Skip to main content

Case Study - Method

Source: https://www.google.co.uk/url?sa=i&url=https%3A%2F%2Fwww.facebook.com%2Fmethoduk%2F&psig=AOvVaw1TjPOsSrMz-Vs9czJ_mxRc&ust=1685998095949000&source=images&cd=vfe&ved=0CBAQjRxqFwoTCJCq48K-qv8CFQAAAAAdAAAAABAj

Method

The methodology employed in the case study described in the book "Cyber Security: Case Study" reflects a systematic and meticulous approach to ethical hacking. This section outlines the key steps and processes undertaken by the ethical hacking team to assess the organization's cybersecurity measures.

The first step in the methodology involved the selection of a qualified and experienced ethical hacking team. The team's expertise in various aspects of cybersecurity, such as network security, web application security, and social engineering, ensured a comprehensive assessment across different attack vectors. Careful consideration was given to the team's certifications, qualifications, and track record of successful engagements.

Next, the scope of the ethical hacking engagement was defined in close collaboration with the organization. This involved identifying the systems, applications, and infrastructure that would be included in the assessment. Clear objectives and goals were established to guide the ethical hacking team throughout the process.

Once the scope was defined, the team conducted a thorough reconnaissance phase to gather information about the organization's infrastructure and potential entry points for attacks as it was discussed in my previous blog on methodologies. This phase involved passive information-gathering techniques, such as open-source intelligence (OSINT) research and footprinting, to gain a deeper understanding of the organization's digital footprint.

Following the reconnaissance phase, the team proceeded with active scanning and vulnerability assessments. This involved utilizing specialized tools and techniques to identify potential vulnerabilities in the targeted systems and applications. Vulnerability scanning tools were employed to identify known vulnerabilities, while manual testing was conducted to uncover any new or undisclosed vulnerabilities that could be exploited.

In addition to technical assessments, the methodology included social engineering tests to evaluate the organization's resilience against human manipulation and phishing attacks. This simulated real-world scenarios where employees were targeted through email or phone interactions to assess their awareness and adherence to security policies.

Throughout the entire assessment, strict adherence to ethical and legal considerations was paramount. The team ensured that all activities were conducted within the confines of the law and with the organization's consent. Confidentiality and data protection measures were also upheld to safeguard the organization's sensitive information.

REFERENCES

PWC (2019). Cyber Security Case Study. Retrieved from https://www.pwc.co.uk/who-we-are/purpose/schools-toolkit/materials/business-case-study-challenges/case-study-1-student-information-pack.pdf [Accesed on 6th May 2023]

Comments

Post a Comment

Popular posts from this blog

Software (Example) - Kali Linux

Now I would be showing an example of how to use Kali Linux. Kali Linux is mainly a command-line OS so what you can see down here is a terminal which is where you enter the commands. There is an example of a command I entered in the terminal contained in the YELLOW BOX  the purpose of the command is to change the user from user perfect to user root which is an admin user with all access. The area contained in a RED BOX tells you the current user mode you are in and your current directory. Now to File , when you click on the files button as shown below it brings many options to choose from like open a new tab, close the tab or quit. The next is Actions , when you click on the actions button it also brings options like clear active terminal, find, split terminal horizontally or vertically, and so on. The next is Edit , which allows you to choose from options like copy, paste and zoom. Although all these can be done with command shortcuts these are alternatives. The View button, as...
Post a Comment
Read more

Software (Overview) - Kali Linux

    Kali Linux. https://www.generacionyrd.com/wp-content/uploads/2020/08/KALI-LINUX.jpg What type of software is it? I would be talking about a software called Kali Linux which is highly useful software in ethical hacking. Kali Linux is a Debian-based Linux distribution specifically designed for digital forensics and penetration testing. It is a specialized operating system built for security professionals and enthusiasts which makes it a system software. What is the general purpose of the software? The general purpose of Kali Linux is to provide a comprehensive platform for conducting penetration testing, vulnerability assessments, digital forensics, and security auditing. It offers a wide range of tools and utilities that aid in analysing systems for potential vulnerabilities and identifying security weaknesses. What is its application area? The primary application area of Kali Linux is in the field of cybersecurity. It is used by security professionals, ethical hackers, and...
Post a Comment
Read more

ESSAY (MAIN BODY)

Hi, in this blog I would be showing you my essay's main body. The body talks more about AI in endpoint security and its functionalities/application in endpoint security. It also touches on the benefits of AI in endpoint security. 
Post a Comment
Read more