Running Head: SECURITY LAWS e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e
e e e e e e e e e e e e e e e e e e e e e e e e e e e 1
IT 552 : Module One Assignment
SNHU
e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e SECURITY LAWS e e e e e e e e e e e e e e e e e e e e e e e e e e e
e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e 2
Suspect – Fujie Wang
Security laws
A number of security laws exist that relate to the criminal activities that were carried
out by Fujie Wang and his hacking team. As per security laws, business undertakings need to
protect the sensitive and confidential data and information relating to the business activities
and customers. The CIA triad can be implemented by business firms so that the core security
elements such as confidentiality, integrity and availability of information security can be
maintained (What is confidentiality, integrity, and availability (CIA triad)? - Definition from
WhatIs.com, 2019). It is a well-known security policy that needs to be employed by business
undertakings so that the vulnerability of firms can be managed. Such laws have been designed
so that the scope of cyber criminals like Wang can be reduced in the best way possible
(University, 2019).
Description of the committed crimes by Fujie Wang
Fujie Wang was involved in the conspiracy to commit fraud and other related activities
that are linked to computers and technology. He was basically the member of a hacking group
in China that carried out a number of intrusion campaigns. These intrusion campaigns
primarily targeted the computer systems of large business undertakings from the United States
of America. It has been alleged that between February 2014 and January 2105, the group
along with Wang hatched the conspiracy to intentionally access the computer networks for
stealing confidential data and information of almost 78.8 million people (Wanted by FBI-
FUJIE WANG, 2019). Some of the details that that stolen by the group include the names,
date of births, the health identification numbers, addresses, Social Security Numbers and
employment information. After such confidential information had been stolen, they were kept
in encrypted files and sent to a number of Chinese destinations.
e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e SECURITY LAWS e e e e e e e e e e e e e e e e e e e e e e e e e e e
e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e 3
Exploited security vulnerabilities
The cyber-attacks that were carried out by Fujie Wang and his group basically
exploited the vulnerability that arse due to the existence of out-dated security system. For
example, Wang was involved in hacking the popular health insurance giant Anthem Inc. This
cyber-attack which jolted the health sector took place as the business undertaking failed to
take the necessary steps to protect the confidential business information and the customer data
(Newman et al., 2019). e e
According to experts, the security vulnerability arose due to the lack of protection of
data in computers by using encryption (Anthem Hacking Points to Security Vulnerability of
Health Care Industry, 2019). Even though the firm had safeguarded medical information
through encryptions while sharing these details and information outside of the business
database, it failed to implement the same security model while operating inside its very own
Information Technology infrastructure (Anthem Hacking Points to Security Vulnerability of
Health Care Industry, 2019). Thus the various cyber-attacks in which Fujie Wangwas
involved, security vulnerabilities arose due to the lack of implementation of a robust and
upgraded cyber security model.
Proposal relating to incident precautions
In order to prevent such an incident from repeating, a number of precautionary
measures can be taken. For example, business undertakings need to employ updated cyber
security models so that the opportunity before cyber criminals and attackers can be reduced.
Most of the time online attackers are able to get an unauthorized access to the computer
systems of business entities due to the lack of a proper cyber security framework. Thus there
is the need to regularly upgrade the security model, protect sensitive data and information
through encryption and train the employees on various cyber security strategic approaches.
e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e SECURITY LAWS e e e e e e e e e e e e e e e e e e e e e e e e e e e
e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e 4
Such a cyber security approach can be implemented so that the hacking incidents that were
carried out by Fujie Wang and his team can be avoided in the near future. In addition to this,
there is the need for business entities to flow the security guidelines and standards that have
been established in the respective industries. By following the guidelines, business firms can
strengthen their cyber security framework and minimize their security vulnerability in the
process (Wanted by FBI- FUJIE WANG, 2019).
e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e SECURITY LAWS e e e e e e e e e e e e e e e e e e e e e e e e e e e
e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e 5
References
Anthem Hacking Points to Security Vulnerability of Health Care Industry. (2019). Retrieved
from https://www.nytimes.com/2015/02/06/business/experts-suspect-lax-security-left-
anthem-vulnerable-to-
hackers.html?action=click&module=RelatedCoverage&pgtype=Article®ion=Footer
University, G. (2019). Confidentiality, Integrity, and Availability (CIA) triad | CCNA Security.
Retrieved from https://geek-university.com/ccna-security/confidentiality-integrity-and-
availability-cia-triad/
Newman, L., Lapowsky, I., Tufekci, Z., & Barrett, B. (2019). Indictment Alleges Who Hacked
Anthem, but Not Why. Retrieved from https://www.wired.com/story/anthem-hack-
indictment-china/
What is confidentiality, integrity, and availability (CIA triad)? - Definition from WhatIs.com.
(2019). Retrieved from https://whatis.techtarget.com/definition/Confidentiality-integrity-
and-availability-CIA
Wanted by FBI- FUJIE WANG. (2019). Retrieved from https://www.fbi.gov/wanted/cyber/fujie-
wang/@@download.pdf
