Final Assignment – Fab Futures Cybersecurity¶
Analyze and Harden the Vulnerabilities of a Computing System¶
Introduction¶
Cybersecurity is important for protecting computing systems, data, and users from cyber threats. This assignment focuses on analyzing common vulnerabilities in a computing system and applying security measures to improve protection, resilience, and safe usage.
1. System Selected for Analysis¶
Computing System: School/Organization Computer Network
The system consists of computers, servers, network devices, applications, and users who access digital resources for teaching, administration, and communication.
2. Identified Vulnerabilities¶
1. Weak Authentication and Password Practices¶
Risk:
Weak or reused passwords can allow attackers to gain unauthorized access. Lack of multi-factor authentication increases account compromise risk.
Example: An attacker obtains a user’s password through phishing and accesses confidential files.
Hardening Measures:¶
Use strong and unique passwords. Enable multi-factor authentication (MFA). Conduct password security awareness training.
2. Human-Centric Security Risks¶
Risk:
Users may click malicious links, open harmful attachments, or share sensitive information accidentally.
Example: An employee receives a fake email pretending to be from an administrator and provides login details.
Hardening Measures:¶
Provide regular cybersecurity awareness training. Encourage reporting of suspicious activities. Develop a strong cybersecurity culture.
3. Unpatched Software and System Vulnerabilities¶
Risk:
Outdated operating systems and applications may contain security weaknesses.
Example: Attackers exploit an old software vulnerability to install malware.
Hardening Measures:¶
Regularly update and patch software. Remove unnecessary applications. Use vulnerability scanning tools.
4. Data Leakage Through AI Tools¶
Risk:
Users may unknowingly share confidential information with AI tools such as ChatGPT or other GenAI applications.
Example: A user uploads private organizational documents to an AI tool for analysis.
Hardening Measures:¶
Create policies for safe AI usage. Avoid entering sensitive information into public AI systems. Train users on responsible AI practices.
3. Cyber Resilience Measures¶
To improve cyber resilience, the organization should:
Maintain regular data backups. Develop incident response plans. Monitor systems using logs and security tools. Conduct cybersecurity drills and training. Ensure quick recovery after cyber incidents.
4. Creating a Cybersecurity Culture¶
Desired User Behaviors:¶
Follow security policies. Report suspicious activities. Protect passwords and confidential information.
Supporting Values:¶
Responsibility for digital safety. Awareness of cyber risks. Commitment to protecting organizational resources.
Implementation Mechanisms:¶
Regular cybersecurity training. Leadership support. Rewarding positive security behaviors. Clear consequences for unsafe practices.
5. Conclusion¶
Analyzing and hardening vulnerabilities requires both technical solutions and responsible human behavior. A secure computing system combines strong authentication, updated software, safe data practices, and cybersecurity awareness. Building cyber resilience ensures that the organization can prevent, respond to, and recover from cyber threats effectively.