IT Security and Risk Management: Threats, Malware, and Solutions

This report discusses the threats and malware related to IT security and risk management, and proposes solutions to improve the availability and confidentiality of email servers and web services. It also covers the impact of human factors and organizational issues on IS-related security and risk management.

Running head: IT SECURITY AND RISK MANAGEMENT
IT SECURITY AND RISK MANAGEMENT
Name of the Student
Name of the University
Author Note

2IT SECURITY AND RISK MANAGEMENT
Table of Contents
1. Introduction..................................................................................................................................4
2. Ransomware malwares threads against organization Information systems................................4
a. working mechanism of ransomware........................................................................................4
b. Three tools to tackle the ransomware attack............................................................................5
3. Threats against network routers and switches.............................................................................5
How routers and switches are vulnerable to destruction and abuse............................................5
4. Discussion on how the organization can ensure the reliability and availability of the web........7
service..............................................................................................................................................7
5. The ways to ensure confidentiality and integrity of the staff email............................................7
6. Discussion and prioritize the threats and the possible types of malware and security................8
issues related to web mail and webserver........................................................................................8
7. Proposal of two approaches to improve the availability of email servers.................................10
8. Impact of human factors and organizational issues on IS-related security and risk..................11
management...................................................................................................................................11
Risk management recommendations.........................................................................................11
9. Use of logs.................................................................................................................................11
10. Details analysis of activity log.................................................................................................12
11. Five network security devices.................................................................................................12

3IT SECURITY AND RISK MANAGEMENT
12. Conclusion...............................................................................................................................13
13. References................................................................................................................................14

4IT SECURITY AND RISK MANAGEMENT
1. Introduction
The main objective to the report is to take into consideration different aspect which are
related to the security of the different devices which are connected to the internet. There can be
different types of intruder attack which can be included into the working of the organization. In
most of these situation it can be stated that if there are any type of intruder activity it can directly
decrease the quality which is related to the data which is stored in the server (Bichou, 2015). The
aspect of the reliability of the data can be directly be linked with the aspect of the integrity of the
data.
The organization which is selected in the sector is the Atlassian which is an information
technology organization which focus on the aspect of providing better security implication to the
different standard which is related to the concept.
2. Ransomware malwares threads against organization Information systems
a. Working mechanism of ransomware
The concept of ransomware can be considered as a malicious software that directly takes
control of the overall system and directly threatens the system. It can be stated as one of the most
common types of attack which is generated in the system or in the network. Ones there is an
attack relating to ransomware the data of the computer can be at stack. One of the common
working mechanism which is related to the working of the ransomware is the phishing spam. The
attack is mainly generated in the sector of an email which is generated from the attackers which
aim at the controlling of the system. Ones the email is accessed and then downloaded the system
would be consisting of the ransomware or the virus. The concept can also trick the user to take
control of the system and also generate an administrative access of the system.

5IT SECURITY AND RISK MANAGEMENT
b. Three tools to tackle the ransomware attack
The organization which is taken into consideration which is the Atlassian uses different
types of tool relating to the attack which is generated from the ransomware attack. Few of the
tools which are used are discussed below:
 Trend micro’s tool: This tool is directly designed for the aspect of detecting and getting
rid of the ‘lock screen’ ransomware. These type of ransomware directly blocks the user
from accessing the system or the PC. The main action which can be done in the sector is
the installation of the software by means of bypassing the malware by directly booting
the PC into the safe mode.
 Avast anti ransomware tools: It can be stated here that there are different types of
activity which are majorly done in the sector of the working of the ransomware. In most
of the sector there should be an implementation of a decryption which are specially made
for certain type of ransomware.
 AVG ransomware decryption tools: The concept of the AVG directly provides a
decryption tool which is related to the variety of the ransomware. On the other hand,
there is also an offering which is related to the lots of resources and the guide to engage
through the guide of typical attack of ransomware.
3. Threats against network routers and switches
How routers and switches are vulnerable to destruction and abuse.
Some of the threats which are related to the network router in the Atlassian organization are
stated below:

6IT SECURITY AND RISK MANAGEMENT
 Masquerade attack: The attack which is seen in this sector is directly related to the
aspect of attackers manipulating the IP packets to falsify the IP addresses. The attack
which is related to the masquerades can be directly be used for gaining the unauthorized
access or to directly bogus the data into the network.
 Session hijacking: The concept which is related to the aspect of the session hijacking can
be directly be related to the aspect when an attacker insert falsified IP packets after the
establishment of sessions via the concept if the sequence number of prediction, spoofing
and the alteration or any other types of methods (Kott & Arnold, 2015).
 Rerouting attack: The aspect which is related to the concept of the rerouting attack can
be indicated in the sector of manipulating the updates of the router which would be
directly causing the traffic in the channel relating to the flow of the unauthorized
destination.
Some of the threats which are related to the switches in the Atlassian organization are stated
below:
 MAC flooding: In the concept of the MAC flooding it can be stated that there is a flood
in the CAM table with the MAC addresses more than the limitation which is related to
the capacity of the switch. This aspect directly allows the switch to act as a hub which
directly gives the access of the attacker to sniff into the traffic.
 DHCP spoofing: A DHCP snooping attacker directly listened for the DHCP request and
directly gives them the answer. This directly gives the IP address as a default gateway for
the client the attacker then directly becomes the “man in the middle”

7IT SECURITY AND RISK MANAGEMENT
 VLAN based attack: This is when the attacker would be able to access the VLAN other
than its own sector. This can be done in a number of processes which is mainly the A-
Switch spoofing.
4. Discussion on how the organization can ensure the reliability and availability of the web
service.
Reliability
The aspect of the reliability in the concept can be directly be related to the aspect of the
different data which is stored in the concept. It can be stated here that most of the crucial data of
the organization are saved in the concept of the server. In most of the sector it should be taken
into consideration that the data which is stored are not altered and it can be taken into
consideration that the data which is retrieved is very much reliable
Availability
The data which is stored in the sever should be very much be available to be accessed
when it is required to do so. In most of the time it can be stated that there is problem related to
the access of the data which is majorly seen in the issue which is related to the linkage problem.
The situation can be stated as a very big problem for the organization due to the factor that they
would not be able to access the data when they would be requiring to do so. The data should be
very much being available for access whenever the organization would be needing the access and
the sector of the reliability of the data should also be included into the concept (Aven, 2016).
Direct access control mechanism should be included into the aspect of the working so that there
are no problem relating to the access sector of the data.

8IT SECURITY AND RISK MANAGEMENT
5. The ways to ensure confidentiality and integrity of the staff email
The main aspect which can be related to the sector of integrity and confidentiality can be
stated as two of the major points which is related to securing of the email of the employee. It can
be stated that there are different types of approaches which can be implemented in the sector
which would be helping in the sector of the integrity and confidentiality of the data which is
stored in the email. One of the technique which can be implemented in the sector is the use of the
digital signature which can be used for the purpose of the authentication of the data. In steps
which are followed in the sector is the aspect of the generation of a secret keys which can be
directly be used when transferring of the message from the one end to another end. It can be
stated that it prevents the data from being altered or manipulated. The concept is applicable in
the sector of the sender authentication and the concept of the noon repudiation.
Another aspect which can be related to the concept is the encryption of the messages. The
concept can be very much beneficial in the sector of the working due to the factor that the
message can be seen by another person who has directly gained access to the mail. The process
which is followed in the sector is the encryption process and the decryption process. The process
which is related to the encryption and decryption can be done in a two level process which is
explained below.
 Generation of key
 Encryption using the process of RSA algorithm
 Encryption using the concept of the random array method.
 Decryption using the concept of the random array methods
 Decryption using the RSA algorithm.

9IT SECURITY AND RISK MANAGEMENT
6. Discussion and prioritize the threats and the possible types of malware and security
issues related to web mail and webserver
There can be different types of malware which are related to the concept of web mail and
the mail server. The malwares are explained below:
 DoS threat: The damage which is related the DoS attack can be stated to be very much be
overstated. The sector can be applicable both in the sector of the send mail as well as the
unsent mails (DeAngelo & Stulz, 2015). The main sector which is related to the concept
of the prevention is that there should be limited possible connection to the server which is
related to the SMTP.
 Stability of the server and the performance: In this concept it can be stated that whenever
the term performance and server, the aspect of the load balancing can be taken into
consideration. In most of the cases it can be stated that if the server was attacked and the
working is abounded there should be implementation of another plan which is known as
the reserve server.
 Ignoring best practice: one of the most vital sector which can be related to the concept is
that there should not be saving of any crucial data in the network which can directly harm
the overall functionality of the server.
The security aspect which can be related to the concept are stated below:
 Unauthorized access of the data: The data which is stored in the serve of the mail can be
accessed by anyone which is termed as unauthorized access. This can be termed as
security issue due to the factor that if the unauthorized access is made it can directly

10IT SECURITY AND RISK MANAGEMENT
impact the overall functionality which is related to the organization and the crucial data
of the organization can go into the hand of the attackers.
 Threat to data leakage: One of the most important sector which ca be related to the factor
of security is the data leakage (Safa, Von Solms & Furnell, 2016). Then main motive
which is behind the attackers in the sector of the access to the system would be gain the
personal data which is saved in the system. The main data which is tried to be achieved
rom the concept is the username, password and other personal details. The main
mitigation aspect which can be related to the concept is the SMTP, POP3 and IMAP
protocols should be directly be encrypted with the SSL/TLS.
7. Proposal of two approaches to improve the availability of email servers
Two different approach which are related to the improving of the availability of the email
server. The organization Atlassian can directly include the following strategies which would be
beneficial in the sector.
SPF record: The sender policy framework can be directly implemented in the sector
which would be directly enhancing the sector of the availability of the email server. On the other
hand, it can be also used for the sector of authentication as well. It directly helps the organization
to indulge into different factor of working which would be beneficial in the working of the
organization and in most of the cases it can directly alter the overall working which is seen in the
concept (Eriksson, 2017). The concept can be stated to be very much beneficial in the sector of
the implementation of the mail server.

11IT SECURITY AND RISK MANAGEMENT
Figure 1: (CREATION OF SPF FILE ON NETWORK)
(SOURCE: Rittinghouse & Ransome, 2016)
Reverse DNS: The concept which is related to the DNS can be beneficial in the sector of
the maintaining the aspect of the generation of the sequence which is related to the concept of the
operation. Whenever a sever of mail receives a connection from a particular IP address, it
directly performs the function of reverse DNS which would be beneficial in the sector of the
connection and increase the availability of the mail server.
Figure 2: (REVERSE DNS)

12IT SECURITY AND RISK MANAGEMENT
(SOURCE: Rittinghouse & Ransome, 2016)
8. Impact of human factors and organizational issues on IS-related security and risk
management
Risk management recommendations
The main aspect which is information of the security is that the employee should be very
much aware of the different aspects of the security (Rittinghouse & Ransome, 2016). Data
security is the factor which play an important role in the organization would be secured and how
the different aspects of the operation can be properly implemented. Taking into consideration the
employee it should be taken into consideration that training is given to the employee so that they
can easily indulge into the different aspect of the working which is seen in the sector of the
working.
The main recommendation which can be stated in this sector is stated below:
Recommendation 1: The employee should be informed of the different security policies
Recommendation 2: The employee should be well aware of what step has to be taken if there is
any situation of risk engaged in the working.
Recommendation 3: The employee should have a clear idea of the working which is related to
the context of the working which would be included into the concept of the working of the
organization.
9. Use of logs
The concept of log record can be very much beneficial in the sector of the getting the
overall track of the different activity which is related to the concept. In most of the cases it can

13IT SECURITY AND RISK MANAGEMENT
be very much beneficial in the sector of the monitoring of the traffic which is related to the
internet. The aspect can be very much beneficial in the sector of the security due to the factor
that unauthorized access to the data would not be possible so that there are no problem relating to
the security aspect of the data (Bjerga & Aven, 2016). The record of the event would be directly
helpful to get an overall idea of the different sections which is related to the concept. The overall
monitoring of the different aspect of the web server can be easily be done in the sector which
would be helpful in the different types of security implication.
10. Details analysis of activity log
The aspect of the audit log report can be directly helped in the sector of the working
which would be beneficial in the sector of the long term problem. The main reason behind it can
be that it can be used for the security aspects so that there is different sector of implementation
which is done in the sector of the working. Moreover, it ca be stated that there are different
aspects which can be related to the concept of the security. In most of the cases the maintaining
of the system can also be done quite easily in the sector of the working of the organization.
11. Five network security devices
There can be different types of network security devices which can be directly be
implemented. Few of the colors in the sector are stated below:
 Firewall: It can be stated as a protection measure which can be implemented in the sector
of the operation which can be restricting the unwanted packets to be implemented in the
network.
 Antivirus: It can be considered as a tool which is related to the detection and the removal
of the malicious software.

14IT SECURITY AND RISK MANAGEMENT
 Content filtering: The concept takes control of the different aspects which is related to the
web pages and the email. The main aspect which can be related to the concept is the
security of the email and the webpages.
 IDS: The IDS stands for intrusion detection section which prevents the application of the
malicious activity in the network.
 Packet control: This mainly takes control of the different packets and how it is directly
controlled.
12. Conclusion
In the aspect of the IT security and risk management there are security aspects which can
be involved into the working of an organization. The most important factor is that the risk factors
should be identified and the working relating to the risk should be done in a manner which would
be directly affecting the overall working of the organization. The detection of the risk factor
using the concept of the risk management is recommended in the report.

15IT SECURITY AND RISK MANAGEMENT
13. References
DeAngelo, H., & Stulz, R. M. (2015). Liquid-claim production, risk management, and bank
capital structure: Why high leverage is optimal for banks. Journal of Financial
Economics, 116(2), 219-236.
Rittinghouse, J. W., & Ransome, J. F. (2016). Cloud computing: implementation, management,
and security. CRC press.
Aven, T. (2016). Risk assessment and risk management: Review of recent advances on their
foundation. European Journal of Operational Research, 253(1), 1-13.
Peltier, T. R. (2016). Information Security Policies, Procedures, and Standards: guidelines for
effective information security management. Auerbach Publications.
Kott, A., & Arnold, C. (2015). Towards Approaches to Continuous Assessment of Cyber Risk in
Security of Computer Networks. arXiv preprint arXiv:1512.07937.
Eriksson, J. (2017). Threat Politics: New Perspectives on Security, Risk and Crisis Management:
New Perspectives on Security, Risk and Crisis Management. Routledge.
Coker, C. (2014). Globalisation and Insecurity in the Twenty-first Century: NATO and the
Management of Risk. Routledge.
Fennelly, L. (2016). Effective physical security. Butterworth-Heinemann.
Gai, K., Qiu, M., & Elnagdy, S. A. (2016, April). Security-aware information classifications
using supervised learning for cloud-based cyber risk management in financial big data. In Big
Data Security on Cloud (BigDataSecurity), IEEE International Conference on High

16IT SECURITY AND RISK MANAGEMENT
Performance and Smart Computing (HPSC), and IEEE International Conference on Intelligent
Data and Security (IDS), 2016 IEEE 2nd International Conference on (pp. 197-202). IEEE.
Bichou, K. (2015). The ISPS code and the cost of port compliance: an initial logistics and supply
chain framework for port security assessment and management. In Port Management (pp. 109-
137). Palgrave Macmillan, London.
Sadgrove, K. (2016). The complete guide to business risk management. Routledge.
Webb, J., Ahmad, A., Maynard, S. B., & Shanks, G. (2014). A situation awareness model for
information security risk management. Computers & security, 44, 1-15.
Lord, D., & Washington, S. (2018). Introduction. In Safe Mobility: Challenges, Methodology
and Solutions (pp. 1-10). Emerald Publishing Limited.
Nazareth, D. L., & Choi, J. (2015). A system dynamics model for information security
management. Information & Management, 52(1), 123-134.
Mayer, N., Grandry, E., Feltus, C., & Goettelmann, E. (2015, June). Towards the ENTRI
framework: security risk management enhanced by the use of enterprise architectures.
In International Conference on Advanced Information Systems Engineering (pp. 459-469).
Springer, Cham.
Sillaber, C., & Breu, R. (2015, June). Using stakeholder knowledge for data quality assessment
in is security risk management processes. In Proceedings of the 2015 ACM SIGMIS Conference
on Computers and People Research (pp. 153-159). ACM.
Safa, N. S., Von Solms, R., & Furnell, S. (2016). Information security policy compliance model
in organizations. Computers & Security, 56, 70-82.

17IT SECURITY AND RISK MANAGEMENT
Bjerga, T., & Aven, T. (2016). Some perspectives on risk management: A security case study
from the oil and gas industry. Proceedings of the Institution of Mechanical Engineers, Part O:
Journal of Risk and Reliability, 230(5), 512-520.