Case Study 2: Using an E-mail Address to Determine a Networkâ€™s Operating System
Lui Guadalupe Corporation has multiple OSs running in its many offices. Before conducting a security test to determine the vulnerabilities you need to correct, you want to determine whether any OSs are running that youâ€™re not aware of. Ana Cruz, the network administrator/security officer, is resistant to giving you information after he learns youâ€™re there to discover network security vulnerabilities. He sees you as a threat to his position. After several hours of interviews, you can ascertain only that Mikeâ€™s personal e-mail address is email@example.com, and an old RHEL server is running on one of the companyâ€™s systems.
Based on this information, answer the following questions:
1. What tools might you use after learning Mikeâ€™s e-mail address?
2. What can you determine by entering Mikeâ€™s e-mail address into Google? What about just the handle â€œvetman2601â€?
3. Could the information you learned from Google be used to conduct vulnerability testing?
Write a memo to the IT manager, Greg Jones, about the potential issues with running an old RHEL 5.8 server and mention the importance of patch hygiene. Make sure your memo explains how you gathered this information and offers constructive feedback. Your memo shouldnâ€™t point a finger at any company employees; it should discuss problems on a general level.
Case Study 3: Using Dumpster-Diving Skills
You have observed that Luis Guadalupe Corporation uses Lisaâ€™s Cleaning Company for its janitorial services. The companyâ€™s floors are vacuumed and mopped each night, and the trash is collected in large bins placed outside for pickup on Tuesdays and Fridays. You decide to visit the dumpster Thursday evening after the cleaning crew leaves. Wearing surgical gloves and carrying a large plastic sheet, you place as much of the trash on the sheet as possible. Sorting through the material, you find the following items: a company phone directory; a Windows NT training kit; 23 outdated Oracle magazines; notes that appear to be programs written in HTML, containing links to a SQL Server database; 15 company memos from key employees; food wrappers; an empty bottle of expensive vodka; torn copies of several resumes; an unopened box of new business cards; and an old pair of womenâ€™s running shoes.
Based on this information:
- Write a two-page report explaining the relevance these items have.
- What recommendations, if any, might you give to Luis Guadalupe management?
The assignment should have the following structure:
- Cover Page.
- Case Studies.
- Questions and answers.
- Memo Page as stated in the case study. Please follow the instructions of the memo page.
- Two-page report.
- Recommendations to Luis Guadalupe Management.
Please submit by the established due date September 10th, 2019 8:00pm