Supa Security Bro

Ever wonder about that nifty little reader vendors are now using?? According to the vendor it meets the standard to protect you. Check out this link: https://squareup.com/help/en-us/article/3797-secure-data-encryption

Take your time and have a sober assessment of yourself, if you do not feel ready you might not be.

Code of Ethics Canons: Protect society, the commonwealth, and the infrastructure. • Promote and preserve public trust and confdence in information and systems. • Promote the understanding and acceptance of prudent information security measures. • Preserve and strengthen the integrity of the public infrastructure. • Discourage unsafe practice. Act honorably, honestly, justly, responsibly, and legally. • Tell the truth; make all stakeholders aware of your actions on a timely basis. • Observe all contracts and agreements, express or implied. • Treat all members fairly. In resolving conficts, consider public safety  and duties to principals, individuals, and the profession in that order. • Give prudent advice; avoid raising unnecessary alarm or giving  unwarranted comfort.  Take care to be truthful, objective, cautious, and  within your competence. • When resolving differing laws in different jurisdictions, give  preference to the laws of the jurisdiction in which you render your service. Provide diligent and competent service to principals. • Preserve the value of their systems, applications, and information. • Respect their trust and the privileges that they grant you. • Avoid conficts of interest or the appearance thereof. • Render only those services for which you are fully competent and qualifed. Advance and protect the profession. • Sponsor for professional advancement those best qualifed.  All other things equal, prefer those who are certifed and who adhere to these canons.  Avoid professional association with those whose practices or reputation might diminish the profession. • Take care not to injure the reputation of other professionals through malice or  indifference. • Maintain your competence; keep your skills and knowledge current. Give generously of your time and knowledge in training others.

C1 involves discretionary protection, C2 involves controlled access protection, B1 involves labeled security protection and B2 involves structured protection.

The different network models

The noninterference model is to strictly separate differing security levels to assure that higher-level actions do not determine what lower-level users can see.  This is in contrast to other security models that control information flows between differing levels of users,  By maintaining strict separation of security levels, a noninterference model minimizes leakages that might happen through a covert channel.

- The token generates a new unique password value at fixed time intervals (this password could be the time of day encrypted with a secret key). - the unique password is entered into a system or workstation along with an owner's PIN. - The authentication entity in a system or workstation knows an owner's secret key and PIN, and the entity verifies that the entered password is valid and that it was entered during the valid time window.

For Class E, the addresses are 240.0.0.0 - 255.255.255.255  (Reserved for future usage) The lowest Class E address is represented in binary as 11110000.00000000.00000000.00000000

Responsible for access control to the objects by the subjects it compares the security labels of a subject and an object.

Carnegie Mellon University claims CMMI can be used to guide process improvement across a project, division, or an entire organization. Under the CMMI methodology, processes are rated according to their maturity levels, which are defined as: 1. Initial, 2. Repeatable, 3. Defined, 4. Quantitatively Managed, 5. Optimizing.

1. Service Strategy: build a cost effective IT strategy. Find the right balance between performance and cost. Defines what to build and why it is needed. Its output is a business approved, business funded IT strategy. 2. Service Design: design IT services in alignment with Service Strategy. Defines how IT services will be built. Its output is a Service Design Package. 3. Service Transition: build and deploy IT services as specified by Service Design. Build and deploy services with minimal impact to the Production environment. Its output is a Live Application/Service that functions as expected. 4. Service Operations: Deliver and manage services at the agreed levels to business users/customers. Its expected output is managed services with happy customers. 5. Continual Service Improvement: Continual improvement of IT processes and metrics. Prioritize and initiate improvement projects. Its expected output is better metrics of all IT processes - cheaper, faster, better IT services.

Mean time between failures (MTBF) is the estimated lifespan of a piece of equipment. MTBF is calculated by the vendor of the equipment or a third party. The reason for using this value is to know approximately when a particular device will need to be replaced.

Network-based IDS (NIDS) uses sensors, which are either host computers with the necessary software installed or dedicated appliances— each with its network interface card (NIC) in promiscuous mode. Normally, NICs watch for traffic that has the address of its host system, broadcasts, and sometimes multicast traffic. The NIC driver copies the data from the transmission medium and sends them up the network protocol stack for processing. When a NIC is put into promiscuous mode, the NIC driver captures all traffic, makes a copy of all packets, and then passes one copy to the TCP stack and one copy to an analyzer to look for specific types of patterns.

Trade secret law protects certain types of information or resources from unauthorized use or disclosure. For a company to have its resource qualify as a trade secret, the resource must provide the company with some type of competitive value or advantage

Intellectual property is divided into two categories: Industrial property, which includes inventions (patents), trademarks, industrial designs, and geographical indications of source; and Copyright, which includes literary and artistic works such as novels, poems and plays, films, musical works, artistic works such as drawings, paintings, photographs and sculptures, and architectural designs

To ensure that the original image is not modified, it is important to create message digests for files and directories before and after the analysis to prove the integrity of the original image. A bit by bit copy of the original media will be done. Once the copy is done you create a message digest of both the original media and the copy. If both messages digests matches you have a perfect image. The team leader will apply a digital signature on the original drive and also on the image, this way you can demonstrate later on the image was not tampered with.

Administrative laws deals with regulatory standards that regulate performance and conduct