Identify a major cloud breach of a U.S.-based company that has occurred in the recent past (within the last five years). use Cloud Breach of a U.S Company- (Target Inc and Neiman Marcus). In an 8 page critical evaluation of your chosen breach, review and
Running Head: MANAGING THE CLOUD 1
MANAGING THE CLOUD 2
Cloud Breach of a U.S- Based Company
Target Corp, Neiman Marcus, and Target Inc are three companies whose networks were breached over the holiday shopping season in 2014. I chose this topic because security breaches are becoming more prevalent in the U.S. Research shows that in recent years, retailers have improved their security, making it more difficult for hackers to obtain credit data using other approaches. In the 2014 attack, the main technique used by the attackers is through pieces of malicious software to steal data. One of the pieces of malware used is RAM scraper, or memory- parsing software which enables cyber criminals to grab encrypted data by capturing it when it travels through the live memory of a computer, where it appears in plain text.
I. Analyze and review of the breach of Target/Neiman Marcus
i. Analysis of the breach taken place
II. How did the breach take place and what went wrong?
i. Reasons for the breach
ii. When the breach took place
III. Parties responsible for the breach
i. Cyber criminals
ii. Method used by culprits to successfully carryout the breach:
a. Malicious software such as RAM scraper, or memory-parsing which allow the encryption of data
IV. How could the breach have been prevented
i. Steps that should have been taken to prevent it
V. Preventions taken to avoid future attacks
i. Steps to be taken to ensure and avoid attacks
VI. Conclusion
References
Arlitsch, K., & Edelman, A. (2014). Staying safe: Cyber security for people and organizations. Journal of
Library Administration, 54(1), 46-56.
Hughes, J. (2014). Data breeches in the cloud: Who is responsible? Retrieved from
http://mashable.com/2014/01/10/target-70-million-data-breach/#wxQQQFa6aaqq
Khodabacchus, M. Y., Soyjaudah, K. M. S., & Ramsawok, G. (2016). Fingerprint code authentication
protocol on cloud. In Emerging Technologies and Innovative Business Practices for the
Transformation of Societies (EmergiTech), IEEE International Conference on (pp. 162-166). IEEE.
Manworren, N., Letwat, J., & Daily, O. (2016). Why you should care about the Target data
breach. Business Horizons, 59(3), 257-266.
Watkins, B. (2014). The impact of cyber attacks on the private sector. Briefing Paper, Association for
International Affair, 12.
Wilkinson, C. (2013). CYBER RISKS: THE GROWING THREAT. Target data breech
Wong, A., Liu, V., Caelli, W., & Camtepe, S. (2014). Dataset validation within big data security architecture.