Must be at least 100 words each

1) Chapter 19 Firewalls

Firewalls are used to prevent unauthorized Internet users from accessing your networks by using a hardware and/or software system that prevents unauthorized access. The text pointed out three common firewalls protection; Packet Filtering, Stateful Inspection and Proxy Firewall. Packet Filtering (original firewall protection) operates with devices such as routers and switches for protection. This type of firewall doesn't route packets, but compares the packets. Packets that are flagged as troublesome are not forwarded. Stateful Inspection examine each packet and track to see if its part of an established TCP session. This a multilayer inspection firewall, which considers the flow of transactions in process across multiple layers of the ISO model. Lastly, Proxy offers more security than the other firewalls but at the expense of speed and functionality. With Proxy offering a inclusive, protocol-aware security inquire allows to make the best security decision, not just focusing on packet header information.

2) Chapter 19 Phishing

Phishing is a way of gaining information by posing as a legitimate site or message. So the Banc of America email requesting your password may look very convincing but it's not from Bank of America. The text suggesting checking link URLs and doing investigation before giving personal information to any site or email response. People of any age can fall victim, but I've noticed this particularly successful with older users. I've had to have the, no true site is going to email you to request your username or password ever, talk a few times with people. One scam my father let me know about starts with the phone, the call comes in that your service provider has noticed an issue with your computer and will need to get your credentials to resolve. Now, my father doesn't own a computer so he's able to brush it off but he admits that he can see how his peers can fall for these calls.

3) Chapter 19 Biometrics:

With the passing of time, the definition of biometrics is expanding from simply identifying physical attributes about a person to being able to describe patterns in their behavior" (Docter, Dulaney, & Skandier, 2016, p. 898). Out of many of the prevention methods this one appears to be one the strongest methods if not the strongest one. Considering that biometrics uses devices such as finger print, retinal scanners, hand scanners, and etc it makes it to where if you don't have the right physical characteristics you won't gain access to the data. Many businesses go this route to either stop people from getting in or only allow certain pain to have access in certain areas within the building. I'm looking forward to seeing how much further biometrics pushes the envelope in the future.

4) Chapter 19: Understanding Authentication

Hello class and Welcome to WEEK 1.

Lets get started by diving into our reading for this week.

Chapter 19 talks about Biometric authentication and Multifactor authentication.

Video Tutorial Below – Biometric Authentication – 8 Minutes:

Class, what are the correlation and differences between the two types of authentication? Please be thorough in your responses.

5) Chapter 22: Companies and their changes:

Hello class,

Lets talk about changes.

When you talk to a customer you might say, "Have any other changes been made to the computer recently?" If the answer is yes, ask if the user can remember approximately when the change was made. Then ask them to tell you approximately when the problem started. If the two dates seem related, there's a good chance that the problem is related to the change. If it's a new hardware component, check to see that it was installed correctly.

Class, do you think companies should have a change control policy in place? Why or why not?

6) Chapter 22: Gathering Information

This can be the most difficult part of the process for both the support provider and the customer. The text references the classic, my computer's not working, customer. The support agent definitely needs more information to move forward. However, the way we ask for it can have a big impact on the quality of the information we get and the customer experience. Many people are intimidated by computers and so if the support agent jumps into jargon the customer may have no idea how to answer the questions and give up. By contrast, if the customer has to explain basic functionality to the support agent, then they lose confidence in the support process. It is important to be both knowledgeable and a good listener at this stage to get the best information possible.

7) Pluralsight: Common Security Threats : Bots

Bots can be used for either good or malicious intent. A malicious bot is self-propagating malware designed to infect a host and connect back to a central server or servers that act as a command and control (C&C) center for an entire network of compromised devices, or "botnet." With a botnet, attackers can launch broad-based, "remote-control," flood-type attacks against their target(s). In addition to the worm-like ability to self-propagate, bots can include the ability to log keystrokes, gather passwords, capture and analyze packets, gather financial information, launch DoS attacks, relay spam, and open back doors on the infected host. Bots have all the advantages of worms, but are generally much more versatile in their infection vector, and are often modified within hours of publication of a new exploit. They have been known to exploit back doors opened by worms and viruses, which allows them to access networks that have good perimeter control. Bots rarely announce their presence with high scan rates, which damage network infrastructure; instead they infect networks in a way that escapes immediate notice

8) Social engineering

Besides vulnerabilities in software and loopholes in operating systems that can leverage malicious attacks, one other serious security threat is Social Engineering attacks. There are many forms of social engineering attacks and it happens only in places where human interactions are involved. Social Engineering techniques mainly relies or human error and also manipulating legitimate user to perform some sort of illegal activity. Some of the commonly used social engineering techniques are Phishing, Baiting, Spear Phishing, Shoulder Surfing, and Tailgating. For example, Tailgating is a simple tactic where the attacker seeking unauthorized entry to a restricted area. It is by simply walking behind an authorized user through security doors protected by access card entry. Best practice to prevent social engineering is to educate the users how to identify such an event and how to handle it appropriately.