Host and Application Security

Running head: HOST AND APPLICATION SECURITY
Host and Application Security
Name of the Student
Name of the University
Author’s Note:

1
HOST AND APPLICATION SECURITY
Table of Contents
Question 1..................................................................................................................................2
Question 2..................................................................................................................................3
Question 3..................................................................................................................................4
Question 4..................................................................................................................................5
Question 5..................................................................................................................................6
References..................................................................................................................................7

2
HOST AND APPLICATION SECURITY
Question 1
Contrasting Access Control for Risks, Threats and Vulnerabilities
i) The access control in respect to threats can be demonstrated for two types of threats,
which are internal threats and external threats. The internal threats occur from the individuals,
who have legalized access like employees or other personnel of a company. It is quite
difficult to prevent or detect them as they have legalized access to the systems (Yang et al.
2013). These insiders could easily misuse the IT resources of that organization for performing
the port scans outside the initiate attacks within that company. Moreover, they could access,
process as well as distribute the unauthorized information such as secret trade and salary. The
best measure for controlling the access of these threats is using passwords within the systems.
The outside intruders are hackers or attackers, who can misuse or attack the systems
or networks (Lee, Chung & Hwang, 2013). The hackers gain the confidential password by
usually running a password cracking application. Using encryption technique for the
messages is the easiest access control for this threat.
ii) Access control for risks like unauthorized disclosure of information, confidential
and sensitive information leading to the loss of credibility, is by involving encryption and
virtual private networks within the organization.
iii) Access control for vulnerabilities such as viruses is the implementation of
firewalls and antivirus software (Yang, Jia & Ren, 2013). The proper implementation of
firewall and antivirus software easily stops the vulnerability without much complexity.