Saturday, March 9, 2019

Ipremier and Denial of Service Attack †Case Study Essay

In a recent development Management lecture we went through the fiber of iPremier (read the full case) which is a normal case study from Harvard Business School. It was a made up case but the recent high profile hacking stories ( such as Gawker) show that companies argon not taking earnest seriously.The background is that iPremier suffered a DOS glide slope in the middle of the night which caused chaos in the company. After an time of day the attack stopped and the company went back to business as normal. ii weeks later another DOS attack was spawned from the companys waiter directed at a opponent which proved that their horde had been compromised. The FBI became involved, the competitor threatened to sue and the city analysts were thinking of downgrading the stock.Our role was to come up with recommendations as to how the processes and plans could be improved for the future. Keeping in mind that the security is about more than just technology we needed to brainstorm most p eople and processes as well.1. People and processesDevelop a business perseverance plan (test it end to end including suppliers and keep it updated) Develop an IT governance textile that includes security in its remit Develop clear reporting lines mitigate training for emergenciesTrust your technical leaders and make sure they ware the resources to lead in a crisisMake security part of scheme necessitate an independent audit team who report into the boardHire a security and risk expertDevelop a reveal relationship with your hosting provider2. TechnologyAvoid single points of failure. Separate the server stack so that database, web and file servers are not on the same network Use a reputable hosting provider with a world class infrastructure and support Make sure exclusively your software is up to dateUse a combination of hardware and or software firewallsBackup and redundancy planning and testing bustling monitoringStrong one-way encryption of passwordsUse open auth systems s uch as Facebook connect

No comments:

Post a Comment