREACH
Liu, S., Wei, G., Song, Y., & Liu, Y. (2016). Extended Kalman filtering for stochastic nonlinear
systems with randomly occurring cyber attacks. Neurocomputing, 207, 708-716.
Liu, X., Li, Z., Shuai, Z., & Wen, Y. (2017). Cyber attacks against the economic operation of
power systems: A fast solution. IEEE Transactions on Smart Grid, 8(2), 1023-1025.
Milburn, C. (2017). Long live play: The PlayStation Network and technogenic life. In Research
Objects in their Technological Setting (pp. 117-134). Routledge.
Rid, T., & Buchanan, B. (2015). Attributing cyber attacks. Journal of Strategic Studies, 38(1-2),
4-37.
Scaife, N., Carter, H., Traynor, P., & Butler, K. R. (2016, June). Cryptolock (and drop it):
stopping ransomware attacks on user data. In 2016 IEEE 36th International Conference
on Distributed Computing Systems (ICDCS) (pp. 303-312). IEEE.
Taha, A. F., Qi, J., Wang, J., & Panchal, J. H. (2018). Risk mitigation for dynamic state
estimation against cyber attacks and unknown inputs. IEEE Transactions on Smart
Grid, 9(2), 886-899.